Skip to content

Display used seccomp profile on kubectl describe #1133

@saschagrunert

Description

@saschagrunert

What would you like to be added:

Determining the used seccomp profile for a container is a non-trivial task in Kubernetes. The security context features a dedicated SeccompProfile field: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#seccompprofile-v1-core
There are also the deprecated seccomp annotations. Both, annotations as well as the field are available per pod and per container. This also means that containers can overwrite the pod values, whereas the container values get inherited by the pod if not set.

This logic could be built into kubectl describe, making it easy for users to determine the used seccomp profile of a container.

cc @sftim

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new feature.priority/backlogHigher priority than priority/awaiting-more-evidence.sig/securityCategorizes an issue or PR as relevant to SIG Security.triage/acceptedIndicates an issue or PR is ready to be actively worked on.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions