Commit 9e2542c
authored
Add Seccomp profile to deployment (#446)
**Description of changes:**
I have recently tried to leveraging k8s built in [Enforce Pod Security Standards with Namespace Labels](https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/) feature.
When I tried to install one of the controllers I noticed warnings on the [restricted](
https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted) profile.
This I found strange because I checked beforehand and I saw you were already dropping all the capabilities:
https://github.com/aws-controllers-k8s/code-generator/blob/811e30bb8efe2855f79e6e946039247e23c0d03b/templates/helm/templates/deployment.yaml#L112-L118
And hard setting the host env:
https://github.com/aws-controllers-k8s/code-generator/blob/811e30bb8efe2855f79e6e946039247e23c0d03b/templates/helm/templates/deployment.yaml#L130-L132
It looks like it's just missing the scomp profile!
*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.*1 parent 811e30b commit 9e2542c
File tree
3 files changed
+7
-1
lines changed- templates
- config/controller
- helm
- templates
3 files changed
+7
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
73 | 73 | | |
74 | 74 | | |
75 | 75 | | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
76 | 79 | | |
77 | 80 | | |
78 | 81 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
116 | 116 | | |
117 | 117 | | |
118 | 118 | | |
| 119 | + | |
| 120 | + | |
| 121 | + | |
119 | 122 | | |
120 | 123 | | |
121 | 124 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
34 | | - | |
| 34 | + | |
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
| |||
0 commit comments