Add SYS_ADMIN capability to the server container

This will let us run perf(1) on the zed-server to debug any performance problems we encounter in production. Co-Authored-By: Nathan Sobo <nathan@zed.dev>
2021-09-29 14:53:20 -07:00
parent 7599ac1e8c
commit 39ac723f5e
1 changed files with 5 additions and 0 deletions
@@ -76,3 +76,8 @@ spec:
                secretKeyRef:
                  name: github
                  key: privateKey
+          securityContext:
+            capabilities:
+              # FIXME - Switch to the more restrictive `PERFMON` capability.
+              # This capability isn't yet available in a stable version of Debian.
+              add: ["SYS_ADMIN"]