[EKS] [request]: Add support for securityContext in kube-proxy add-on configuration
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
**Tell us about your request**
Provide support for `kube-proxy` add-on to specify security context in configuration. Specifically looking to be able to drop capabilities like this (and add only necessary ones):
```
securityContext:
capabilities:
drop:
- ALL
```
At the moment, the latest version `v1.26.11-eksbuild.4` doesn't support it.
**Which service(s) is this request for?**
EKS
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Cyber Cecurity team want to reduce attack surface and improve EKS cluster security posture.
**Are you currently working around this issue?**
Nope, as add-on config is managed by AWS.
**Additional context**
None
**Attachments**
None.
Contributor guide
Research direction
Start by reviewing how the EKS kube-proxy add-on configuration is exposed; the issue names no repository files or tests. Done means the configuration accepts a securityContext, including capabilities such as dropping ALL, for the kube-proxy add-on.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, kubernetes
- Domain
- devops, infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 20/100