thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Security Context

Pod- and container-level Kubernetes settings that define privilege and access controls such as user ID, capabilities, and read-only filesystems.

Definition

Common settings are runAsNonRoot, runAsUser, allowPrivilegeEscalation: false, readOnlyRootFilesystem, capabilities drop ALL, and seccompProfile RuntimeDefault.

Example

securityContext: {runAsNonRoot: true, allowPrivilegeEscalation: false, capabilities: {drop: [ALL]}}

Exam tip

Container-level securityContext overrides pod-level for the same field.

Related terms