github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-07-19 09:51:29 +00:00
Code Issues Projects Releases Wiki Activity

genpolicy: ignore SeccompProfile in PodSpec

Browse Source 
Ignore SeccompProfile in PodSpec

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
This commit is contained in:
Saul Paredes 2024-01-26 10:52:25 -08:00
parent 7aeaf2502a
commit 44afb4aa5f
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/tools/genpolicy/src/pod.rs
View File

@ -283,6 +283,19 @@ struct SecurityContext {
#[serde(skip_serializing_if = "Option::is_none")] #[serde(skip_serializing_if = "Option::is_none")]
runAsUser: Option<i64>, runAsUser: Option<i64>,
#[serde(skip_serializing_if = "Option::is_none")]
seccompProfile: Option<SeccompProfile>,
}
/// See Reference / Kubernetes API / Workload Resources / Pod.
#[derive(Clone, Debug, Serialize, Deserialize)]
struct SeccompProfile {
#[serde(rename = "type")]
profile_type: String,
#[serde(skip_serializing_if = "Option::is_none")]
localhostProfile: Option<String>,
} }
/// See Reference / Kubernetes API / Workload Resources / Pod. /// See Reference / Kubernetes API / Workload Resources / Pod.
@ -860,6 +873,7 @@ pub async fn add_pause_container(containers: &mut Vec<Container>, config: &Confi
privileged: None, privileged: None,
capabilities: None, capabilities: None,
runAsUser: None, runAsUser: None,
seccompProfile: None,
}), }),
..Default::default() ..Default::default()
}; };

3
tests/integration/kubernetes/runtimeclass_workloads/k8s-policy-pod.yaml
View File

@ -24,3 +24,6 @@ spec:
configMapKeyRef: configMapKeyRef:
name: policy-configmap name: policy-configmap
key: data-2 key: data-2
securityContext:
seccompProfile:
type: RuntimeDefault