Skip to content

Instantly share code, notes, and snippets.

@BlackMetalz
Created February 16, 2025 12:47
Show Gist options
  • Save BlackMetalz/ce10ec85601ef384c5fd1f3d8def6226 to your computer and use it in GitHub Desktop.
Save BlackMetalz/ce10ec85601ef384c5fd1f3d8def6226 to your computer and use it in GitHub Desktop.
Insecure deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: insecure-app
labels:
app: insecure-app
spec:
replicas: 1
selector:
matchLabels:
app: insecure-app
template:
metadata:
labels:
app: insecure-app
spec:
containers:
- name: insecure-container
image: nginx:latest
securityContext:
runAsUser: 0
allowPrivilegeEscalation: true
privileged: true
capabilities:
add:
- SYS_ADMIN
volumeMounts:
- name: config-volume
mountPath: /etc/config
readOnly: false
volumes:
- name: config-volume
hostPath:
path: /etc/config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment