Skip to content

Commit d64964c

Browse files
committed
feat(pod_security_context.yml): Add examle pod with securityContext (for Generali training)
1 parent 87a88ee commit d64964c

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

pod_security_context.yml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
apiVersion: v1
2+
kind: Pod
3+
metadata:
4+
name: simple-hello-world
5+
labels:
6+
app: simple-hello-world
7+
svc: example
8+
spec:
9+
containers:
10+
- name: main
11+
image: ondrejsika/training-example
12+
ports:
13+
- containerPort: 80
14+
resources:
15+
requests:
16+
memory: 10Mi
17+
cpu: 10m
18+
limits:
19+
memory: 20Mi
20+
cpu: 20m
21+
securityContext:
22+
allowPrivilegeEscalation: false
23+
capabilities:
24+
drop:
25+
- ALL
26+
runAsNonRoot: true
27+
runAsUser: 1000
28+
seccompProfile:
29+
type: RuntimeDefault

0 commit comments

Comments
 (0)