Skip to content

K
k3s
Commit d0205c8b authored by Pengfei Ni's avatar Pengfei Ni
Browse files
Options

Add seccomp profile in sandbox security context

parent 2492477f
Expand all Hide whitespace changes
Inline Side-by-side
Showing with 6 additions and 0 deletions
pkg/kubelet/apis/cri/v1alpha1/runtime/api.proto
View file @ d0205c8b
...@@ -200,6 +200,12 @@ message LinuxSandboxSecurityContext { ...@@ -200,6 +200,12 @@ message LinuxSandboxSecurityContext {
// This allows a sandbox to take additional security precautions if no // This allows a sandbox to take additional security precautions if no
// privileged containers are expected to be run. // privileged containers are expected to be run.
bool privileged = 6; bool privileged = 6;
// Seccomp profile for the sandbox, candidate values are:
// * runtime/default: the default profile for the container runtime
// * unconfined: unconfined profile, ie, no seccomp sandboxing
// * localhost/<full-path-to-profile>: the profile installed on the node.
// <full-path-to-profile> is the full path of the profile.
string seccomp_profile_path = 7;
} }
// LinuxPodSandboxConfig holds platform-specific configurations for Linux // LinuxPodSandboxConfig holds platform-specific configurations for Linux
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment