runAsContext: - userName: root groupName: root gid: 0 uid: 0 description: The container starts as root, then NGINX and TFTP spawn under normal user accounts. capabilities: - name: CHOWN description: TFTP requires this ability to set permissions for sub-processes. - name: DAC_OVERRIDE description: TFTP requires this ability to set permissions for sub-processes. - name: FOWNER description: TFTP requires this ability to set permissions for sub-processes. - name: SETUID description: TFTP requires this ability to switch user for sub-processes. - name: SETGID description: TFTP requires this ability to switch group for sub-processes. - name: SYS_CHROOT description: TFTP requires this ability to spawn child processes. - name: NET_BIND_SERVICE description: TFTP requires this ability to bind to port 69 for TFTP. - name: KILL description: TFTP requires this ability to kill sub-processes. hostMounts: []