Security

Permissions

The permissions below are used to define policies together with one or more of the four principal types:

Permission	Description	Implies
connect	Connect to replica (open an interactive shell)
create	Create new workloads
delete	Delete existing workloads
edit	Modify existing workloads	view
exec	Execute commands	exec.runCronWorkload
exec.runCronWorkload	Force a cron-workload to run
manage	Full access	connect, create, delete, edit, exec, exec.runCronWorkload, manage, view
view	Read-only access

Settings to control the security of the container at runtime.

Any mounted Volumes for this container will be owned by the group id provided. When not specified 0 (root) is used.

YAML

spec:
  securityOptions:
    filesystemGroupId: 777

Any processes running inside the container will run as the user id provided. When not specified, the default user id for the container image is used.

YAML

spec:
  securityOptions:
    runAsUser: 1000

⌘I