-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
✨ (go/v4): Enable seccompProfile.type: RuntimeDefault
by default in scaffolded projects
#4251
✨ (go/v4): Enable seccompProfile.type: RuntimeDefault
by default in scaffolded projects
#4251
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: camilamacedo86 The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
seccompProfile.type: RuntimeDefault
by default in scaffolded projectsseccompProfile.type: RuntimeDefault
by default in scaffolded projects
/hold Just to not merge before we do a patch release; #4284 |
921ba04
to
7cd8419
Compare
7cd8419
to
90f33f0
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/hold cancel
We can get it merged now.
Since it is to small I will not make nobody waste time on reviews here.
We have big fishes to fry.
… projects - Removed the comment about `seccompProfile` as `type: RuntimeDefault` is now set by default. - Updated to reflect that Kubebuilder only tests and supports the latest three Kubernetes releases. - Given that we’re currently using Kubernetes 1.31, there’s no longer a reason to keep this line commented, ensuring projects adhere to `restricted` Pod Security Standards by default.
90f33f0
to
75ac2fb
Compare
seccompProfile
astype: RuntimeDefault
is now set by default.restricted
Pod Security Standards by default.