Skip to content
Captain's Academy0
← Kubernetes sea chart
Island 6 · Security · Port 6.16

Security contexts

Ask the Captain
Instagram
Containers often run as root. Take that away.
You'll learn to

run as non-root and add/drop capabilities

Recap

  1. 1runAsUser · runAsGroup · fsGroup · runAsNonRoot
  2. 2Capabilities: drop ALL, add only what's needed
  3. 3The container level overrides the pod level
Check yourself

The pod sets runAsUser 1000, one container sets runAsUser 2000. What does that container run as?

6.16

Stamp this lesson

Watched it and passed the check? Mark it in your logbook.