RunAsUser — specify Linux user for container execution.
1apiVersion: v12kind: Pod3metadata:4 name: runas-pod5spec:6 securityContext:7 runAsNonRoot: true8 runAsUser: 10009 runAsGroup: 300010 containers:11 - name: app12 image: nginx:latest13 securityContext:14 runAsUser: 100015 runAsGroup: 3000
1kubectl exec runas-pod -- id2kubectl exec runas-pod -- whoami
Best Practice: run as non-root, use specific UID.