tobs icon indicating copy to clipboard operation
tobs copied to clipboard

Published 20 hours ago • verified publisher icon timescale

Add SecurityContext options to use linux hardening capabilities

Open paulfantom opened this issue 3 years ago • 0 comments

What is missing?

Right now majority of pods are running with default SecurityContext. We should change it to force containers to run confined and use linux hardening capabilities (AppArmor, SELinux, seccomp, etc.)

Why do we need it?

To increase security and prevent issues like CVE-2022-0492 affecting the stack.

Anything else we need to know?:

paulfantom avatar Jul 04 '22 11:07 paulfantom