华为云UCS-k8spspallowprivilegeescalationcontainer:不符合策略实例的资源定义

时间:2024-09-12 15:06:02

不符合策略实例的资源定义

示例中allowPrivilegeEscalation的值不为false,不符合策略实例。

apiVersion: v1
kind: Pod
metadata:
  name: nginx-privilege-escalation-disallowed
  labels:
    app: nginx-privilege-escalation
spec:
  containers:
  - name: nginx
    image: nginx
    securityContext:
      allowPrivilegeEscalation: true
support.huaweicloud.com/usermanual-ucs/ucs_01_0230.html