Security context constraints (SCCs)
You can use security context constraints (SCCs) to define a set of conditions that a pod must run with to be accepted into the system.
Some aspects that can be managed by SCCs include:
-
Running of privileged containers
-
Capabilities a container can request to be added
-
Use of host directories as volumes
-
SELinux context of the container
-
Container user ID
If you have the required permissions, you can adjust the default SCC policies to be more permissive, if required.