From be4bc3fd4238b3017a8b2f03c440e6bc08a1d60d Mon Sep 17 00:00:00 2001
From: Jacob See <5027680+jacobsee@users.noreply.github.com>
Date: Fri, 7 Mar 2025 17:24:40 -0800
Subject: [PATCH] The required-scc annotation should be on the template that
 gets applied to the pod itself, not the job.

---
 pkg/resource/prunercronjob.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/resource/prunercronjob.go b/pkg/resource/prunercronjob.go
index 8dc2cf9db1..aa00c28988 100644
--- a/pkg/resource/prunercronjob.go
+++ b/pkg/resource/prunercronjob.go
@@ -175,7 +175,7 @@ done
 		},
 	}
 	cj.Spec.JobTemplate.Labels = map[string]string{"created-by": gcj.GetName()}
-	cj.Spec.JobTemplate.Annotations = map[string]string{securityv1.RequiredSCCAnnotation: "restricted-v2"}
+	cj.Spec.JobTemplate.Spec.Template.Annotations = map[string]string{securityv1.RequiredSCCAnnotation: "restricted-v2"}
 	return cj, nil
 }