keep compliant workload free of shell activity
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
This commit is contained in:
@@ -15,7 +15,7 @@ spec:
|
|||||||
containers:
|
containers:
|
||||||
- name: app
|
- name: app
|
||||||
image: docker.io/library/busybox:1.36
|
image: docker.io/library/busybox:1.36
|
||||||
command: ["sh", "-c", "echo compliant-workload-ready; sleep 3600"]
|
command: ["sleep", "3600"]
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
|
|||||||
Reference in New Issue
Block a user