kosmos-io / kosmos

The limitless expansion of Kubernetes. Make Kubernetes without boundaries
https://kosmos-io.github.io/website/
Apache License 2.0
194 stars 44 forks source link

Restrict script behavior of k8s in k8s #521

Open OrangeBao opened 2 months ago

OrangeBao commented 2 months ago

What would you like to be added: Restrict script behavior of k8s in k8s

Why is this needed: At present, the remote executor has excessive permissions and may perform some dangerous operations. Need to be restricted.