updated webhook deployment container securityContext to restrict unsh…

…are call Signed-off-by: Santosh Kumar <[email protected]>
hyperledger-labs · May 20, 2024 · 48fdc43 · 48fdc43
1 parent 96be379
commit 48fdc43
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/roles/hlfsupport_crds/templates/k8s/deployment.yml.j2 b/roles/hlfsupport_crds/templates/k8s/deployment.yml.j2
@@ -55,6 +55,8 @@ spec:
               - ALL
               add:
               - NET_BIND_SERVICE
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: "LICENSE"
               value: "accept"

diff --git a/roles/hlfsupport_crds/templates/openshift/deployment.yml.j2 b/roles/hlfsupport_crds/templates/openshift/deployment.yml.j2
@@ -55,6 +55,8 @@ spec:
               - ALL
               add:
               - NET_BIND_SERVICE
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: "LICENSE"
               value: "accept"