Skip to content

Commit 9f980c6

Browse files
committed
secureCodeBox#2939 Change seccompProfile deauflt to RuntimeDefault
Can still be manually disabled with Unconfined Signed-off-by: Samreet Singh <[email protected]>
1 parent c948e15 commit 9f980c6

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

operator/values.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,8 @@ securityContext:
5353
- ALL
5454
seccompProfile:
5555
# securityContext.seccompProfile.type -- one of RuntimeDefault, Unconfined, Localhost
56-
type: Unconfined
56+
# To disable seccompProfile, set to Unconfined. See: https://kubernetes.io/docs/tutorials/security/seccomp/
57+
type: RuntimeDefault
5758

5859
# -- Sets the securityContext on the operators pod level. See: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
5960
podSecurityContext: {}

0 commit comments

Comments
 (0)