Kubernetes 101: Containers and privileges



Containers with unprivileged access:

We can run a container with "regular" users by specifying its "general" - UID:5000 - in the pod Yaml file as we can see below:


We could then create our pod using the below command:


Stopping Root containers:

We can instruct kubernetes to refrain from starting containers that are running as "
root" using the "runAsNonRoot" variable in the pod Yaml configuration file as below:


We could then create our pod using the below command:


Comments

Leave as a comment:

Archive