From 67618592af004e4c611b959e8ffa169e2e39c306 Mon Sep 17 00:00:00 2001 From: Pascal Bachor Date: Fri, 22 Nov 2024 13:18:36 +0100 Subject: [PATCH] Enable seccompProfile for controller-manager --- config/manager/manager.yaml | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index c063332bb..7a82a78fe 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -27,13 +27,8 @@ spec: spec: securityContext: runAsNonRoot: true - # For common cases that do not require escalating privileges - # it is recommended to ensure that all your Pods/Containers are restrictive. - # More info: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted - # Please uncomment the following code if your project does NOT have to work on old Kubernetes - # versions < 1.19 or on vendors versions which do NOT support this field by default (i.e. Openshift < 4.11 ). - # seccompProfile: - # type: RuntimeDefault + seccompProfile: + type: RuntimeDefault containers: - args: - --leader-elect