Adding Restriction on Security Context so that unshare calls are not …

…allowed Signed-off-by: Shoaeb Jindani <[email protected]>
hyperledger-labs · Feb 9, 2024 · 474c78b · 474c78b
1 parent 3d81bc4
commit 474c78b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/definitions/console/deployment.yaml b/definitions/console/deployment.yaml
@@ -62,6 +62,8 @@ spec:
               ephemeral-storage: 100M
               memory: 1000Mi
           securityContext:
+            seccompProfile:
+              type: RuntimeDefault
             allowPrivilegeEscalation: false
             capabilities:
               add: