From 8f17b58326371ac205c9a616810663ebc68ebce2 Mon Sep 17 00:00:00 2001
From: Joe Catera <jcatera@splunk.com>
Date: Mon, 26 Jan 2026 19:54:43 -0800
Subject: [PATCH] Added a securityContext block to the container definition in
 your Kubernetes YAML file.

---
 kubernetes/cadvisor-signalfx.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kubernetes/cadvisor-signalfx.yaml b/kubernetes/cadvisor-signalfx.yaml
index c2b6c32c..3733823e 100644
--- a/kubernetes/cadvisor-signalfx.yaml
+++ b/kubernetes/cadvisor-signalfx.yaml
@@ -15,6 +15,8 @@ spec:
       containers:
       - name: "cadvisor-signalfx"
         image: "quay.io/signalfx/cadvisor-integration:latest"
+        securityContext:
+          allowPrivilegeEscalation: false
         env:
         - name: SFX_SCRAPPER_API_TOKEN
           value: <API TOKEN>