Skip to content
This repository has been archived by the owner on Sep 26, 2023. It is now read-only.

Stop setting seccompProfile on the operator pods #256

Merged
merged 1 commit into from
Sep 19, 2023
Merged

Stop setting seccompProfile on the operator pods #256

merged 1 commit into from
Sep 19, 2023

Conversation

mprahl
Copy link
Collaborator

@mprahl mprahl commented Sep 19, 2023

This allows OpenShift to set the correct profile automatically for backwards compatibility with OCP 4.10.

Note in OpenShift 4.10, it sets the annotation openshift.io/scc: restricted on the pod when seccompProfile is unset. For OCP 4.13, it sets the annotation openshift.io/scc: restricted-v2 on the pod when seccompProfile is unset.

This allows OpenShift to set the correct profile automatically for
backwards compatibility with OCP 4.10.

Signed-off-by: mprahl <[email protected]>
@mprahl mprahl changed the title WIP: Stop setting seccompProfile on the operator pods Stop setting seccompProfile on the operator pods Sep 19, 2023
@mprahl mprahl requested a review from gparvin September 19, 2023 19:12
Copy link
Collaborator

@gparvin gparvin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@mprahl mprahl merged commit d47b8e4 into gatekeeper:main Sep 19, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants