thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Kubernetes Security Context

Pod and container settings that define privilege and access controls, such as user ID, privilege escalation, capabilities and filesystem permissions.

Definition

Secure settings include runAsNonRoot: true, allowPrivilegeEscalation: false, readOnlyRootFilesystem: true, dropping all Linux capabilities and a seccomp profile of RuntimeDefault. The Pod Security Standards restricted profile requires many of these.

Example

securityContext: {runAsNonRoot: true, allowPrivilegeEscalation: false, capabilities: {drop: ["ALL"]}}

Exam tip

These fields are what Pod Security Admission evaluates.

Related terms