From 97d9ab2a4a66edb48ccbf229ae4fae57386b6caf Mon Sep 17 00:00:00 2001
From: Ryan Taylor <1686627+rptaylor@users.noreply.github.com>
Date: Mon, 6 Jan 2025 11:25:49 -0800
Subject: [PATCH] kube-vip: drop unneeded capabilities

Signed-off-by: Ryan Taylor <1686627+rptaylor@users.noreply.github.com>
---
 charts/kube-vip/Chart.yaml  | 2 +-
 charts/kube-vip/values.yaml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/charts/kube-vip/Chart.yaml b/charts/kube-vip/Chart.yaml
index cd56859..15f04ec 100644
--- a/charts/kube-vip/Chart.yaml
+++ b/charts/kube-vip/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.6.4
+version: 0.6.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/kube-vip/values.yaml b/charts/kube-vip/values.yaml
index 11c47ed..d4cfbbc 100644
--- a/charts/kube-vip/values.yaml
+++ b/charts/kube-vip/values.yaml
@@ -75,6 +75,8 @@ securityContext:
     add:
       - NET_ADMIN
       - NET_RAW
+    drop:
+      - ALL
 
 resources: {}
   # We usually recommend not to specify default resources and to leave this as a conscious