whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #30225 from liggitt/podsecurity-runasuser

Browse Source 
PodSecurity: runAsUser docs
This commit is contained in:
Kubernetes Prow Robot
2021-11-16 15:59:54 -08:00
committed by GitHub
parent 1466530a49 e50ce5f269
commit f235dc6cb6
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/concepts/security/pod-security-standards.md
+18
View File
@@ -373,6 +373,24 @@ fail validation.
</small>
</td>
</tr>
<tr>
<td style="white-space: nowrap">Running as Non-root user (v1.23+)</td>
<td>
<p>Containers must not set <tt>runAsUser</tt> to 0</p>
<p><strong>Restricted Fields</strong></p>
<ul>
<li><code>spec.securityContext.runAsUser</code></li>
<li><code>spec.containers[*].securityContext.runAsUser</code></li>
<li><code>spec.initContainers[*].securityContext.runAsUser</code></li>
<li><code>spec.ephemeralContainers[*].securityContext.runAsUser</code></li>
</ul>
<p><strong>Allowed Values</strong></p>
<ul>
<li>any non-zero value</li>
<li><code>undefined/null</code></li>
</ul>
</td>
</tr>
<tr>
<td style="white-space: nowrap">Non-root groups <em>(optional)</em></td>
<td>