Welcome to the Linux Foundation Forum!

Exercise A.3 34:

Options
  1. Edit the pod such that the securityContext is in place and allows the web server to read the proper configuration files

This yaml works:

apiVersion: v1
kind: Pod
metadata:
  name: securityreview
spec:
  #securityContext:
  #  runAsUser: 2100
  containers:
  - name:  webguy
    image: nginx
    securityContext:
      # runAsUser: 3000
      allowPrivilegeEscalation: false

But again, it is unclear if this a correct answer because in my yaml the securityContext is in place, but I think the securityContext defaults to false.

BTW: This PDF in HTML is driving me crazy. If you want to copy text word often get gluedtogethersothatyouneedtoinsertspaces.

Categories

Upcoming Training