Kubernetes Pod and Container Security: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 6: Line 6:


Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the [[Dockerfile#USER|USER directive]] in the container image.
Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the [[Dockerfile#USER|USER directive]] in the container image.
=Pod Security Context=
=Container Security Context=


=Relationship with Pod Security Policy=
=Relationship with Pod Security Policy=

Revision as of 01:13, 20 February 2021

External

Internal

Overview

Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the USER directive in the container image.

Pod Security Context

Container Security Context

Relationship with Pod Security Policy

For more details see:

Pod Security Policy Concepts

Privileged Mode