hard20 pts · first answer countscontainer-securitysupply-chain-security

Same tag, different image

Two Pods from the same Deployment, using image myorg/api:1.4, behave differently. Investigation shows someone re-pushed the 1.4 tag. What is the most robust prevention?

A.Use the latest tag so all Pods always get the newest image.B.Set imagePullPolicy: Always so every Pod pulls the same image.C.Deploy images by immutable digest (myorg/api@sha256:...), enable tag immutability in the registry, and sign and verify images at admission.D.Rebuild the image on each node with docker build.

Discussion 0

Join free to post in the discussion.

Same tag, different image

Discussion 0

Related questions