add seccompProfile setting

kiali · Aug 24, 2022 · c72c30a · c72c30a
1 parent 97cde0a
commit c72c30a
Show file tree

Hide file tree

Showing 5 changed files with 11 additions and 1 deletion.
diff --git a/manifests/kiali-community/1.56.0/manifests/kiali.v1.56.0.clusterserviceversion.yaml b/manifests/kiali-community/1.56.0/manifests/kiali.v1.56.0.clusterserviceversion.yaml
@@ -207,6 +207,8 @@ spec:
                   allowPrivilegeEscalation: false
                   privileged: false
                   runAsNonRoot: true
+                  seccompProfile:
+                    type: RuntimeDefault
                   capabilities:
                     drop:
                     - ALL

diff --git a/manifests/kiali-ossm/manifests/kiali.clusterserviceversion.yaml b/manifests/kiali-ossm/manifests/kiali.clusterserviceversion.yaml
@@ -241,6 +241,8 @@ spec:
                   allowPrivilegeEscalation: false
                   privileged: false
                   runAsNonRoot: true
+                  seccompProfile:
+                    type: RuntimeDefault
                   capabilities:
                     drop:
                     - ALL
@@ -275,7 +277,7 @@ spec:
                 - name: RELATED_IMAGE_kiali_default
                   value: "registry-proxy.engineering.redhat.com/rh-osbs/openshift-service-mesh-kiali-rhel8${KIALI_1_48_TAG}"
                 - name: RELATED_IMAGE_kiali_v1_48
-                  value: "registry-proxy.engineering.redhat.com/rh-osbs/openshift-service-mesh-kiali-rhel8${KIALI_1_48_TAG}"  
+                  value: "registry-proxy.engineering.redhat.com/rh-osbs/openshift-service-mesh-kiali-rhel8${KIALI_1_48_TAG}"
                 - name: RELATED_IMAGE_kiali_v1_36
                   value: "registry-proxy.engineering.redhat.com/rh-osbs/openshift-service-mesh-kiali-rhel8${KIALI_1_36_TAG}"
                 - name: RELATED_IMAGE_kiali_v1_24

diff --git a/manifests/kiali-upstream/1.56.0/manifests/kiali.v1.56.0.clusterserviceversion.yaml b/manifests/kiali-upstream/1.56.0/manifests/kiali.v1.56.0.clusterserviceversion.yaml
@@ -207,6 +207,8 @@ spec:
                   allowPrivilegeEscalation: false
                   privileged: false
                   runAsNonRoot: true
+                  seccompProfile:
+                    type: RuntimeDefault
                   capabilities:
                     drop:
                     - ALL

diff --git a/roles/default/kiali-deploy/templates/kubernetes/deployment.yaml b/roles/default/kiali-deploy/templates/kubernetes/deployment.yaml
@@ -60,6 +60,8 @@ spec:
           privileged: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
           capabilities:
             drop:
             - ALL

diff --git a/roles/default/kiali-deploy/templates/openshift/deployment.yaml b/roles/default/kiali-deploy/templates/openshift/deployment.yaml
@@ -60,6 +60,8 @@ spec:
           privileged: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
           capabilities:
             drop:
             - ALL