SAS Product Suggestions

Recently, our cloud security team started enforcing the Kubernetes ‘pod security standards’ with the Kyverno tools.  See standard details: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted  Most of the SAS VIYA pods are running with ‘no-root’ user security setting, but do not have the explicit restriction on "runAsNonRoot" security context. Kyverno flags and blocks all these pods and breaks down the SAS VIYA application.  The temporary work-around is to write kyverno exception. See below. Since this is the Kubernetes security standard, it is strongly suggested to SAS VIYA platform to consider this and reconfigure the pod security standard.   ... View more