container - security context - set the RuntimeDefault for Seccomp pro…

…file KubeAPIWarningLogger would violate PodSecurity "restricted:latest": seccompProfile (pod or container "mariadb-client" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") Change-Id: I52291c790dfdd08a928b7425fa525ce28482ee9b
softwarefactory-project · Oct 27, 2023 · 03f84c7 · 03f84c7
1 parent f5da65a
commit 03f84c7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/controllers/libs/base/base.go b/controllers/libs/base/base.go
@@ -36,6 +36,9 @@ func MkSecurityContext(privileged bool) *apiv1.SecurityContext {
 				"ALL",
 			},
 		},
+		SeccompProfile: &apiv1.SeccompProfile{
+			Type: apiv1.SeccompProfileTypeRuntimeDefault,
+		},
 	}
 }