Add documentation for generally available seccomp functionality

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
This commit is contained in:
hasheddan
2020-07-06 22:17:16 -05:00
parent 754c6b1a64
commit 3ad7ea77f1
17 changed files with 637 additions and 10 deletions
@@ -0,0 +1,16 @@
apiVersion: v1
kind: Pod
metadata:
name: default-pod
labels:
app: default-pod
annotations:
seccomp.security.alpha.kubernetes.io/pod: runtime/default
spec:
containers:
- name: test-container
image: hashicorp/http-echo:0.2.3
args:
- "-text=just made some syscalls!"
securityContext:
allowPrivilegeEscalation: false