Add cross-references to fundamental concepts (#18092)
This commit is contained in:
@@ -4,14 +4,20 @@ id: security-context
|
||||
date: 2018-04-12
|
||||
full_link: /docs/tasks/configure-pod-container/security-context/
|
||||
short_description: >
|
||||
The securityContext field defines privilege and access control settings for a Pod or Container, including the runtime UID and GID.
|
||||
The securityContext field defines privilege and access control settings for a Pod or container.
|
||||
|
||||
aka:
|
||||
tags:
|
||||
- security
|
||||
---
|
||||
The securityContext field defines privilege and access control settings for a Pod or Container, including the runtime UID and GID.
|
||||
The `securityContext` field defines privilege and access control settings for
|
||||
a {{< glossary_tooltip text="Pod" term_id="pod" >}} or
|
||||
{{< glossary_tooltip text="container" term_id="container" >}}.
|
||||
|
||||
<!--more-->
|
||||
<!--more-->
|
||||
|
||||
The securityContext field in a {{< glossary_tooltip term_id="pod" >}} (applying to all containers) or container is used to set the user, groups, capabilities, privilege settings, and security policies (SELinux/AppArmor/Seccomp) and more that container processes use.
|
||||
In a `securityContext`, you can define: the user that processes run as,
|
||||
the group that processes run as, and privilege settings.
|
||||
You can also configure security policies (for example: SELinux, AppArmor or seccomp).
|
||||
|
||||
The `PodSpec.securityContext` setting applies to all containers in a Pod.
|
||||
|
||||
Reference in New Issue
Block a user