From e50ce5f26925db442559ee4d307deb01c322424f Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Mon, 25 Oct 2021 14:13:24 -0400
Subject: [PATCH] PodSecurity: runAsUser

---
 .../security/pod-security-standards.md         | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index f3b43344bf8ab..62e8943479902 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -373,6 +373,24 @@ fail validation.
 				</small>
 			</td>
 		</tr>
+		<tr>
+			<td style="white-space: nowrap">Running as Non-root user (v1.23+)</td>
+			<td>
+				<p>Containers must not set <tt>runAsUser</tt> to 0</p>
+				<p><strong>Restricted Fields</strong></p>
+				<ul>
+					<li><code>spec.securityContext.runAsUser</code></li>
+					<li><code>spec.containers[*].securityContext.runAsUser</code></li>
+					<li><code>spec.initContainers[*].securityContext.runAsUser</code></li>
+					<li><code>spec.ephemeralContainers[*].securityContext.runAsUser</code></li>
+				</ul>
+				<p><strong>Allowed Values</strong></p>
+				<ul>
+					<li>any non-zero value</li>
+					<li><code>undefined/null</code></li>
+				</ul>
+			</td>
+		</tr>
 		<tr>
 			<td style="white-space: nowrap">Non-root groups <em>(optional)</em></td>
 			<td>