Difference between revisions of "ReadOnlyRootFilesystem"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| Line 12: | Line 12: | ||
* {{readOnlyRootFilesystem}} | * {{readOnlyRootFilesystem}} | ||
* {{SecurityContext}} | * {{SecurityContext}} | ||
| − | |||
[[Category:K8s security]] | [[Category:K8s security]] | ||
Revision as of 17:26, 1 June 2026
containerSecurityContext: enabled: true runAsUser: 11111 runAsGroup: 11111 allowPrivilegeEscalation: false capabilities: drop: - all readOnlyRootFilesystem: false runAsNonRoot: true
Related
allowPrivilegeEscalation- Configure a Security Context for a Pod or Container
- Mount
emptyDirto/tmp - --read-only in Docker
- read_only: true # in docker-compose.yaml
See also
Advertising:
