containers-roadmap
containers-roadmap copied to clipboard
[EKS] [request]: Add support for securityContext in kube-proxy add-on configuration
Community Note
- Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment
Tell us about your request
Provide support for kube-proxy
add-on to specify security context in configuration. Specifically looking to be able to drop capabilities like this (and add only necessary ones):
securityContext:
capabilities:
drop:
- ALL
At the moment, the latest version v1.26.11-eksbuild.4
doesn't support it.
Which service(s) is this request for? EKS
Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard? Cyber Cecurity team want to reduce attack surface and improve EKS cluster security posture.
Are you currently working around this issue? Nope, as add-on config is managed by AWS.
Additional context None
Attachments None.