Skip to content

Commit a4ef3c6

Browse files
committed
[hi] add example pod security/seccomp/*yaml
1 parent 201b42b commit a4ef3c6

File tree

2 files changed

+34
-0
lines changed

2 files changed

+34
-0
lines changed
Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
apiVersion: v1
2+
kind: Pod
3+
metadata:
4+
name: pod
5+
spec:
6+
securityContext:
7+
seccompProfile:
8+
type: Unconfined
9+
ephemeralContainers:
10+
- name: ephemeral-container
11+
image: debian
12+
securityContext:
13+
seccompProfile:
14+
type: RuntimeDefault
15+
initContainers:
16+
- name: init-container
17+
image: debian
18+
securityContext:
19+
seccompProfile:
20+
type: RuntimeDefault
21+
containers:
22+
- name: container
23+
image: docker.io/library/debian:stable
24+
securityContext:
25+
seccompProfile:
26+
type: Localhost
27+
localhostProfile: my-profile.json
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
apiVersion: kind.x-k8s.io/v1alpha4
2+
kind: Cluster
3+
nodes:
4+
- role: control-plane
5+
extraMounts:
6+
- hostPath: "./profiles"
7+
containerPath: "/var/lib/kubelet/seccomp/profiles"

0 commit comments

Comments
 (0)