Skip to content

Latest commit

 

History

History
22 lines (13 loc) · 929 Bytes

run.md

File metadata and controls

22 lines (13 loc) · 929 Bytes
Raw

Predictable

Description

Apply the principle of the least privilege to constrain a process to the minimum privileges it needs.

  • Run Containers with a Non-Root User
  • Restrict Container Capabilities
  • Avoid a Mutable Container Filesystem
  • Enforce Security Policies (Privileged/Unrestricted, Baseline, Restricted)

References

[1] 10 Kubernetes Security Context settings

[2] Enforce Pod Security Standards with Namespace Labels

[3] Security Context for a Pod

[4] Pod Security Admission

[5] Pod Security Standards