<p>I am learning more about Kubernetes Pod Security Policies, and while going through the list of fields, I could not find the default value for the <a href="https://kubernetes.io/docs/concepts/policy/pod-security-policy/#privileged" rel="nofollow noreferrer">Privileged</a> flag. Is this value dependent on the container runtime used? For example, <a href="https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities" rel="nofollow noreferrer">Docker containers</a> have this value set to false by default, so if I had a Kubernetes cluster with only Docker containers, would all the pods be unprivileged?</p>

bitscuit
<p>In a fresh cluster the default PSP is very permissive which means that you pretty much anything is allowed. So the default would be to allow privileged containers if the privileged flag was toggled on the pod, same with root users, etc. </p>

<p>You will have to explicitly turn set the flag to true in the PSP if you want to enforce it. I believe this is true regardless of the Container runtime being used, works with Windows containers too :) </p>
