A container image supports non-root execution, but the team wants Kubernetes to reject attempts to run it as UID zero. Which securityContext field directly requires non-root execution?

Published
  1. hostPID: false alone
  2. runAsNonRoot: true
  3. readOnlyRootFilesystem: true alone
  4. allowPrivilegeEscalation: false alone

Comments — 0