Security / Public reference

Helm privileged container

A Helm template that sets privileged: true outside a comment.

What you need to supply

The chart template text. Helm templates are not executed.

If it reports a finding

Critical severity. The suggested next step is to set privileged to false unless the workload is isolated on purpose.

What this does not prove

A rendered Kubernetes manifest with no template markers is reviewed as Kubernetes, not Helm. A template that only sets replicas: 1 is not this finding. privileged: true in a comment is not a finding.

Setting that this check is written to notice

securityContext:
  privileged: true

Proposed change

When this line appears once, the review proposes this change.

privileged: true becomes privileged: false

All review checks. Reading this page does not submit your infrastructure.