Stop setting seccompProfile on the operator pods

This allows OpenShift to set the correct profile automatically for backwards compatibility with OCP 4.10. Signed-off-by: mprahl <mprahl@users.noreply.github.com>
gatekeeper · Sep 19, 2023 · d47b8e4 · d47b8e4
1 parent 6ebf4a0
commit d47b8e4
Show file tree

Hide file tree

Showing 4 changed files with 0 additions and 12 deletions.
diff --git a/bundle/manifests/gatekeeper-operator.clusterserviceversion.yaml b/bundle/manifests/gatekeeper-operator.clusterserviceversion.yaml
@@ -367,8 +367,6 @@ spec:
                   capabilities:
                     drop:
                     - ALL
-                  seccompProfile:
-                    type: RuntimeDefault
               - args:
                 - --health-probe-bind-address=:8081
                 - --metrics-bind-address=127.0.0.1:8080
@@ -405,8 +403,6 @@ spec:
                   capabilities:
                     drop:
                     - ALL
-                  seccompProfile:
-                    type: RuntimeDefault
               securityContext:
                 runAsNonRoot: true
               serviceAccountName: gatekeeper-operator-controller-manager

diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml
@@ -22,8 +22,6 @@ spec:
           name: https
         securityContext:
           allowPrivilegeEscalation: false
-          seccompProfile:
-            type: RuntimeDefault
           capabilities:
             drop:
             - ALL

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -34,8 +34,6 @@ spec:
         imagePullPolicy: Always
         securityContext:
           allowPrivilegeEscalation: false
-          seccompProfile:
-            type: RuntimeDefault
           capabilities:
             drop:
             - ALL

diff --git a/deploy/gatekeeper-operator.yaml b/deploy/gatekeeper-operator.yaml
@@ -1704,8 +1704,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
       - args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080
@@ -1742,8 +1740,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
       securityContext:
         runAsNonRoot: true
       serviceAccountName: gatekeeper-operator-controller-manager