- A Cloud Guru
Check Kubernetes Pods for Container Immutability
Container immutability can help make containerized applications more secure. This lab will help you hone your skills at assessing container immutability by examining existing Kubernetes containers to determine whether or not they are truly immutable.
Table of Contents
Examine the Pods in the dev Namespace
Examine the Pods in the
devnamespace to determine which ones are immutable.
Consider immutable to be defined as:
- The container must not have any elevated privileges.
- The container must not be able to write to the container file system.
Delete Any Pods That Are Not Immutable
If any of the Pods in the
devnamespace are not immutable, delete them.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.