Difference between revisions of "Kubernetes securityContext"

From wikieduonline
Jump to navigation Jump to search
Line 8: Line 8:
 
* <code>pods/security/security-context.yaml</code>
 
* <code>pods/security/security-context.yaml</code>
  
−
  apiVersion: v1
+
  [[apiVersion]]: v1
−
  kind: Pod
+
  [[kind:]] Pod
 
  metadata:
 
  metadata:
 
   name: security-context-demo
 
   name: security-context-demo
−
  spec:
+
  [[spec:]]
 
   securityContext:
 
   securityContext:
 
     runAsUser: 1000
 
     runAsUser: 1000

Revision as of 14:54, 17 July 2021

A security context defines privilege and access control settings for a Pod or Container.

The securityContext field is a PodSecurityContext object.

Example

  • pods/security/security-context.yaml
apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  volumes:
  - name: sec-ctx-vol
    emptyDir: {}
  containers:
  - name: sec-ctx-demo
    image: busybox
    command: [ "sh", "-c", "sleep 1h" ]
    volumeMounts:
    - name: sec-ctx-vol
      mountPath: /data/demo
    securityContext:

allowPrivilegeEscalation: false

Related terms

Activities


See also

Retrieved from "https://www.wikieduonline.com/index.php?title=Kubernetes_securityContext&oldid=67764"

Advertising: