Right now majority of pods are running with default SecurityContext. We should change it to force containers to run confined and use linux hardening capabilities (AppArmor, SELinux, seccomp, etc.)
Why do we need it?
To increase security and prevent issues like CVE-2022-0492 affecting the stack.
What is missing?
Right now majority of pods are running with default SecurityContext. We should change it to force containers to run confined and use linux hardening capabilities (AppArmor, SELinux, seccomp, etc.)
Why do we need it?
To increase security and prevent issues like CVE-2022-0492 affecting the stack.
Anything else we need to know?: