Container Running As Root @ /deploy/k8s/base/community/deployment.yaml

[AaronZhouYu]

Checkmarx (IaC-Security): Container Running As Root
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: d9fa6dd5-d23b-4436-b75a-41a016305f39

---

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

Locations:

Result #1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[35,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.securityContext.runAsUser is higher than 0 and/or 'runAsNonRoot' is true
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.securityContext.runAsUser is 0 and 'runAsNonRoot' is false
    Review result in Checkmarx One: Container Running As Root

Result #2:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[16,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.securityContext.runAsUser is higher than 0 and/or 'runAsNonRoot' is true
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.securityContext.runAsUser is 0 and 'runAsNonRoot' is false
    Review result in Checkmarx One: Container Running As Root

Result #3:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[28,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.securityContext.runAsUser is higher than 0 and/or 'runAsNonRoot' is true
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.securityContext.runAsUser is 0 and 'runAsNonRoot' is false
    Review result in Checkmarx One: Container Running As Root

Result #4:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[22,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.securityContext.runAsUser is higher than 0 and/or 'runAsNonRoot' is true
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.securityContext.runAsUser is 0 and 'runAsNonRoot' is false
    Review result in Checkmarx One: Container Running As Root