blumeops/argocd
Erich Blume 924325ebd5 Fix DinD seccomp profile broken by RuntimeDefault rollout
The pod-level RuntimeDefault seccomp profile (07e9c81) overrides the
DinD sidecar's privileged flag in newer Kubernetes versions, blocking
Docker daemon syscalls. Set Unconfined explicitly on the DinD container
while keeping RuntimeDefault on the runner container.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 17:09:57 -07:00
..
apps Add Kingfisher secret scanner CronJob (#317) 2026-03-28 21:39:55 -07:00
manifests Fix DinD seccomp profile broken by RuntimeDefault rollout 2026-03-29 17:09:57 -07:00