Master programming syntax, solve interactive challenges & run live code in Syntaxis Explore Arena →

menu_book Course Curriculum (Kubernetes) expand_more

Workloads

Pod manifest Deployment manifest ReplicaSet ownership StatefulSet manifest DaemonSet manifest Job manifest CronJob manifest Restart policy

Containers & Probes

Container command Container args Environment variable Resource requests Resource limits Liveness probe Readiness probe Startup probe

Configuration

ConfigMap ConfigMap envFrom ConfigMap volume Secret Secret env Secret volume Downward API Projected volume

Networking

ClusterIP Service NodePort Service LoadBalancer Service Headless Service Ingress NetworkPolicy ingress NetworkPolicy egress Service DNS

Storage

emptyDir volume PersistentVolume PersistentVolumeClaim StorageClass PVC mount Access modes Volume expansion concept StatefulSet volumeClaimTemplates

Scheduling

nodeSelector Node affinity Pod affinity Pod anti-affinity Taint and toleration Topology spread constraints PriorityClass PodDisruptionBudget

Security

ServiceAccount securityContext runAsNonRoot readOnlyRootFilesystem Drop capabilities seccomp profile RBAC Role RBAC RoleBinding Namespace isolation

Operations

kubectl get kubectl describe kubectl logs kubectl exec kubectl rollout status kubectl rollout undo HorizontalPodAutoscaler Rolling update strategy

Kubernetes / Security

Drop capabilities

Learn Drop capabilities in Kubernetes with a dedicated explanation, a topic-specific example, edge guidance, and a mastery check.

12 min read • Advanced

kubernetes-052.yml

yaml

securityContext:
  capabilities:
    drop: ["ALL"]

What to watch

Content source & attribution

Original Syntaxis Content · Original Syntaxis Content

Lesson quizzes

Drop capabilities Mastery Check →

readOnlyRootFilesystem

seccomp profile