Merge pull request #105 from DFE-Digital/1891-security-aks-container-…

…hardening-seccomp [1891] Enable RuntimeDefault seccomp profile on containers
DFE-Digital · Jun 28, 2024 · 070041d · 070041d
2 parents cbaef31 + 079f716
commit 070041d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/aks/application/resources.tf b/aks/application/resources.tf
@@ -165,6 +165,12 @@ resource "kubernetes_deployment" "main" {
               period_seconds    = 5
             }
           }
+
+          security_context {
+            seccomp_profile {
+              type = "RuntimeDefault"
+            }
+          }
         }
       }
     }