whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #30256 from marosset/windows-runasnonroot-updates

Browse Source 
Updating runAsNonRoot support for Windows
This commit is contained in:
Kubernetes Prow Robot
2021-10-29 14:37:10 -07:00
committed by GitHub
parent 3dd978ec23 afbb133e9f
commit bc785b9dbc
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+5 -5
View File
@@ -519,13 +519,13 @@ work between Windows and Linux:
* `securityContext.readOnlyRootFilesystem` - * `securityContext.readOnlyRootFilesystem` -
not possible on Windows; write access is required for registry & system not possible on Windows; write access is required for registry & system
processes to run inside the container processes to run inside the container
* `EcurityContext.runAsGroup` - * `securityContext.runAsGroup` -
not possible on Windows as there is no GID support not possible on Windows as there is no GID support
* `ecurityContext.runAsNonRoot` - * `securityContext.runAsNonRoot` -
Windows does not have a root user. The closest equivalent is `ContainerAdministrator` this setting will prevent containers from running as `ContainerAdministrator`
which is an identity that doesn't exist on the node. which is the closest equivalent to a root user on Windows.
* `securityContext.runAsUser` - * `securityContext.runAsUser` -
use [`runAsUsername`](/docs/tasks/configure-pod-container/configure-runasusername) use [`runAsUserName`](/docs/tasks/configure-pod-container/configure-runasusername)
instead instead
* `securityContext.seLinuxOptions` - * `securityContext.seLinuxOptions` -
not possible on Windows as SELinux is Linux-specific not possible on Windows as SELinux is Linux-specific