Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Set seccomp profile to RuntimeDefault for csi-driver-node #493

Merged
merged 1 commit into from
Oct 10, 2022
Merged

Set seccomp profile to RuntimeDefault for csi-driver-node #493

merged 1 commit into from
Oct 10, 2022

Conversation

AleksandarSavchev
Copy link
Member

@AleksandarSavchev AleksandarSavchev commented Sep 12, 2022 •
edited
Loading

How to categorize this PR?

/area security
/kind enhancement
/platform openstack

What this PR does / why we need it:
This PR enhances the securityContext of the csi-driver-node pods by adding a seccomp profile.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

The `csi-driver-node` daemonset now has its seccomp profile set to "RuntimeDefault".

@gardener-robot gardener-robot added area/security Security related kind/enhancement Enhancement, improvement, extension platform/openstack OpenStack platform/infrastructure needs/review Needs review size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) labels Sep 12, 2022
@gardener-robot-ci-1 gardener-robot-ci-1 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Sep 12, 2022
@AleksandarSavchev AleksandarSavchev changed the title Set seccomp profile to RuntimeDefault Set seccomp profile to RuntimeDefault for csi-driver-node Sep 12, 2022
dkistner
dkistner approved these changes Oct 7, 2022
View reviewed changes
Copy link
Member

@dkistner dkistner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-robot gardener-robot added reviewed/lgtm Has approval for merging and removed needs/review Needs review labels Oct 7, 2022
@dkistner dkistner added this to the v1.29 milestone Oct 10, 2022
@dkistner
Copy link
Member

/reviewed ok-to-test

@gardener-robot gardener-robot added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Oct 10, 2022
@dkistner dkistner merged commit 0a93173 into gardener:master Oct 10, 2022
@gardener-robot gardener-robot added the status/closed Issue is closed (either delivered or triaged) label Oct 10, 2022
@gardener-robot-ci-3 gardener-robot-ci-3 removed the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Oct 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dkistner dkistner dkistner approved these changes

Assignees
No one assigned
Labels
area/security Security related kind/enhancement Enhancement, improvement, extension needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) platform/openstack OpenStack platform/infrastructure reviewed/lgtm Has approval for merging size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) status/closed Issue is closed (either delivered or triaged)
Projects
None yet
Milestone
v1.29
Development

Successfully merging this pull request may close these issues.
5 participants
@AleksandarSavchev @dkistner @gardener-robot-ci-1 @gardener-robot-ci-3 @gardener-robot