diff --git a/charts/base-cluster/templates/global/prevent-uninstallation.yaml b/charts/base-cluster/templates/global/prevent-uninstallation.yaml index b99da1d24..2855d47dc 100644 --- a/charts/base-cluster/templates/global/prevent-uninstallation.yaml +++ b/charts/base-cluster/templates/global/prevent-uninstallation.yaml @@ -17,6 +17,8 @@ spec: runAsGroup: 1000 runAsUser: 1000 fsGroup: 1000 + seccompProfile: + type: RuntimeDefault containers: - name: fail image: {{ template "base-cluster.kubectl.image" . }} diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml index f3b8536fe..88c77fab3 100644 --- a/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml +++ b/charts/base-cluster/templates/monitoring/deadMansSwitch/cronjob.yaml @@ -26,6 +26,8 @@ spec: runAsUser: 1000 runAsNonRoot: true fsGroup: 1000 + seccompProfile: + type: RuntimeDefault automountServiceAccountToken: false restartPolicy: OnFailure containers: diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml index c3d2ab2b7..07cf27e90 100644 --- a/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml +++ b/charts/base-cluster/templates/monitoring/deadMansSwitch/registration.yaml @@ -17,6 +17,8 @@ spec: runAsUser: 1000 runAsNonRoot: true fsGroup: 1000 + seccompProfile: + type: RuntimeDefault automountServiceAccountToken: false restartPolicy: OnFailure containers: diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml index 68371c683..06a1915dd 100644 --- a/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml +++ b/charts/base-cluster/templates/monitoring/deadMansSwitch/unregister.yaml @@ -17,6 +17,8 @@ spec: runAsUser: 1000 runAsNonRoot: true fsGroup: 1000 + seccompProfile: + type: RuntimeDefault automountServiceAccountToken: false restartPolicy: OnFailure containers: