mirror of https://github.com/k3s-io/k3s
c592a46e16
Automatic merge from submit-queue Add PSP support for seccomp profiles Seccomp support for PSP. There are still a couple of TODOs that need to be fixed but this is passing tests. One thing of note, since seccomp is all being stored in annotations right now it breaks some of the assumptions we've stated for the provider in terms of mutating the passed in pod. I've put big warning comments around the pieces that do that to make sure it's clear and covered the rollback in admission if the policy fails to validate. @sttts @pmorie @erictune @smarterclayton @liggitt |
||
|---|---|---|
| .. | ||
| apparmor | ||
| podsecuritypolicy | ||
| doc.go | ||