"K8s runAsUser"의 두 판 사이의 차이

2021년 11월 18일 (목) 15:23 기준 최신판

1 개요[ | ]

runAsUser
spec.securityContext.runAsUser

apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  volumes:
  - name: sec-ctx-vol
    emptyDir: {}
  containers:
  - name: sec-ctx-demo
    image: busybox
    command: [ "sh", "-c", "sleep 1h" ]
    volumeMounts:
    - name: sec-ctx-vol
      mountPath: /data/demo
    securityContext:
      allowPrivilegeEscalation: false

2 같이 보기[ | ]

3 참고[ | ]

https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod

@@ 4번째 줄: / 4번째 줄: @@
 ;spec.securityContext.runAsUser
-<source lang='yaml' highlight='7'>
+<syntaxhighlight lang='yaml' highlight='7'>
 apiVersion: v1
 kind: Pod
@@ 26번째 줄: / 26번째 줄: @@
      securityContext:
        allowPrivilegeEscalation: false
-</source>
+</syntaxhighlight>
 ==같이 보기==
 * [[runAsGroup]]
+* [[fsGroup]]
 * [[allowPrivilegeEscalation]]
-* [[쿠버네티스 Security Context]]
+* [[K8s defaultMode]]
-* [[쿠버네티스 PodSecurityPolicy]]
+* [[K8s securityContext]]
+* [[K8s PodSecurityPolicy]]
 ==참고==
 * https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
-[[분류: kubernetes]]
+[[분류:K8s]]