eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Add RuntimeDefault seccomp profiles to all managed workloads

Browse source 
Addresses 32 CIS Kubernetes Benchmark failures from Prowler scan
(core_seccomp_profile_docker_default). Applied pod-level seccomp
RuntimeDefault to 18 deployments/statefulsets and 2 cronjobs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-03-24 16:19:40 -07:00
commit 07e9c810ca
21 changed files with 55 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog.d/+seccomp-profiles.infra.md Normal file
View file

@ -0,0 +1 @@
Add RuntimeDefault seccomp profiles to all managed deployments, statefulsets, and cronjobs.