seccompProfile
The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
object
Properties
Section titled “Properties”| Property | Type | Required | Default | Description |
|---|---|---|---|---|
localhostProfile | string | No | - | localhostProfile indicates a profile defined in a file on… |
type | string | Yes | - | type indicates which kind of seccomp profile will be appl… |
Property Details
Section titled “Property Details”localhostProfile
Section titled “localhostProfile”localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet’s configured seccomp profile location. Must be set if type is “Localhost”. Must NOT be set for any other type.
type indicates which kind of seccomp profile will be applied. Valid options are:
Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.