What is Kubernetes Pod Security Context ProcMount?

Question

Accepted Answer

**ProcMount** — control /proc mount type for containers.

```yaml
apiVersion: v1
kind: Pod
metadata:
  name: procmount-pod
spec:
  containers:
  - name: app
    image: nginx:latest
    securityContext:
      procMount: Default
---
apiVersion: v1
kind: Pod
metadata:
  name: procmount-unmasked
spec:
  containers:
  - name: app
    image: nginx:latest
    securityContext:
      procMount: Unmasked
```

```bash
kubectl exec procmount-pod -- ls /proc
kubectl exec procmount-unmasked -- ls /proc
```

**Values:** Default (filtered), Unmasked (full access).

DevOps: What is Kubernetes Pod Security Context ProcMount?