K8s Privileged containers are not allowed

1 개요

Privileged containers are not allowed

$ kubectl-user create -f- <<EOF
apiVersion: v1
kind: Pod
metadata:
  name:      privileged
spec:
  containers:
    - name:  pause
      image: k8s.gcr.io/pause
      securityContext:
        privileged: true
EOF
Error from server (Forbidden): error when creating "STDIN": pods "privileged" is forbidden: unable to validate against any pod security policy: [spec.containers[0].securityContext.privileged: Invalid value: true: Privileged containers are not allowed]

2 같이 보기

• pod
• k8s privileged
• k8s Pod Security Policies

3 참고

• https://kubernetes.io/docs/concepts/policy/pod-security-policy/
• https://kubernetes.io/ko/docs/concepts/policy/pod-security-policy/