Skip to content

Latest commit

 

History

History
34 lines (25 loc) · 858 Bytes

secured_containers.md

File metadata and controls

34 lines (25 loc) · 858 Bytes
Raw
layout title parent
page
Secured containers
List of all features

Secured Containers

Overview

Change Default settings of:

  • PodSecurityContext
    • FSGroup is set to 3000
  • SecurityContext (Container)
    • RunAsUser is set to 1000
    • RunAsGroup is set to 2000
    • RunAsNonRoot is set to true
    • ReadOnlyRootFilesystem is set to true
    • Capabilities.Drop is set to ["ALL"]

Dependencies

How to use

To enable this feature use --deployment.feature.secured-containers arg, which needs be passed to the operator:

helm upgrade --install kube-arangodb \
https://github.com/arangodb/kube-arangodb/releases/download/$VER/kube-arangodb-$VER.tgz \
  --set "operator.args={--deployment.feature.secured-containers}"