1 year ago

In https://thenewstack.io/kubernetes/ a pod is the smallest deployable unit that can be created and managed. When a pod is created without a security context, it inherits the security context of its parent namespace, which may not provide adequate security measures.

SecurityContext is a field in the pod specification that allows you to specify security-related settings for the pod and its containers.

The securityContext field is defined at the pod level and specifies that the container should be run with a non-root user ID of 1000, a group ID of 2000, and a file system group of 3000.

This field sets the security context for the specific container within the pod and this will overwrite the security context for the pod if they conflict.