Skip to content

Commit 61b8caf

Browse files
saschagrunertTim Bannister
andcommitted
Mention that privileged containers run unconfined
This is a note which helps users to understand the interaction between privileged containers and seccomp profiles. Signed-off-by: Sascha Grunert <[email protected]> Co-authored-by: Tim Bannister <[email protected]>
1 parent cdefcc3 commit 61b8caf

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

content/en/docs/tutorials/clusters/seccomp.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,12 @@ make sure that your cluster is [configured
4646
correctly](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)
4747
for the version you are using.
4848

49+
{{< note >}}
50+
It is not possible to apply a seccomp profile to a container running with
51+
`privileged: true` set in the container's `securityContext`. Privileged containers always
52+
run as `Unconfined`.
53+
{{< /note >}}
54+
4955
<!-- steps -->
5056

5157
## Enable the use of `RuntimeDefault` as the default seccomp profile for all workloads

0 commit comments

Comments
 (0)