Skip to content

Commit e576be7

Browse files
Set secure computing mode to RuntimeDefault (#1360)
Necessary for adhering to the Restricted Pod Security Standard: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
1 parent 55c45cb commit e576be7

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

config/manager/deployment.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,8 @@ spec:
5454
allowPrivilegeEscalation: false
5555
readOnlyRootFilesystem: true
5656
runAsNonRoot: true
57+
seccompProfile:
58+
type: RuntimeDefault
5759
capabilities:
5860
drop:
5961
- ALL

0 commit comments

Comments
 (0)