Add SecCompCustomProfileConfigMap for system-probe

[L3n41c]

What does this PR do?

Add SecCompCustomProfileConfigMap for system-probe.

Motivation

Implement the following behaviours regarding the seccomp profile for system-probe:

(“ConfigMap” is a shortcut for “the ConfigMap containing the seccomp profile for system-probe.
“init container” is a shortcut for “the init container that copies the seccomp profile from the ConfigMap to the host.)

• Let the operator use its own seccomp profile:
  • create a ConfigMap
  • use an init container to copy its content to the hosts.

  • systemProbe:
      enabled: true
    

• Make system-probe use the default seccomp profile:
  • do not create the ConfigMap
  • do not create the init container

  • systemProbe:
      enabled: true
      secCompProfileName: runtime/default
    

• Make system-probe use a seccomp profile that is already available on the hosts (in /var/lib/kubelet/seccomp/my_custom_profile)
  • do not create the ConfigMap
  • do not create the init container

  • systemProbe:
      enabled: true
      secCompProfileName: localhost/my_custom_profile
    

• Make system-probe use a seccomp profile provided in a user-supplied ConfigMap.
  • do not create the ConfigMap. The user has to create one beforehand.
  • use an init container to copy the content of the user provided ConfigMap to the hosts.

  • systemProbe:
      enabled: true
      secCompCustomProfileConfigMap: lenaic-system-probe-seccomp
    
    

Additional Notes

Anything else we should know when reviewing?

[clamoriniere]

Small comment
Could you try to add a unit-test or e2e test?