aws / aws/containers-roadmap

[EKS] [request]: Add support for securityContext in kube-proxy add-on configuration

Open
#2,288 0 comments 4 reactions 0 assignees View on GitHub
EKS EKS Add-Ons EKS Networking Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
Provide support for `kube-proxy` add-on to specify security context in configuration. Specifically looking to be able to drop capabilities like this (and add only necessary ones):
```
securityContext:
capabilities:
drop:
- ALL
```
At the moment, the latest version `v1.26.11-eksbuild.4` doesn't support it.

**Which service(s) is this request for?**
EKS

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Cyber Cecurity team want to reduce attack surface and improve EKS cluster security posture.

**Are you currently working around this issue?**
Nope, as add-on config is managed by AWS.

**Additional context**
None

**Attachments**
None.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing how the EKS kube-proxy add-on configuration is exposed; the issue names no repository files or tests. Done means the configuration accepts a securityContext, including capabilities such as dropping ALL, for the kube-proxy add-on.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
devops, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.