EksContainerSecurityContext
The security context for a job. For more information, see Configure a
security context for a pod or container
Contents
- allowPrivilegeEscalation
-
Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is
false
.Type: Boolean
Required: No
- privileged
-
When this parameter is
true
, the container is given elevated permissions on the host container instance. The level of permissions are similar to theroot
user permissions. The default value isfalse
. This parameter maps toprivileged
policy in the Privileged pod security policiesin the Kubernetes documentation. Type: Boolean
Required: No
- readOnlyRootFilesystem
-
When this parameter is
true
, the container is given read-only access to its root file system. The default value isfalse
. This parameter maps toReadOnlyRootFilesystem
policy in the Volumes and file systems pod security policiesin the Kubernetes documentation. Type: Boolean
Required: No
- runAsGroup
-
When this parameter is specified, the container is run as the specified group ID (
gid
). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps toRunAsGroup
andMustRunAs
policy in the Users and groups pod security policiesin the Kubernetes documentation. Type: Long
Required: No
- runAsNonRoot
-
When this parameter is specified, the container is run as a user with a
uid
other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps toRunAsUser
andMustRunAsNonRoot
policy in the Users and groups pod security policiesin the Kubernetes documentation. Type: Boolean
Required: No
- runAsUser
-
When this parameter is specified, the container is run as the specified user ID (
uid
). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps toRunAsUser
andMustRanAs
policy in the Users and groups pod security policiesin the Kubernetes documentation. Type: Long
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: