"K8s allowPrivilegeEscalation"의 두 판 사이의 차이

2022년 4월 8일 (금) 17:01 판

1 개요

allowPrivilegeEscalation
spec.containers.securityContext.allowPrivilegeEscalation

apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  volumes:
  - name: sec-ctx-vol
    emptyDir: {}
  containers:
  - name: sec-ctx-demo
    image: busybox
    command: [ "sh", "-c", "sleep 1h" ]
    volumeMounts:
    - name: sec-ctx-vol
      mountPath: /data/demo
    securityContext:
      allowPrivilegeEscalation: false

2 같이 보기

3 참고

https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod

@@ 4번째 줄: / 4번째 줄: @@
 ;spec.containers.securityContext.allowPrivilegeEscalation
-<source lang='yaml' highlight='21'>
+<syntaxhighlight lang='yaml' highlight='21'>
 apiVersion: v1
 kind: Pod
@@ 26번째 줄: / 26번째 줄: @@
      securityContext:
        allowPrivilegeEscalation: false
-</source>
+</syntaxhighlight>
 ==같이 보기==