From a8a24849c02fc85e0e6f8873a80f78d38a3f104d Mon Sep 17 00:00:00 2001
From: Martin Ostrowski <mostrowski@google.com>
Date: Mon, 4 Jun 2018 14:06:22 -0700
Subject: [PATCH] Modify security profile for proxy

---
 cluster/addons/istio/auth/istio-auth.yaml | 3 +++
 cluster/addons/istio/noauth/istio.yaml    | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/cluster/addons/istio/auth/istio-auth.yaml b/cluster/addons/istio/auth/istio-auth.yaml
index c9f895e5314..5b30bb3b9d5 100644
--- a/cluster/addons/istio/auth/istio-auth.yaml
+++ b/cluster/addons/istio/auth/istio-auth.yaml
@@ -878,6 +878,9 @@ data:
   config: |-
     policy: enabled
     template: |-
+      metadata:
+        annotations:
+          container.seccomp.security.alpha.kubernetes.io/istio-proxy: 'docker/default'
       initContainers:
       - name: istio-init
         image: gcr.io/istio-release/proxy_init:0.8.0
diff --git a/cluster/addons/istio/noauth/istio.yaml b/cluster/addons/istio/noauth/istio.yaml
index 31eaf0eb40e..363ecb9d800 100644
--- a/cluster/addons/istio/noauth/istio.yaml
+++ b/cluster/addons/istio/noauth/istio.yaml
@@ -865,6 +865,9 @@ data:
   config: |-
     policy: enabled
     template: |-
+      metadata:
+        annotations:
+          container.seccomp.security.alpha.kubernetes.io/istio-proxy: 'docker/default'
       initContainers:
       - name: istio-init
         image: gcr.io/istio-release/proxy_init:0.8.0