From c5b887783762a6b21e7271110ec20008ad3e6edd Mon Sep 17 00:00:00 2001
From: Stavros kois <s.kois@outlook.com>
Date: Mon, 7 Nov 2022 16:42:18 +0200
Subject: [PATCH] add capabilities

---
 test/wg-easy/1.0.0/templates/deployment.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/test/wg-easy/1.0.0/templates/deployment.yaml b/test/wg-easy/1.0.0/templates/deployment.yaml
index ee9ad24af2..4359ff2b65 100644
--- a/test/wg-easy/1.0.0/templates/deployment.yaml
+++ b/test/wg-easy/1.0.0/templates/deployment.yaml
@@ -31,6 +31,16 @@ spec:
         - name: {{ .Chart.Name }}
           {{ include "common.resources.limitation" . | nindent 10 }}
           {{ include "common.containers.imageConfig" .Values.image | nindent 10 }}
+          securityContext:
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+            {{/* https://github.com/WeeJeWel/wg-easy/pull/394 */}}
+            runAsUser: 0
+            runAsGroup: 0
+            readOnlyRootFilesystem: false
+            runAsNonRoot: false
           volumeMounts: {{ include "common.storage.configureAppVolumeMountsInContainer" .Values | nindent 12 }}
           {{ range $index, $hostPathConfiguration := .Values.extraAppVolumeMounts }}
             - name: extrappvolume-{{ $index }}