A Deployment must meet common Pod Security restricted-level expecta…

Question

A Deployment must meet common Pod Security restricted-level expectations for an ordinary app. Which checklist item belongs?

Accepted Answer

runAsNonRoot true, allowPrivilegeEscalation false, drop ALL capabilities, and avoid privileged containers. — Restricted posture is a short packing list: non-root, no privilege escalation, capabilities dropped, no privileged flag. Host networking and UID 0 are the opposite of that packing list.

Answer

Require privileged: true and hostNetwork: true for every restricted workload.

Answer

Mount the host root filesystem read-write and run as UID 0 for compatibility.

Answer

Disable all securityContext fields so the namespace Pod Security admission can infer defaults from Services.

A Deployment must meet common Pod Security restricted-level expectations for an ordinary app. Which checklist item belongs?

Short Explanation

Full Explanation