Robo/edge nodes with restricted runtimes

Jan 1, 0001

Definition

Robo/edge nodes with restricted runtimes refer to computing devices deployed at the edge of a network that operate under constrained environments. These nodes often have limited processing power, memory, and storage, necessitating efficient and secure runtime configurations. They are typically used in IoT applications, where security and performance are critical due to their exposure to potentially hostile environments.

Secure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: secure-edge-node
spec:
  containers:
  - name: edge-container
    image: secure-edge-image:latest
    securityContext:
      readOnlyRootFilesystem: true
      runAsNonRoot: true
      capabilities:
        drop:
        - ALL
    resources:
      limits:
        memory: "256Mi"
        cpu: "500m"

Insecure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: insecure-edge-node
spec:
  containers:
  - name: edge-container
    image: insecure-edge-image:latest
    securityContext:
      privileged: true
      runAsUser: 0
    resources:
      limits:
        memory: "2Gi"
        cpu: "2"