Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change seccomp annotations to seccompProfile #822

Merged
merged 1 commit into from
Sep 10, 2020
Merged

Conversation

dghubble
Copy link
Member

  • seccomp graduated to GA in Kubernetes v1.19. Support for seccomp alpha annotations will be removed in v1.22
  • Replace seccomp annotations with the GA seccompProfile field in the PodTemplate securityContext
  • Switch profile from docker/default to runtime/default (no effective change, since docker is the runtime)
  • Verify with docker inspect SecurityOpt. Without the profile, you'd see seccomp=unconfined

Related: poseidon/terraform-render-bootstrap#215

* seccomp graduated to GA in Kubernetes v1.19. Support for
seccomp alpha annotations will be removed in v1.22
* Replace seccomp annotations with the GA seccompProfile
field in the PodTemplate securityContext
* Switch profile from `docker/default` to `runtime/default`
(no effective change, since docker is the runtime)
* Verify with docker inspect SecurityOpt. Without the profile,
you'd see `seccomp=unconfined`

Related: poseidon/terraform-render-bootstrap#215
@dghubble dghubble merged commit 29b16c3 into master Sep 10, 2020
@dghubble dghubble deleted the seccomp-stable branch September 10, 2020 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant