
- A new schema for a Deckhand document that contains a Seccomp default profile. - A Seccomp profile that creates the default seccomp profile file at defined seccomp profile root. - A bootaction that puts the default seccomp profile in place. - Modified Kubelet config to support seccomp profile root dir's path. Similar changes in Airship-Treasuremap : https://review.openstack.org/#/c/602532/ Change-Id: Ia3a5f10abd88f7e20b3594ccde68d03535ef60cf
20 lines
419 B
YAML
20 lines
419 B
YAML
---
|
|
schema: 'deckhand/DataSchema/v1'
|
|
metadata:
|
|
schema: metadata/Control/v1
|
|
name: pegleg/SeccompProfile/v1
|
|
labels:
|
|
application: pegleg
|
|
data:
|
|
$schema: 'http://json-schema.org/schema#'
|
|
type: 'object'
|
|
additionalProperties: false
|
|
properties:
|
|
seccompDirPath:
|
|
type: 'string'
|
|
savePath:
|
|
type: 'string'
|
|
content:
|
|
type: 'string'
|
|
required: ['seccompDirPath', 'savePath', 'content']
|