What is allowPrivilegeEscalation setting of securityContext used for in Kubernetes container manifest?
Experience Level: Senior
Tags: Kubernetes
Answer
AllowPrivilegeEscalation setting controls whether a process can gain more privileges than its parent process. This bool directly controls whether the no_new_privs flag gets set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged OR 2) has CAP_SYS_ADMIN.
Related Kubernetes job interview questions
How do you create a service svc1 from a Kubernetes pod pod1? The service should use a tcp port redirection of 8080:80.
Kubernetes SeniorWhat is privileged setting of securityContext used for in Kubernetes container manifest?
Kubernetes SeniorHow do you change a number of replicas of a Kubernetes deployment dep1 to 3?
Kubernetes SeniorOn which level can you configure securityContext field in Kubernetes?
Kubernetes SeniorHow do you convert a Kubernetes pod to a deployment?
Kubernetes Senior