How to validate from inside of pod that SYS_TIME capabilities are set properly. . . .

Kubernetes-Slack Discussions
#1

Ajay Shahi:
How to validate from inside of pod that SYS_TIME capabilities are set properly. looking for validation step. Thanks

#2

Alistair Mackay:
If the pod created without error, then the capability was defined correctly.
Provided there are no other security measures in force (a topic for CKS), SYS_TIME should allow you to set the system clock within the container.

kubectl exec -it your-pod -- /bin/sh
$ whoami
root
$ date -s "11 APR 2022 11:14:00"
#3

Ajay Shahi:
Thanks

#4

unnivkn:
Hi @Ajay Shahi fyr: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/