RunAsGroup — specify Linux group for container execution.
1apiVersion: v12kind: Pod3metadata:4 name: runasgroup-pod5spec:6 securityContext:7 runAsNonRoot: true8 runAsUser: 10009 runAsGroup: 300010 containers:11 - name: app12 image: nginx:latest
1kubectl exec runasgroup-pod -- id2kubectl exec runasgroup-pod -- cat /proc/1/status | grep Gid
Best Practice: Run as non-root, use specific GID.