Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: Improve security posture of proxy containers. #322

Merged
merged 3 commits into from
Apr 20, 2023
Merged

feat: Improve security posture of proxy containers. #322

merged 3 commits into from
Apr 20, 2023

Conversation

hessjcg
Copy link
Collaborator

@hessjcg hessjcg commented Apr 20, 2023

This adds additional controls on the security context for pod containers to address these common
k8s security best practices:

  • Run as a non-root user
  • Mount container's root filesystem as read only
  • Restrict Container from acquiring additional privileges

@hessjcg hessjcg requested a review from a team as a code owner April 20, 2023 01:33
@hessjcg hessjcg changed the base branch from main to gh-219-healthchecks April 20, 2023 01:33
@hessjcg hessjcg requested a review from enocom April 20, 2023 02:28
@hessjcg hessjcg marked this pull request as draft April 20, 2023 15:44
Base automatically changed from gh-219-healthchecks to main April 20, 2023 16:01
@hessjcg hessjcg marked this pull request as ready for review April 20, 2023 16:03
@hessjcg hessjcg enabled auto-merge (squash) April 20, 2023 16:52
@hessjcg hessjcg merged commit dc8911e into main Apr 20, 2023
@hessjcg hessjcg deleted the container-security branch April 20, 2023 17:07
@release-please release-please bot mentioned this pull request Apr 20, 2023
Merged
@hessjcg hessjcg mentioned this pull request Apr 25, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@enocom enocom enocom approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@hessjcg @enocom