MicroShift

Definition

MicroShift is a lightweight Kubernetes distribution designed to run on edge devices and resource-constrained environments. It is a minimal version of OpenShift, optimized for small footprints while maintaining compatibility with the OpenShift ecosystem. MicroShift enables developers to deploy containerized applications closer to the data source, enhancing performance and reducing latency for edge computing scenarios.

Secure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
spec:
  containers:
  - name: secure-container
    image: my-secure-image:latest
    securityContext:
      runAsNonRoot: true
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
  hostNetwork: false
  hostPID: false
  hostIPC: false

Insecure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: insecure-pod
spec:
  containers:
  - name: insecure-container
    image: my-insecure-image:latest
    securityContext:
      runAsNonRoot: false
      allowPrivilegeEscalation: true
      capabilities:
        add:
        - NET_ADMIN
  hostNetwork: true
  hostPID: true
  hostIPC: true