CKS related questions

Kubernetes
#1

Hi Team,

Best practices in Docker Image and deployment manifest file.
Dockerfile includes image with latest tag image and also some token which is also hardcoded inside the image file. So I believe token needs to be removed from image and should be passed as ENV variable ? and where to get the list of docker file best practices ?

Also for Deployment file, there is a security context with below : allowPrivilegeEscalation: true and readOnlyRootFilesystem: false

so here drop means the below capabilities are not included inside the container ?

securityContext:
  allowPrivilegeEscalation: true
  readOnlyRootFilesystem: false
  capabilities:
    drop: ["NET_ADMIN", "SYS_TIME"]

Thanks,
Elango Boopathy.

#2

We cannot discuss exam questions. This is in violation of Linux Foundation’s Non-Disclosure Agreement

#3

Sure. I have updated the Description, summary etc.
could you please explain now ?

#4

I still can’t give you a direct answer to all of this, but you can look at

Dropping a capability means removing it.

#5

Thanks @Alistair_KodeKloud