fix(base-cluster): add missing seccompProfiles (#988)

teutonet · Jun 18, 2024 · 18b59c6 · 18b59c6
1 parent a931a2e
commit 18b59c6
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 0 deletions.
diff --git a/charts/base-cluster/templates/global/prevent-uninstallation.yaml b/charts/base-cluster/templates/global/prevent-uninstallation.yaml
@@ -17,6 +17,8 @@ spec:
         runAsGroup: 1000
         runAsUser: 1000
         fsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
       containers:
         - name: fail
           image: {{ template "base-cluster.kubectl.image" . }}

diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml
@@ -26,6 +26,8 @@ spec:
             runAsUser: 1000
             runAsNonRoot: true
             fsGroup: 1000
+            seccompProfile:
+              type: RuntimeDefault
           automountServiceAccountToken: false
           restartPolicy: OnFailure
           containers:

diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml
@@ -17,6 +17,8 @@ spec:
         runAsUser: 1000
         runAsNonRoot: true
         fsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
       automountServiceAccountToken: false
       restartPolicy: OnFailure
       containers:

diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml
@@ -17,6 +17,8 @@ spec:
         runAsUser: 1000
         runAsNonRoot: true
         fsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
       automountServiceAccountToken: false
       restartPolicy: OnFailure
       containers: