From 5693c2d11b023f3dd904321aaa804f2d8b40f562 Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Mon, 25 Oct 2021 14:13:24 -0400
Subject: [PATCH] PodSecurity: runAsUser

---
 .../security/pod-security-standards.md         | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index 5afcc08cba0f1..6b52d0c3e9caa 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -383,6 +383,24 @@ fail validation.
 				</ul>
 			</td>
 		</tr>
+		<tr>
+			<td style="white-space: nowrap">Running as Non-root user (v1.23+)</td>
+			<td>
+				<p>Containers must not set runAsUser to 0</p>
+				<p><strong>Restricted Fields</strong></p>
+				<ul>
+					<li><code>spec.securityContext.runAsUser</code></li>
+					<li><code>spec.containers[*].securityContext.runAsUser</code></li>
+					<li><code>spec.initContainers[*].securityContext.runAsUser</code></li>
+					<li><code>spec.ephemeralContainers[*].securityContext.runAsUser</code></li>
+				</ul>
+				<p><strong>Allowed Values</strong></p>
+				<ul>
+					<li>any non-zero value</li>
+					<li><code>undefined/null</code></li>
+				</ul>
+			</td>
+		</tr>
 		<tr>
 			<td style="white-space: nowrap">Non-root groups <em>(optional)</em></td>
 			<td>