K3s
Definition
K3s is a lightweight, certified Kubernetes distribution designed for resource-constrained environments and edge computing. It simplifies the deployment and management of Kubernetes clusters by reducing the overhead and dependencies typically associated with standard Kubernetes installations. K3s is optimized for IoT and edge devices, providing a streamlined, efficient solution for running containerized applications in environments with limited resources.
Secure Settings Example
apiVersion: v1
kind: Pod
metadata:
name: secure-pod
spec:
containers:
- name: secure-container
image: nginx:latest
securityContext:
runAsNonRoot: true
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
automountServiceAccountToken: false
Insecure Settings Example
apiVersion: v1
kind: Pod
metadata:
name: insecure-pod
spec:
containers:
- name: insecure-container
image: nginx:latest
securityContext:
runAsNonRoot: false
capabilities:
add:
- NET_ADMIN
readOnlyRootFilesystem: false
automountServiceAccountToken: true