Security Context

No Security

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: web-pod
 5spec:
 6  containers:
 7    - name: ubunutu
 8      image: ubuntu
 9      command: 
10        - sleep
11        - "360"

Pod Level

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: web-pod
 5spec:
 6  securityContext:
 7    runAsUser: 1000
 8  containers:
 9    - name: ubunutu
10      image: ubuntu
11      command: ["sleep", "360"]

Container Level

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: web-pod
 5spec:
 6  containers:
 7    - name: ubunutu
 8      image: ubuntu
 9      command: ["sleep", "360"]
10      securityContext:
11        runAsUser: 1000
12        capabilities: 
13          - MAC_ADMIN
capabilities is only available at container level