Translate Restrict a Container's Syscalls with Seccomp into Chinese

2020-09-30 09:23:20 +08:00
parent 7ffb2882df
commit 0dfed51bc3
13 changed files with 740 additions and 0 deletions
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: audit-pod
+  labels:
+    app: audit-pod
+spec:
+  securityContext:
+    seccompProfile:
+      type: RuntimeDefault
+  containers:
+  - name: test-container
+    image: hashicorp/http-echo:0.2.3
+    args:
+    - "-text=just made some syscalls!"
+    securityContext:
+      allowPrivilegeEscalation: false