From 8c43a0594ca0c0f2313d29fdd51b0bb29e568d3d Mon Sep 17 00:00:00 2001
From: Aleksandr Kurlov <akurlov@redhat.com>
Date: Wed, 1 Apr 2026 15:50:57 +0200
Subject: [PATCH] Disable allowPrivilegeEscalation

---
 deploy/charts/emailsender/templates/emailsender.yaml    | 2 ++
 deploy/charts/fleetshard-sync/templates/deployment.yaml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/deploy/charts/emailsender/templates/emailsender.yaml b/deploy/charts/emailsender/templates/emailsender.yaml
index 4461990dbb..9af7ff90f8 100644
--- a/deploy/charts/emailsender/templates/emailsender.yaml
+++ b/deploy/charts/emailsender/templates/emailsender.yaml
@@ -22,6 +22,8 @@ spec:
         - name: emailsender
           image: "{{ .Values.image.repo }}:{{ .Values.image.tag }}"
           imagePullPolicy: IfNotPresent
+          securityContext:
+            allowPrivilegeEscalation: false
           command:
             - /acscs/emailsender
           env:
diff --git a/deploy/charts/fleetshard-sync/templates/deployment.yaml b/deploy/charts/fleetshard-sync/templates/deployment.yaml
index bc772883b3..ed95f0ba05 100644
--- a/deploy/charts/fleetshard-sync/templates/deployment.yaml
+++ b/deploy/charts/fleetshard-sync/templates/deployment.yaml
@@ -43,6 +43,8 @@ spec:
         {{- end }}
         {{- end }}
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
         command:
         - /usr/local/bin/fleetshard-sync
         env: