Skip to content

Commit 370b521

Browse files
authored
Merge pull request #29489 from saschagrunert/privileged-unconfined
Mention that privileged containers run unconfined
2 parents 753e70c + 61b8caf commit 370b521

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

content/en/docs/tutorials/clusters/seccomp.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,12 @@ make sure that your cluster is [configured
4646
correctly](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)
4747
for the version you are using.
4848

49+
{{< note >}}
50+
It is not possible to apply a seccomp profile to a container running with
51+
`privileged: true` set in the container's `securityContext`. Privileged containers always
52+
run as `Unconfined`.
53+
{{< /note >}}
54+
4955
<!-- steps -->
5056

5157
## Enable the use of `RuntimeDefault` as the default seccomp profile for all workloads

0 commit comments

Comments
 (0)