Added PSS profile seccompProfile to pods of istio

Signed-off-by: biswajit-9776 <biswajitpatt139@gmail.com>
biswajit-9776 · Jul 4, 2024 · ea16f4a · ea16f4a
1 parent f3edb26
commit ea16f4a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/common/istio-1-22/istio-install/base/install.yaml b/common/istio-1-22/istio-install/base/install.yaml
@@ -2739,6 +2739,8 @@ spec:
             cpu: 100m
             memory: 128Mi
         securityContext:
+          seccompProfile:
+            type: RuntimeDefault
           allowPrivilegeEscalation: false
           capabilities:
             drop:
@@ -2922,6 +2924,8 @@ spec:
             cpu: 500m
             memory: 2048Mi
         securityContext:
+          seccompProfile:
+            type: RuntimeDefault
           allowPrivilegeEscalation: false
           capabilities:
             drop:

diff --git a/common/istio-cni-1-22/istio-install/base/install.yaml b/common/istio-cni-1-22/istio-install/base/install.yaml
@@ -3002,6 +3002,8 @@ spec:
             cpu: 100m
             memory: 128Mi
         securityContext:
+          seccompProfile:
+            type: RuntimeDefault
           allowPrivilegeEscalation: false
           capabilities:
             drop:
@@ -3185,6 +3187,8 @@ spec:
             cpu: 500m
             memory: 2048Mi
         securityContext:
+          seccompProfile:
+            type: RuntimeDefault
           allowPrivilegeEscalation: false
           capabilities:
             drop: