Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Set seccomp profile to RuntimeDefault for csi-driver-node #524

Merged
merged 1 commit into from
Aug 29, 2022
Merged

Set seccomp profile to RuntimeDefault for csi-driver-node #524

merged 1 commit into from
Aug 29, 2022

Conversation

dimityrmirchev
Copy link
Member

How to categorize this PR?

/area security
/kind enhancement
/platform alicloud

What this PR does / why we need it:
This PR enhances the securityContext of the csi-driver-node pods by adding a seccomp profile.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

The `csi-driver-node` daemonset now have its seccomp profile set to "RuntimeDefault".

@dimityrmirchev dimityrmirchev requested review from a team as code owners August 18, 2022 12:30
@gardener-robot gardener-robot added area/security Security related kind/enhancement Enhancement, improvement, extension platform/alicloud Alicloud platform/infrastructure needs/review Needs review size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) labels Aug 18, 2022
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Aug 18, 2022
@shaoyongfeng
Copy link
Contributor

/lgtm

@gardener-robot gardener-robot added reviewed/lgtm Has approval for merging and removed needs/review Needs review labels Aug 25, 2022
@shaoyongfeng shaoyongfeng merged commit f054477 into gardener:master Aug 29, 2022
@gardener-robot gardener-robot added the status/closed Issue is closed (either delivered or triaged) label Aug 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@shaoyongfeng shaoyongfeng shaoyongfeng approved these changes

Assignees
No one assigned
Labels
area/security Security related kind/enhancement Enhancement, improvement, extension needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) platform/alicloud Alicloud platform/infrastructure reviewed/lgtm Has approval for merging size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) status/closed Issue is closed (either delivered or triaged)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@dimityrmirchev @shaoyongfeng @gardener-robot-ci-3 @gardener-robot