From 1c47494d5a1d31ab6a0081910e0a7247b08de88f Mon Sep 17 00:00:00 2001
From: rohitagg2020 <rohit.aggarwal2020@gmail.com>
Date: Sun, 28 Jan 2024 12:58:07 +0530
Subject: [PATCH] Set seccompProfile to RuntimeDefault for kapp-controller and
 kapp-controller-sidecarexec containers

Signed-off-by: rohitagg2020 <rohit.aggarwal2020@gmail.com>
---
 config/config/deployment.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/config/deployment.yml b/config/config/deployment.yml
index 2aabfe770..3c0de90de 100644
--- a/config/config/deployment.yml
+++ b/config/config/deployment.yml
@@ -62,6 +62,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       - name: kapp-controller-sidecarexec
         image: kapp-controller
         args: ["--sidecarexec"]
@@ -89,6 +91,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       volumes:
       - name: template-fs
         emptyDir: