Measures

SecurityContext at container level

In each podyaml should be the entry

spec:
...
  containers:
…
    securityContext:
     runAsUser: 6789 ## Zufällige Nummer
      allowPrivilegeEscalation: false
…

Which binds the user in the container to 6789 and prevents rights escalation.

Any Questions?

Please feel free to contact us for any question that is not answered yet.

We are looking forward to get in contact with you!

KubeOps GmbH
Hinter Stöck 17
72406 Bisingen
Germany

Telefon:

+49 7433 93724 90
Mail:

This email address is being protected from spambots. You need JavaScript enabled to view it.

Legal

Download Area

Certified as

KubeOps GmbH is the owner of the Union trademark KubeOps with the registration number 018305184.