Kubernetes Pod and Container Security: Difference between revisions
Jump to navigation
Jump to search
Line 6: | Line 6: | ||
Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the [[Dockerfile#USER|USER directive]] in the container image. | Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the [[Dockerfile#USER|USER directive]] in the container image. | ||
=Relationship with Pod Security Policy= | |||
For more details see: {{Internal|Kubernetes Pod Security Policy Concepts|Pod Security Policy Concepts}} | |||
=Privileged Mode= | =Privileged Mode= |
Revision as of 01:13, 20 February 2021
External
Internal
Overview
Containers instantiated from container images and running in pods in a Kubernetes cluster are executing by default using container image configuration. This includes the user and the group various container processes run under, which is by default specified with the USER directive in the container image.
Relationship with Pod Security Policy
For more details see: