Set seccompProfile to RuntimeDefault for both containers.

Signed-off-by: Rohit Aggarwal <[email protected]>
carvel-dev · Apr 10, 2024 · 55ca5f8 · 55ca5f8
1 parent 209dc67
commit 55ca5f8
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/config/deployment.yml b/config/config/deployment.yml
@@ -62,6 +62,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       - name: kapp-controller-sidecarexec
         image: kapp-controller
         args: ["--sidecarexec"]
@@ -89,6 +91,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       volumes:
       - name: template-fs
         emptyDir: