Miretpl commented on code in PR #74268: URL: https://github.com/apache/airflow/pull/74268#discussion_r4458634490
########## chart/newsfragments/74268.improvement.rst: ########## @@ -0,0 +1,2 @@ +Apply the default container security context to the OTel Collector, preventing privilege escalation and Review Comment: I would remove it. ########## chart/README.md: ########## @@ -51,6 +51,8 @@ cluster using the [Helm](https://helm.sh) package manager. * Container-specific Service Account Token Volume configuration implementing Principle of Least Privilege * Only scheduler containers receive API access; init and sidecar containers operate without tokens * Defense-in-depth security with both ServiceAccount and Pod-level controls + * Default container hardening prevents privilege escalation and drops Linux capabilities, + including for the OTel Collector Review Comment: ```suggestion * Default container hardening with security contexts set ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
