Enable seccompProfile for controller-manager

ansible · Nov 22, 2024 · 6761859 · 6761859
1 parent 9718424
commit 6761859
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -27,13 +27,8 @@ spec:
     spec:
       securityContext:
         runAsNonRoot: true
-        # For common cases that do not require escalating privileges
-        # it is recommended to ensure that all your Pods/Containers are restrictive.
-        # More info: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
-        # Please uncomment the following code if your project does NOT have to work on old Kubernetes
-        # versions < 1.19 or on vendors versions which do NOT support this field by default (i.e. Openshift < 4.11 ).
-        # seccompProfile:
-        #   type: RuntimeDefault
+        seccompProfile:
+          type: RuntimeDefault
       containers:
       - args:
         - --leader-elect