search

arangodb / kube-arangodb

ArangoDB Kubernetes Operator - Start ArangoDB on Kubernetes in 5min
https://arangodb.github.io/kube-arangodb/
Apache License 2.0
225 stars 70 forks source link

Set seccompProfile on pod level #1638

Closed 4gsim closed 4 months ago

4gsim commented 5 months ago

Can you please add the possibility to set the seccompProfile on the pod level for the arango pods?

ajanikow commented 5 months ago

Hello!

Like this: https://arangodb.github.io/kube-arangodb/docs/api/ArangoDeployment.V1.html#specagentssecuritycontextseccompprofile ?

Best Regards, Adam.

4gsim commented 5 months ago

This configuration only sets the seccompProfile on container level, not on pod level. Please have a look at https://github.com/arangodb/kube-arangodb/blob/e10ac2662ccbea6a61f1b8fcbbf3d566fae50553/pkg/apis/deployment/v2alpha1/server_group_security_context_spec.go#L110

ajanikow commented 5 months ago

Understood! It is there, but not used in the PodRenderer - we will fix this part.

ajanikow commented 4 months ago

Fixed in 1.2.40