azure-key-vault-to-kubernetes
azure-key-vault-to-kubernetes copied to clipboard
Kubernetes clusters should not allow container privilege escalation
From AKS cluster i got compliance privilege escalation for both injector and controller, which directory its asking for privilage access?
It might be this one:
- mountPath: /etc/kubernetes/azure.json
name: azureconf
readOnly: true
I think this is coming from the lack of having a securityContext block on the injected initContainer, and would be fixed by #548