Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 10 of 151 for AllowPrivilegeEscalation (0.35 sec)

  1. samples/bookinfo/platform/kube/bookinfo-psa.yaml

          - name: details
            image: docker.io/istio/examples-bookinfo-details-v1:1.20.1
            imagePullPolicy: IfNotPresent
            ports:
            - containerPort: 9080
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                  - all
              runAsNonRoot: true
    ---
    ##################################################################################################
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Jun 03 19:54:05 UTC 2024
    - 8.1K bytes
    - Viewed (0)
  2. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.cni.injected

            resources:
              limits:
                cpu: "2"
                memory: 1Gi
              requests:
                cpu: 100m
                memory: 128Mi
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              readOnlyRootFilesystem: true
              runAsGroup: 4321
              runAsNonRoot: true
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.8K bytes
    - Viewed (0)
  3. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.injected

            resources:
              limits:
                cpu: "2"
                memory: 1Gi
              requests:
                cpu: 100m
                memory: 128Mi
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              readOnlyRootFilesystem: true
              runAsGroup: 4321
              runAsNonRoot: true
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.5K bytes
    - Viewed (0)
  4. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.tproxy.injected

            resources:
              limits:
                cpu: "2"
                memory: 1Gi
              requests:
                cpu: 100m
                memory: 128Mi
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                add:
                - NET_ADMIN
                drop:
                - ALL
              privileged: false
              readOnlyRootFilesystem: true
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.6K bytes
    - Viewed (0)
  5. pkg/kube/inject/testdata/inject/hello-probes-localhost.yaml.injected

            resources:
              limits:
                cpu: "2"
                memory: 1Gi
              requests:
                cpu: 100m
                memory: 128Mi
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              privileged: false
              readOnlyRootFilesystem: true
              runAsGroup: 1337
              runAsNonRoot: true
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri Apr 26 16:51:17 UTC 2024
    - 7.5K bytes
    - Viewed (0)
  6. cluster/addons/dns/kube-dns/kube-dns.yaml.in

              name: metrics
              protocol: TCP
            volumeMounts:
            - name: kube-dns-config
              mountPath: /kube-dns-config
            securityContext:
              allowPrivilegeEscalation: false
              readOnlyRootFilesystem: true
              runAsUser: 1001
              runAsGroup: 1001
          - name: dnsmasq
            image: registry.k8s.io/dns/k8s-dns-dnsmasq-nanny:1.23.1
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Mon Jun 03 03:19:02 UTC 2024
    - 7K bytes
    - Viewed (0)
  7. cluster/addons/dns/kube-dns/kube-dns.yaml.base

              name: metrics
              protocol: TCP
            volumeMounts:
            - name: kube-dns-config
              mountPath: /kube-dns-config
            securityContext:
              allowPrivilegeEscalation: false
              readOnlyRootFilesystem: true
              runAsUser: 1001
              runAsGroup: 1001
          - name: dnsmasq
            image: registry.k8s.io/dns/k8s-dns-dnsmasq-nanny:1.23.1
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Mon Jun 03 03:19:02 UTC 2024
    - 7K bytes
    - Viewed (0)
  8. cluster/addons/dns/kube-dns/kube-dns.yaml.sed

              name: metrics
              protocol: TCP
            volumeMounts:
            - name: kube-dns-config
              mountPath: /kube-dns-config
            securityContext:
              allowPrivilegeEscalation: false
              readOnlyRootFilesystem: true
              runAsUser: 1001
              runAsGroup: 1001
          - name: dnsmasq
            image: registry.k8s.io/dns/k8s-dns-dnsmasq-nanny:1.23.1
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Mon Jun 03 03:19:02 UTC 2024
    - 7.1K bytes
    - Viewed (0)
  9. manifests/charts/gateway/templates/deployment.yaml

                {{- toYaml .Values.containerSecurityContext | nindent 12 }}
              {{- else }}
                capabilities:
                  drop:
                  - ALL
                allowPrivilegeEscalation: false
                privileged: false
                readOnlyRootFilesystem: true
                {{- if not (eq .Values.platform "openshift") }}
                runAsUser: 1337
                runAsGroup: 1337
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Thu Jun 13 22:42:29 UTC 2024
    - 3.8K bytes
    - Viewed (0)
  10. manifests/charts/istiod-remote/files/injection-template.yaml

        - name: {{ $key }}
          value: "{{ $value }}"
        {{- end }}
      {{- end }}
        resources:
      {{ template "resources" . }}
        securityContext:
          allowPrivilegeEscalation: {{ .Values.global.proxy.privileged }}
          privileged: {{ .Values.global.proxy.privileged }}
          capabilities:
        {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
            add:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri May 10 21:01:52 UTC 2024
    - 23.8K bytes
    - Viewed (0)
Back to top