Security / Public reference

Elevated container privileges

A Kubernetes manifest that enables a privileged execution setting.

What you need to supply

The manifest text. The check does not inspect a running cluster.

If it reports a finding

Critical severity when the setting is present. The suggested next step is to remove it unless the workload needs it and is isolated on purpose.

What this does not prove

A privileged setting that is not in the supplied manifest is outside this check.

Setting that this check is written to notice

securityContext:
  privileged: true

Proposed change

When this line appears once, the review proposes this change.

privileged: true becomes privileged: false

All review checks. Reading this page does not submit your infrastructure.