Difference between revisions of "ReadOnlyRootFilesystem"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| Line 11: | Line 11: | ||
== See also == | == See also == | ||
* {{readOnlyRootFilesystem}} | * {{readOnlyRootFilesystem}} | ||
| + | * {{emptyDir}} | ||
* {{SecurityContext}} | * {{SecurityContext}} | ||
[[Category:K8s security]] | [[Category:K8s security]] | ||
Revision as of 08:20, 3 June 2026
containerSecurityContext: enabled: true runAsUser: 11111 runAsGroup: 11111 allowPrivilegeEscalation: false capabilities: drop: - all readOnlyRootFilesystem: false runAsNonRoot: true
Related
allowPrivilegeEscalation- Configure a Security Context for a Pod or Container
- Mount
emptyDirto/tmp - --read-only in Docker
- read_only: true # in docker-compose.yaml
See also
Advertising:
