Skip to content

make pod run as non-root mandatory #764

@nicolasburtey

Description

@nicolasburtey

having some Pod running as root can be a security threat, because if someone were to get access to the Pod, then they could install everything they want on it and make further progress to the cluster.

Also, it seems some cloud provider (Openshift from RedHat) denies installation of pods with root access.

Some Pod currently running as root (list not exhaustive):

  • db backup
  • lnd

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions