From 55ca5f8110aa5cea37a73d0d43f48ca95e192c7b Mon Sep 17 00:00:00 2001 From: Rohit Aggarwal Date: Wed, 10 Apr 2024 14:56:30 +0530 Subject: [PATCH] Set seccompProfile to RuntimeDefault for both containers. Signed-off-by: Rohit Aggarwal --- config/config/deployment.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/config/config/deployment.yml b/config/config/deployment.yml index 2aabfe770..3c0de90de 100644 --- a/config/config/deployment.yml +++ b/config/config/deployment.yml @@ -62,6 +62,8 @@ spec: capabilities: drop: - ALL + seccompProfile: + type: RuntimeDefault - name: kapp-controller-sidecarexec image: kapp-controller args: ["--sidecarexec"] @@ -89,6 +91,8 @@ spec: capabilities: drop: - ALL + seccompProfile: + type: RuntimeDefault volumes: - name: template-fs emptyDir: