For example, you might have 3 containers in the same pod, but only one needs to run in privileged mode. With a properly configured security context, you can run the others as non-privileged, reducing your attack surface.

This is one of the practical steps I cover in Learning Kubernetes Security Book because security isn’t about locking everything down, it’s about applying the right controls in the right place.

Read more: https://lnkd.in/e5g4tY8k