Merge pull request kubevirt#8751 from akalenyu/scc-seccomp-profiles

Add restricted seccomp profile to controller SCC
kubevirt-bot · Nov 11, 2022 · c160338 · c160338
2 parents 6ff2995 + bee300b
commit c160338
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/virt-operator/resource/generate/components/scc.go b/pkg/virt-operator/resource/generate/components/scc.go
@@ -74,6 +74,9 @@ func NewKubeVirtControllerSCC(namespace string) *secv1.SecurityContextConstraint
 	scc.SELinuxContext = secv1.SELinuxContextStrategyOptions{
 		Type: secv1.SELinuxStrategyRunAsAny,
 	}
+	scc.SeccompProfiles = []string{
+		"runtime/default",
+	}
 	scc.AllowedCapabilities = []corev1.Capability{
 		// add CAP_SYS_NICE capability to allow setting cpu affinity
 		"SYS_NICE",