Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow restricting container syscalls for Kuberhealthy pods in Helm chart #1109

Open
erichstoekl opened this issue Feb 9, 2023 · 3 comments
Labels
do-not-close Prevents issues from being automatically closed if stale feature request A request for a specific feature to be added to Kuberhealthy good first issue Good for newcomers

Comments

@erichstoekl
Copy link
Contributor

erichstoekl commented Feb 9, 2023

Describe the feature you would like and why you want it
Cluster administrators may wish to take advantage of seccompProfile in order to restrict the syscalls that the kuberhealthy-spawned containers are able to make. Details of what seccompProfile does and how to enable it are documented here: https://kubernetes.io/docs/tutorials/security/seccomp/

For example, some clusters may enforce seccompProfile on all pods deployed to the cluster in order to meet security or compliance goals.

It would be helpful if the helm chart is capable of allowing for seccompProfile configuration.

PR

PR is submitted for this issue as #1110

@erichstoekl erichstoekl added the feature request A request for a specific feature to be added to Kuberhealthy label Feb 9, 2023
Copy link

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment on the issue or this will be closed in 15 days.

@github-actions github-actions bot added the Stale label Jan 26, 2024
@integrii integrii added the good first issue Good for newcomers label Feb 10, 2024
@github-actions github-actions bot removed the Stale label Feb 16, 2024
Copy link

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment on the issue or this will be closed in 15 days.

@github-actions github-actions bot added the Stale label Mar 21, 2024
Copy link

github-actions bot commented Apr 6, 2024

This issue was closed because it has been stalled for 15 days with no activity. Please reopen and comment on the issue if you believe it should stay open.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Apr 6, 2024
@integrii integrii reopened this Apr 11, 2024
@integrii integrii added do-not-close Prevents issues from being automatically closed if stale and removed Stale labels Apr 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
do-not-close Prevents issues from being automatically closed if stale feature request A request for a specific feature to be added to Kuberhealthy good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

2 participants