Mention that privileged containers run unconfined

This is a note which helps users to understand the interaction between
privileged containers and seccomp profiles.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
This commit is contained in:
Sascha Grunert
2021-08-20 10:04:43 +02:00
parent cdefcc3a8b
commit 61b8cafa84
@@ -46,6 +46,12 @@ make sure that your cluster is [configured
correctly](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)
for the version you are using.
{{< note >}}
It is not possible to apply a seccomp profile to a container running with
`privileged: true` set in the container's `securityContext`. Privileged containers always
run as `Unconfined`.
{{< /note >}}
<!-- steps -->
## Enable the use of `RuntimeDefault` as the default seccomp profile for all workloads