Set secure computing mode to RuntimeDefault (#1361)

Necessary for adhering to the Restricted Pod Security Standard: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
vmware-tanzu · Oct 2, 2023 · b03e45d · b03e45d
1 parent b00774c
commit b03e45d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/config/manager/deployment.yaml b/config/manager/deployment.yaml
@@ -54,6 +54,8 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
             runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
             capabilities:
               drop:
                 - ALL