Kubernetes Pod Affinity, Anti-Affinity, Taints, Tolerations, and Persistent Storage
Pod Affinity
Pod affinity allows you to influence where a new Pod is scheduled by specifying rules based on the labels of existing Pods. The goal is to co-locate Pods on the same node.
Example: Co-locating Pods
First, deploy a Pod with specific labels:
apiVersion: v1
kind: Pod
metadata:
name: nginx-pod
labels:
app: webserver
tier: front ...
Posted on Wed, 30 Sep 2026 16:35:25 +0000 by dwu
Exploiting Kubernetes Taints and Tolerations for Privilege Escalation
Understanding Taints and Tolerations
In simple terms:
Taints: Nodes marked with taints will not have pods scheduled to them by the Kubernetes scheduler.
Tolerations: Allow the scheduler to deploy pods to nodes that have taints applied.
Taints
Taints contain three possible values:
NoSchedule: Pods will not be scheduled to nodes marked with th ...
Posted on Mon, 15 Jun 2026 17:53:10 +0000 by Sean_J