Merge pull request #1527 from carvel-dev/ra-0.48.x-add-seccompProfile

Set seccompProfile to RuntimeDefault for both containers for 0.48.x.
carvel-dev · Apr 11, 2024 · 0216421 · 0216421
2 parents 5b60f96 + ddb7d0d
commit 0216421
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/config/deployment.yml b/config/config/deployment.yml
@@ -59,6 +59,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       - name: kapp-controller-sidecarexec
         image: kapp-controller
         args: ["--sidecarexec"]
@@ -86,6 +88,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       volumes:
       - name: template-fs
         emptyDir: