generic-device-plugin: update default security context

k8s-at-our-homes · Jun 28, 2024 · 48ea254 · 48ea254
1 parent 6ebc35d
commit 48ea254
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/charts/generic-device-plugin/Chart.yaml b/charts/generic-device-plugin/Chart.yaml
@@ -1,3 +1,3 @@
 apiVersion: v2
 name: generic-device-plugin
-version: 1.0.0
+version: 1.0.1
diff --git a/charts/generic-device-plugin/values.yaml b/charts/generic-device-plugin/values.yaml
@@ -16,11 +16,15 @@ podSecurityContext:
   runAsNonRoot: true
 
 securityContext:
+  privileged: false
+  allowPrivilegeEscalation: false
   capabilities:
     drop: [ "ALL" ]
-  allowPrivilegeEscalation: false
   readOnlyRootFilesystem: true
-  privileged: false
+  seccompProfile:
+    type: "RuntimeDefault"
+  seLinuxOptions:
+    type: "container_device_plugin_t"
 
 image:
   registry: docker.io