Completed upto lesson 28
This commit is contained in:
22
lab/workload-hardening-starter.yaml
Normal file
22
lab/workload-hardening-starter.yaml
Normal file
@@ -0,0 +1,22 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: cks-workload
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Pod
|
||||
metadata:
|
||||
name: inventory
|
||||
namespace: cks-workload
|
||||
labels:
|
||||
app: inventory
|
||||
spec:
|
||||
containers:
|
||||
- name: inventory
|
||||
image: busybox:1.37
|
||||
command: ["sh", "-c", "id; sleep 3600"]
|
||||
securityContext:
|
||||
runAsUser: 0
|
||||
allowPrivilegeEscalation: true
|
||||
capabilities:
|
||||
add: ["NET_ADMIN"]
|
||||
Reference in New Issue
Block a user