Skip to main content

More Info:

Do not generally permit containers to be run as the root user.

Risk Level

Critical

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

List the policies in use for each namespace in the cluster, ensure that each policyrestricts the use of root containers by setting MustRunAsNonRoot or MustRunAs with therange of UIDs not including 0.

Additional Reading: