RELEASE 1.5][BACKPORT] Run queue proxy with restricted profile (knati…

…ve#1283) * Run queue proxy with restricted profile (knative#13376) * allow user workloads to run with restricted profile * only change queue proxy * remove seccomp
skonto · Nov 15, 2022 · ed15f28 · ed15f28
1 parent ea1f8f3
commit ed15f28
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/reconciler/revision/resources/queue.go b/pkg/reconciler/revision/resources/queue.go
@@ -85,7 +85,7 @@ var (
 		ReadOnlyRootFilesystem:   ptr.Bool(true),
 		RunAsNonRoot:             ptr.Bool(true),
 		Capabilities: &corev1.Capabilities{
-			Drop: []corev1.Capability{"all"},
+			Drop: []corev1.Capability{"ALL"},
 		},
 	}
 )