Q2
Lab
Simulation
Use the kubesec docker images to scan the given YAML manifest, edit and apply the advised changes, and passed with a score of 4 points.
kubesec-test.yaml
1. apiVersion: v1
2. kind: Pod
3. metadata:
4. name: kubesec-demo
5. spec:
6. containers:
7. - name: kubesec-demo
8. image: gcr.io/google-samples/node-hello:1.0
9. securityContext:
10. readOnlyRootFilesystem: true
Hint: docker run -i kubesec/kubesec:512c5e0 scan /dev/stdin < kubesec-test.yaml
Not auto-scored - compare your configuration against the model answer.