Mondo Diaz 9e2f12dc51 Fix local docker-compose security settings for stock images ...

Remove cap_drop: ALL and no-new-privileges from postgres, redis, minio,
and minio-init services. These stock images require certain capabilities
(SETUID, SETGID, CHOWN) to switch users during initialization.

Added KICS exceptions with documentation explaining these are local
development only settings - production Kubernetes uses securityContext.

2026-01-15 15:22:59 +00:00

2.1 KiB

Raw Blame History

View Raw