tamalsaha/nonroot-server

nonroot-server

KO_DOCKER_REPO=ghcr.io/appscodeci ko build --base-import-paths

kubectl create ns demo
kubectl label ns demo pod-security.kubernetes.io/enforce=restricted

KO_DOCKER_REPO=ghcr.io/appscodeci ko resolve --base-import-paths -f deployment.yaml | kubectl apply -f -

Background Reading:

• https://medium.com/@olivier.gaumond/why-am-i-able-to-bind-a-privileged-port-in-my-container-without-the-net-bind-service-capability-60972a4d5496

• kubernetes/enhancements#2763

• kubernetes/kubernetes#56374