Uploaded image for project: 'Release Requirements'
  1. Release Requirements
  2. REQ-359

Container rootfs must be mounted readOnly

    XMLWordPrintable

Details

    • Epic
    • Status: To Do
    • High
    • Resolution: Unresolved
    • None
    • None
    • None
    • Container rootfs has to be mounted readOnly
    • Non-Functional Requirement (DEPRECATED)
    • 3
    • Not yet performed
    • De-Scoped
    • M
    • GO
    • Yellow
    • GO
    • Yellow
    • GO
    • Red

    Description

       Description of Use Case / Requirement:

       By design containers running in kubernetes should be ephemeral and stateless. It's a good security practice to mount their rootfs as a read only

       

      Owners (one of these should be the Assignee - use @ notation): kopasiak sdesbure

       

      Link to HLD/LLD (if any):

       

      Dependency Relationships with Other Projects:

       

      Project Impact (Test Only (TO), Code (C)):

       

      Support Status for each Affected Project (Supported (S); Partially Supported (P); Not Supported (N)):

      Note: for any affected projects labeled 'P' or 'N', please document the resulting gaps.

       

      Integration Leads (use @ notation): 

       

      Company Engagement: Samsung, Orange

       

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              kopasiak Krzysztof Opasiak
              sdesbure Sylvain Desbureaux
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: