containerSecurityContext

• https://github.com/kubernetes/ingress-nginx/blob/main/charts/ingress-nginx/values.yaml#L825

Nginx helm chart:

  containerSecurityContext:
   enabled: true
   runAsUser: 11111
   runAsGroup: 11111
   allowPrivilegeEscalation: false
   capabilities:
     drop:
       - all
   readOnlyRootFilesystem: false
   runAsNonRoot: true

Related

• podSecurityContext
• Configure a Security Context for a Pod or Container
• NGINX Ingress Controller
• spec.containers.securityContext
• --read-only

See also

• K8s security context, containerSecurityContext, podSecurityContext, readOnlyRootFilesystem
• spec.containers: image, resources.limits, resources.requests, request.cpu, request.memory, Resource Management for Pods and Containers, securityContext