Run kube-apiserver as non-root user (nobody)

poseidon · Jul 6, 2019 · 4caca47 · 4caca47
1 parent 3bfd125
commit 4caca47
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/resources/manifests/kube-apiserver.yaml b/resources/manifests/kube-apiserver.yaml
@@ -73,6 +73,9 @@ spec:
         - name: ssl-certs-host
           mountPath: /etc/ssl/certs
           readOnly: true
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
       volumes:
       - name: secrets
         secret: