Add --default-seccomp-profile-type flag

Signed-off-by: Arnob kumar saha <[email protected]>
kubedb · Dec 1, 2023 · 2c32695 · 2c32695
1 parent ee86f5b
commit 2c32695
Show file tree

Hide file tree

Showing 6 changed files with 10 additions and 0 deletions.
diff --git a/apis/installer/v1alpha1/kubedb_provisioner_types.go b/apis/installer/v1alpha1/kubedb_provisioner_types.go
@@ -84,6 +84,8 @@ type KubedbProvisionerSpec struct {
 	// +optional
 	LicenseSecretName string  `json:"licenseSecretName"`
 	Psp               PSPSpec `json:"psp"`
+	// +optional
+	DefaultSeccompProfileType string `json:"defaultSeccompProfileType"`
 }
 
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object

diff --git a/charts/kubedb-provisioner/README.md b/charts/kubedb-provisioner/README.md
@@ -81,6 +81,7 @@ The following table lists the configurable parameters of the `kubedb-provisioner
 | monitoring.serviceMonitor.labels     | Specify the labels for ServiceMonitor. Prometheus crd will select ServiceMonitor using these labels. Only usable when monitoring agent is `prometheus.io/operator`.                                                                                                                                                                                                             | <code>{"monitoring.appscode.com/prometheus":"auto"}</code>                                                                                          |
 | additionalPodSecurityPolicies        | Additional psp names passed to operator <br> Example: <br> `helm template ./chart/kubedb \` <br> `--set additionalPodSecurityPolicies[0]=abc \` <br> `--set additionalPodSecurityPolicies[1]=xyz`                                                                                                                                                                               | <code>[]</code>                                                                                                                                     |
 | psp.enabled                          |                                                                                                                                                                                                                                                                                                                                                                                 | <code>true</code>                                                                                                                                   |
+| defaultSeccompProfileType            |                                                                                                                                                                                                                                                                                                                                                                                 | <code>""</code>                                                                                                                                     |
 
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:

diff --git a/charts/kubedb-provisioner/templates/deployment.yaml b/charts/kubedb-provisioner/templates/deployment.yaml
@@ -43,6 +43,7 @@ spec:
         - --v={{ .Values.logLevel }}
         - --use-kubeapiserver-fqdn-for-aks={{ .Values.apiserver.useKubeapiserverFqdnForAks }}
         - --metrics-bind-address=:{{ .Values.monitoring.bindPort }}
+        - --default-seccomp-profile-type={{ .Values.defaultSeccompProfileType }}
         - --health-probe-bind-address=:{{ .Values.apiserver.healthcheck.probePort }}
         {{- include "docker.imagePullSecretFlags" . | nindent 8 }}
         {{- include "docker.insecureRegistries" .  | nindent 8 }}

diff --git a/charts/kubedb-provisioner/values.openapiv3_schema.yaml b/charts/kubedb-provisioner/values.openapiv3_schema.yaml
@@ -777,6 +777,8 @@ properties:
     type: object
   criticalAddon:
     type: boolean
+  defaultSeccompProfileType:
+    type: string
   enforceTerminationPolicy:
     type: boolean
   fullnameOverride:

diff --git a/charts/kubedb-provisioner/values.yaml b/charts/kubedb-provisioner/values.yaml
@@ -118,3 +118,5 @@ monitoring:
 additionalPodSecurityPolicies: []
 psp:
   enabled: true
+
+defaultSeccompProfileType: ""
diff --git a/charts/kubedb/values.openapiv3_schema.yaml b/charts/kubedb/values.openapiv3_schema.yaml
@@ -5056,6 +5056,8 @@ properties:
         type: object
       criticalAddon:
         type: boolean
+      defaultSeccompProfileType:
+        type: string
       enabled:
         type: boolean
       enforceTerminationPolicy: