-
Notifications
You must be signed in to change notification settings - Fork 986
Closed
kubernetes/kubernetes
#113284Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.priority/backlogHigher priority than priority/awaiting-more-evidence.Higher priority than priority/awaiting-more-evidence.sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.triage/acceptedIndicates an issue or PR is ready to be actively worked on.Indicates an issue or PR is ready to be actively worked on.
Description
What would you like to be added:
Determining the used seccomp profile for a container is a non-trivial task in Kubernetes. The security context features a dedicated SeccompProfile field: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#seccompprofile-v1-core
There are also the deprecated seccomp annotations. Both, annotations as well as the field are available per pod and per container. This also means that containers can overwrite the pod values, whereas the container values get inherited by the pod if not set.
This logic could be built into kubectl describe, making it easy for users to determine the used seccomp profile of a container.
cc @sftim
sftim
Metadata
Metadata
Assignees
Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.priority/backlogHigher priority than priority/awaiting-more-evidence.Higher priority than priority/awaiting-more-evidence.sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.triage/acceptedIndicates an issue or PR is ready to be actively worked on.Indicates an issue or PR is ready to be actively worked on.