File tree Expand file tree Collapse file tree 14 files changed +713
-0
lines changed
examples/pods/security/seccomp Expand file tree Collapse file tree 14 files changed +713
-0
lines changed Load Diff Large diffs are not rendered by default.
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : audit-pod
5
+ labels :
6
+ app : audit-pod
7
+ annotations :
8
+ seccomp.security.alpha.kubernetes.io/pod : localhost/profiles/audit.json
9
+ spec :
10
+ containers :
11
+ - name : test-container
12
+ image : hashicorp/http-echo:0.2.3
13
+ args :
14
+ - " -text=just made some syscalls!"
15
+ securityContext :
16
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : default-pod
5
+ labels :
6
+ app : default-pod
7
+ annotations :
8
+ seccomp.security.alpha.kubernetes.io/pod : runtime/default
9
+ spec :
10
+ containers :
11
+ - name : test-container
12
+ image : hashicorp/http-echo:0.2.3
13
+ args :
14
+ - " -text=just made some syscalls!"
15
+ securityContext :
16
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : fine-pod
5
+ labels :
6
+ app : fine-pod
7
+ annotations :
8
+ seccomp.security.alpha.kubernetes.io/pod : localhost/profiles/fine-grained.json
9
+ spec :
10
+ containers :
11
+ - name : test-container
12
+ image : hashicorp/http-echo:0.2.3
13
+ args :
14
+ - " -text=just made some syscalls!"
15
+ securityContext :
16
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : violation-pod
5
+ labels :
6
+ app : violation-pod
7
+ annotations :
8
+ seccomp.security.alpha.kubernetes.io/pod : localhost/profiles/violation.json
9
+ spec :
10
+ containers :
11
+ - name : test-container
12
+ image : hashicorp/http-echo:0.2.3
13
+ args :
14
+ - " -text=just made some syscalls!"
15
+ securityContext :
16
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : pod
5
+ spec :
6
+ securityContext :
7
+ seccompProfile :
8
+ type : Unconfined
9
+ ephemeralContainers :
10
+ - name : ephemeral-container
11
+ image : debian
12
+ securityContext :
13
+ seccompProfile :
14
+ type : RuntimeDefault
15
+ initContainers :
16
+ - name : init-container
17
+ image : debian
18
+ securityContext :
19
+ seccompProfile :
20
+ type : RuntimeDefault
21
+ containers :
22
+ - name : container
23
+ image : docker.io/library/debian:stable
24
+ securityContext :
25
+ seccompProfile :
26
+ type : Localhost
27
+ localhostProfile : my-profile.json
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : audit-pod
5
+ labels :
6
+ app : audit-pod
7
+ spec :
8
+ securityContext :
9
+ seccompProfile :
10
+ type : Localhost
11
+ localhostProfile : profiles/audit.json
12
+ containers :
13
+ - name : test-container
14
+ image : hashicorp/http-echo:1.0
15
+ args :
16
+ - " -text=just made some syscalls!"
17
+ securityContext :
18
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : default-pod
5
+ labels :
6
+ app : default-pod
7
+ spec :
8
+ securityContext :
9
+ seccompProfile :
10
+ type : RuntimeDefault
11
+ containers :
12
+ - name : test-container
13
+ image : hashicorp/http-echo:1.0
14
+ args :
15
+ - " -text=just made some more syscalls!"
16
+ securityContext :
17
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : fine-pod
5
+ labels :
6
+ app : fine-pod
7
+ spec :
8
+ securityContext :
9
+ seccompProfile :
10
+ type : Localhost
11
+ localhostProfile : profiles/fine-grained.json
12
+ containers :
13
+ - name : test-container
14
+ image : hashicorp/http-echo:1.0
15
+ args :
16
+ - " -text=just made some syscalls!"
17
+ securityContext :
18
+ allowPrivilegeEscalation : false
Original file line number Diff line number Diff line change
1
+ apiVersion : v1
2
+ kind : Pod
3
+ metadata :
4
+ name : violation-pod
5
+ labels :
6
+ app : violation-pod
7
+ spec :
8
+ securityContext :
9
+ seccompProfile :
10
+ type : Localhost
11
+ localhostProfile : profiles/violation.json
12
+ containers :
13
+ - name : test-container
14
+ image : hashicorp/http-echo:1.0
15
+ args :
16
+ - " -text=just made some syscalls!"
17
+ securityContext :
18
+ allowPrivilegeEscalation : false
You can’t perform that action at this time.
0 commit comments