feat: add seccompProfile (kedacore#3562)

andyatwork · Oct 31, 2022 · d51b9e1 · d51b9e1
1 parent 3f042bd
commit d51b9e1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -45,6 +45,7 @@ To learn more about active deprecations, we recommend checking [GitHub Discussio
 ### Improvements
 
 - **Event Hubs Scaler:** Support Azure AD Pod & Workload Identity for Storage Blobs ([#3569](https://github.com/kedacore/keda/issues/3569))
+- **General:** Add explicit seccompProfile type to securityContext config ([#3561](https://github.com/kedacore/keda/issues/3561))
 
 ### Fixes
 

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -68,6 +68,8 @@ spec:
               - ALL
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
+            seccompProfile:
+              type: RuntimeDefault
       terminationGracePeriodSeconds: 10
       nodeSelector:
         kubernetes.io/os: linux
diff --git a/config/metrics-server/deployment.yaml b/config/metrics-server/deployment.yaml
@@ -70,8 +70,10 @@ spec:
               drop:
               - ALL
             allowPrivilegeEscalation: false
-            ## Metrics server needs to write the self-signed cert so it's not possible set this
+            ## Metrics server needs to write the self-signed cert. See FAQ for discussion of options.
             # readOnlyRootFilesystem: true
+            seccompProfile:
+              type: RuntimeDefault
       nodeSelector:
         kubernetes.io/os: linux
       volumes: