Prerequisite
-
The cluster administrator has set up the custom seccomp profile. For more details, see "Setting up the custom seccomp profile".
Procedure
-
Apply the seccomp profile to the workload by setting the
securityContext.seccompProfile.type
field as following:Examplespec: securityContext: seccompProfile: type: Localhost localhostProfile: <custom-name>.json (1)
-
Provide the name of your custom seccomp profile.
Alternatively, you can use the pod annotations
seccomp.security.alpha.kubernetes.io/pod: localhost/<custom-name>.json
. However, this method is deprecated in {product-title} {product-version}.
-