lets get this unpriv'd

2024-08-07 10:59:21 -05:00 · 2024-08-07 10:59:21 -05:00 · b866a00358
commit b866a00358
parent ad357e1cb2
1 changed files with 11 additions and 2 deletions
--- a/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml
+++ b/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml
@ -82,11 +82,13 @@ spec:
              - secretRef:
                  name: qbittorrent-secret
            securityContext:
-              allowPrivilegeEscalation: true
+              allowPrivilegeEscalation: false
              capabilities:
                add:
                  - NET_ADMIN
-              privileged: true
+                drop:
+                  - ALL
+              # privileged: true

          port-forward:
            image:
@ -155,3 +157,10 @@ spec:
          qbittorrent:
            app:
              - path: /data/nas-media
+      qbtun:
+        type: hostPath
+        hostPath: /dev/net
+        advancedMounts:
+          qbittorrent:
+            gluetun:
+              - path: /dev/net