Secured Containers


Change Default settings of:

  • PodSecurityContext
    • FSGroup is set to 3000
  • SecurityContext (Container)
    • RunAsUser is set to 1000
    • RunAsGroup is set to 2000
    • RunAsNonRoot is set to true
    • ReadOnlyRootFilesystem is set to true
    • Capabilities.Drop is set to ["ALL"]


How to use

To enable this feature use --deployment.feature.secured-containers arg, which needs be passed to the operator:

helm upgrade --install kube-arangodb \$VER/kube-arangodb-$VER.tgz \
  --set "operator.args={--deployment.feature.secured-containers}"