From c3dc78579ec39dadc3cda57f768be80d703dfc40 Mon Sep 17 00:00:00 2001
From: Rohit Aggarwal <rohit.aggarwal@broadcom.com>
Date: Wed, 10 Apr 2024 15:13:46 +0530
Subject: [PATCH] Set seccompProfile to RuntimeDefault for both containers.

Signed-off-by: Rohit Aggarwal <rohit.aggarwal@broadcom.com>
---
 config/config/deployment.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/config/deployment.yml b/config/config/deployment.yml
index 11b138032..d4c878042 100644
--- a/config/config/deployment.yml
+++ b/config/config/deployment.yml
@@ -59,6 +59,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       - name: kapp-controller-sidecarexec
         image: kapp-controller
         args: ["--sidecarexec"]
@@ -86,6 +88,8 @@ spec:
           capabilities:
             drop:
             - ALL
+          seccompProfile:
+            type: RuntimeDefault
       volumes:
       - name: template-fs
         emptyDir: