Run AWS mount-s3 cli tool as a non-root Docker container and/or Kubernetes pod

232 Views Asked by At

I am able to use mountpoint-s3 in a Docker container that runs as --privileged on my machine, or even without --privileged, but with --cap-add SYS_ADMIN --device /dev/fuse docker command line options as it suggests here.

Is it possible to do it for a Kubernetes pod without extra admin capabilities? For security reasons, pods in our K8s cluster should not have admin access.

0

There are 0 best solutions below