diff --git a/kubernetes/cadvisor-signalfx.yaml b/kubernetes/cadvisor-signalfx.yaml
index c2b6c32c..3733823e 100644
--- a/kubernetes/cadvisor-signalfx.yaml
+++ b/kubernetes/cadvisor-signalfx.yaml
@@ -15,6 +15,8 @@ spec:
       containers:
       - name: "cadvisor-signalfx"
         image: "quay.io/signalfx/cadvisor-integration:latest"
+        securityContext:
+          allowPrivilegeEscalation: false
         env:
         - name: SFX_SCRAPPER_API_TOKEN
           value: <API TOKEN>