File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed
content/en/docs/tutorials/security Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -56,15 +56,14 @@ run as `Unconfined`.
56
56
57
57
<!-- steps -->
58
58
59
-
60
59
## Download example seccomp profiles {#download-profiles}
61
60
62
61
The contents of these profiles will be explored later on, but for now go ahead
63
62
and download them into a directory named ` profiles/ ` so that they can be loaded
64
63
into the cluster.
65
64
66
65
{{< tabs name="tab_with_code" >}}
67
- {{{ < tab name="audit.json" >}}
66
+ {{< tab name="audit.json" >}}
68
67
{{< codenew file="pods/security/seccomp/profiles/audit.json" >}}
69
68
{{< /tab >}}
70
69
{{< tab name="violation.json" >}}
@@ -363,7 +362,7 @@ kubectl delete service audit-pod --wait
363
362
kubectl delete pod audit-pod --wait --now
364
363
```
365
364
366
- ## Create Pod with seccomp profile that causes violation
365
+ ## Create Pod with a seccomp profile that causes violation
367
366
368
367
For demonstration, apply a profile to the Pod that does not allow for any
369
368
syscalls.
@@ -402,7 +401,7 @@ Clean up that Pod before moving to the next section:
402
401
kubectl delete pod violation-pod --wait --now
403
402
```
404
403
405
- ## Create Pod with seccomp profile that only allows necessary syscalls
404
+ ## Create Pod with a seccomp profile that only allows necessary syscalls
406
405
407
406
If you take a look at the ` fine-grained.json ` profile, you will notice some of the syscalls
408
407
seen in syslog of the first example where the profile set `"defaultAction":
You can’t perform that action at this time.
0 commit comments