Add seccompProfile.type RuntimeDefault for secure-by-default

[joebowbeer]

Proposal

Add seccompProfile.type RuntimeDefault to Deployments as per PSS/restricted spec:

https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted

Use-Case

This would bring the default manifests into compliance with PSS/restricted policies.

The policies currently fail because the containers in the two Deployments are missing an explicit seccompProfile type.

kustomize build https://github.com/kyverno/policies//pod-security | \
  kyverno apply --policy-report -r \
  <(kustomize build https://github.com/kedacore/keda//config/default) \
  -

Anything else?

seccompProfile is supported in Kubernetes 1.19+

Relates to kedacore/charts#306