K8s security context

• securityContext
• containerSecurityContext
  • allowPrivilegeEscalation, readOnlyRootFilesystem
• podSecurityContext

 containerSecurityContext:
   enabled: true
   runAsUser: 11111
   runAsGroup: 11111
   allowPrivilegeEscalation: false
   capabilities:
     drop:
       - all
   readOnlyRootFilesystem: false
   runAsNonRoot: true

Related

• Configure a Security Context for a Pod or Container

See also

• securityContext, containerSecurityContext, spec.containers.securityContext, spec.securityContext, spec.securityContext.runAsUser, spec.securityContext.fsGroup, readOnlyRootFilesystem
• K8s security context, securityContext, runAsNonRoot
• K8s security context, containerSecurityContext, podSecurityContext, readOnlyRootFilesystem
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, containerSecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing, security context, readOnlyRootFilesystem, allowPrivilegeEscalation, kube-bench