Skip to content
KEP Brain

KEP-2172keps/sig-node/2172-warn-about-implicitly-insecure-containers

Warn users about insecure pods

implementablealphasig-nodelatest v1.38

Kubernetes does not make it hard enough to do the wrong thing. Specifically, there are things that users do ALL THE TIME that they really should not, such as running containers as root. This KEP aims to make it more obvious that they are doing that, and to encourage them to declare their intent better.

Facts

PRR approvers
@jpbetzalpha
Tracking issue
#2172(opens GitHub in a new tab) openmilestone v1.38sig/nodesig/clistage/alphatracked/yessig/securitylead-opted-in
Milestones
alpha v1.38
Participating SIGs
sig-securitysig-cli
Feature gates
PodImplicitRootWarnings
Created / last updated
2020-12-01 / none
Loading decisions and status history

Keyboard shortcuts

Everywhere

?
Show or hide this list
/
Focus the question box on Ask, otherwise the page search
Ctrl Kor⌘ K
Focus the KEP search in the top bar
t
Switch the theme (system, light, dark)
Esc
Close a dialog, a search list or a menu

Go to a page

Press g, then the letter

g h
Home
g a
Ask
g e
Explore
g u
Audit
g m
Memory
g b
About

Ask

Enter
Send the question
Shift Enter
New line in the question
Esc
Cancel the running question

Search lists

KEP search and Explore search

↓or↑
Move through the results
HomeorEnd
First or last result (Explore)
Enter
Open the highlighted result, or KEP-n when the query is a number

KEP page

o
Open the KEP on GitHub
y
Open kep.yaml on GitHub
a
Ask about this KEP
←or→
Previous or next tab, when a tab is focused

Findings table

With a finding row focused (Tab into the table or click a row)

jork
Next or previous finding
EnterorSpace
Expand or collapse the finding
o
Open the finding's KEP page
d
Draft the fix as an issue text (nothing is posted)
]or[
Next or previous page of findings

Shortcuts pause while you type in a field. Press ? or Esc to close.