WEBVTT

00:00.980 --> 00:05.560
Hello and welcome to this lecture on Security Contexts in Kubernetes.

00:05.600 --> 00:10.150
My name is Mumshad Mannambeth  as we saw in the previous lecture.

00:10.340 --> 00:17.300
When you run a docker container you have the option to define a set of security standards such as the

00:17.300 --> 00:20.050
ID of the user used to run the container,

00:20.240 --> 00:26.570
The Linux capabilities that can be added or removed from the container etc. These can be configured

00:26.630 --> 00:31.160
in Kubernetes as well. As you know already, in

00:31.190 --> 00:34.720
Kubernetes containers are encapsulated in PODs.

00:34.830 --> 00:41.040
You may choose to configure the security settings at a container level or at a pod level.

00:41.160 --> 00:47.360
If you configure it at a pod level the settings will carry over to all the containers within the pod.

00:47.520 --> 00:53.340
If you can figure it at both the pod and the container the settings on the container will override

00:53.370 --> 00:59.140
the settings on the pod let us start with a pod definition file.

00:59.160 --> 01:06.150
This pod runs an ubuntu image with the sleep command.  To configure security context on the container,

01:06.450 --> 01:13.560
had a field called security context under the specs section of the pod used to run as a user option

01:13.650 --> 01:21.230
to set the user I.D. for the pod to set the same configuration on the container level move the whole

01:21.230 --> 01:28.940
section under the container specification like this to add capabilities used the capabilities option

01:29.030 --> 01:33.830
and specify a list of capabilities to add to the pod.

01:33.980 --> 01:35.180
Well that's all.

01:35.180 --> 01:42.650
On security context in Kubernetes head over to the coding exercises section and practice viewing configuring

01:42.740 --> 01:47.740
and troubleshooting issues related to security contexts in Kubernetes.

01:47.840 --> 01:50.930
That's it for now and I will see you in the next lecture.