K3s

Definition

K3s is a lightweight, certified Kubernetes distribution designed for resource-constrained environments and edge computing. It simplifies the deployment and management of Kubernetes clusters by reducing the overhead and dependencies typically associated with standard Kubernetes installations. K3s is optimized for IoT and edge devices, providing a streamlined, efficient solution for running containerized applications in environments with limited resources.

Secure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
spec:
  containers:
  - name: secure-container
    image: nginx:latest
    securityContext:
      runAsNonRoot: true
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
  automountServiceAccountToken: false

Insecure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: insecure-pod
spec:
  containers:
  - name: insecure-container
    image: nginx:latest
    securityContext:
      runAsNonRoot: false
      capabilities:
        add:
        - NET_ADMIN
      readOnlyRootFilesystem: false
  automountServiceAccountToken: true