feat: add seccompProfile (#592)

ory · Apr 18, 2023 · f113278 · f113278
1 parent 00f11ce
commit f113278
Show file tree

Hide file tree

Showing 7 changed files with 14 additions and 0 deletions.
diff --git a/helm/charts/hydra-maester/values.yaml b/helm/charts/hydra-maester/values.yaml
@@ -52,6 +52,8 @@ deployment:
     capabilities:
       drop:
       - ALL
+    seccompProfile:
+      type: RuntimeDefault
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 1000

diff --git a/helm/charts/hydra/values.yaml b/helm/charts/hydra/values.yaml
@@ -194,6 +194,8 @@ deployment:
     capabilities:
       drop:
         - ALL
+    seccompProfile:
+      type: RuntimeDefault
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 100

diff --git a/helm/charts/keto/values.yaml b/helm/charts/keto/values.yaml
@@ -31,6 +31,8 @@ securityContext:
   capabilities:
     drop:
       - ALL
+  seccompProfile:
+    type: RuntimeDefault
   readOnlyRootFilesystem: true
   runAsNonRoot: true
   runAsUser: 100

diff --git a/helm/charts/kratos-selfservice-ui-node/values.yaml b/helm/charts/kratos-selfservice-ui-node/values.yaml
@@ -48,6 +48,8 @@ securityContext:
   capabilities:
     drop:
     - ALL
+  seccompProfile:
+    type: RuntimeDefault
   readOnlyRootFilesystem: true
   runAsNonRoot: true
   runAsUser: 1000

diff --git a/helm/charts/kratos/values.yaml b/helm/charts/kratos/values.yaml
@@ -445,6 +445,8 @@ securityContext:
   capabilities:
     drop:
       - ALL
+  seccompProfile:
+    type: RuntimeDefault
   readOnlyRootFilesystem: true
   runAsNonRoot: true
   runAsUser: 100

diff --git a/helm/charts/oathkeeper-maester/values.yaml b/helm/charts/oathkeeper-maester/values.yaml
@@ -48,6 +48,8 @@ deployment:
     capabilities:
       drop:
       - ALL
+    seccompProfile:
+      type: RuntimeDefault
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 1000

diff --git a/helm/charts/oathkeeper/values.yaml b/helm/charts/oathkeeper/values.yaml
@@ -208,6 +208,8 @@ deployment:
     capabilities:
       drop:
         - ALL
+    seccompProfile:
+      type: RuntimeDefault
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 1000