Use default seccomp profile for addons

This commit is contained in:
Zhen Wang 2018-05-02 22:50:29 -07:00
parent 4299a0518c
commit 27da26754f
11 changed files with 15 additions and 0 deletions

View File

@ -17,6 +17,8 @@ spec:
labels: labels:
k8s-app: glbc k8s-app: glbc
name: glbc name: glbc
annotations:
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
containers: containers:
- name: default-http-backend - name: default-http-backend

View File

@ -56,6 +56,7 @@ spec:
version: v1.5.2 version: v1.5.2
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -56,6 +56,7 @@ spec:
version: v1.5.2 version: v1.5.2
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -56,6 +56,7 @@ spec:
version: v1.5.2 version: v1.5.2
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -21,6 +21,7 @@ spec:
version: v4 version: v4
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
tolerations: tolerations:

View File

@ -43,6 +43,7 @@ spec:
version: v1.5.2 version: v1.5.2
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -43,6 +43,7 @@ spec:
version: v1.5.2 version: v1.5.2
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -26,6 +26,7 @@ spec:
k8s-app: kubernetes-dashboard k8s-app: kubernetes-dashboard
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -77,6 +77,7 @@ spec:
k8s-app: kube-dns-autoscaler k8s-app: kube-dns-autoscaler
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
containers: containers:

View File

@ -40,6 +40,8 @@ spec:
metadata: metadata:
labels: labels:
app: metadata-agent app: metadata-agent
annotations:
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
serviceAccountName: metadata-agent serviceAccountName: metadata-agent
containers: containers:
@ -103,6 +105,8 @@ spec:
metadata: metadata:
labels: labels:
app: metadata-agent-cluster-level app: metadata-agent-cluster-level
annotations:
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
serviceAccountName: metadata-agent serviceAccountName: metadata-agent
containers: containers:

View File

@ -43,6 +43,7 @@ spec:
version: v0.2.1 version: v0.2.1
annotations: annotations:
scheduler.alpha.kubernetes.io/critical-pod: '' scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec: spec:
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
serviceAccountName: metrics-server serviceAccountName: metrics-server