SCC: allow unconfined seccomp
Not all components are able to run with
runtime default seccomp profile. This will
allow to preserve current behavior -
run as unconfined.
@@ -76,6 +76,7 @@ func NewKubeVirtControllerSCC(namespace string) *secv1.SecurityContextConstraint
}
scc.SeccompProfiles = []string{
"runtime/default",
+ "unconfined",
}
scc.AllowedCapabilities = []corev1.Capability{
// add CAP_SYS_NICE capability to allow setting cpu affinity
