Merge pull request #29433 from saschagrunert/seccomp-api-removal-note
Add note about deprecated seccomp annotation
This commit is contained in:
@@ -425,4 +425,10 @@ policies to apply when validating a submitted Pod. Note that warnings are also d
|
|||||||
or updating objects that contain Pod templates, such as Deployments, Jobs, StatefulSets, etc.
|
or updating objects that contain Pod templates, such as Deployments, Jobs, StatefulSets, etc.
|
||||||
|
|
||||||
See [Enforcing Pod Security at the Namespace Level](/docs/concepts/security/pod-security-admission)
|
See [Enforcing Pod Security at the Namespace Level](/docs/concepts/security/pod-security-admission)
|
||||||
for more information.
|
for more information.
|
||||||
|
|
||||||
|
## seccomp.security.alpha.kubernetes.io/pod and container.seccomp.security.alpha.kubernetes.io/[NAME] (deprecated)
|
||||||
|
|
||||||
|
The seccomp annotations have been deprecated since Kubernetes v1.19 and will
|
||||||
|
become non-functional in v1.25. Please use the `seccompProfile` of the
|
||||||
|
`SecurityContext` instead.
|
||||||
@@ -176,12 +176,20 @@ Download the correct manifest for your Kubernetes version:
|
|||||||
{{< tab name="v1.19 or Later (GA)" >}}
|
{{< tab name="v1.19 or Later (GA)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/ga/audit-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/ga/audit-pod.yaml" >}}
|
||||||
{{< /tab >}}}
|
{{< /tab >}}}
|
||||||
{{{< tab name="Pre-v1.19 (alpha)" >}}
|
{{{< tab name="Pre-v1.19 (deprecated)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/alpha/audit-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/alpha/audit-pod.yaml" >}}
|
||||||
{{< /tab >}}
|
{{< /tab >}}
|
||||||
{{< /tabs >}}
|
{{< /tabs >}}
|
||||||
<br>
|
<br>
|
||||||
|
|
||||||
|
{{< note >}}
|
||||||
|
The functional support for the already deprecated seccomp annotations
|
||||||
|
`seccomp.security.alpha.kubernetes.io/pod` (for the whole pod) and
|
||||||
|
`container.seccomp.security.alpha.kubernetes.io/[name]` (for a single container)
|
||||||
|
is going to be removed with the release of Kubernetes v1.25. Please always use
|
||||||
|
the native API fields in favor of the annotations.
|
||||||
|
{{< /note >}}
|
||||||
|
|
||||||
Create the Pod in the cluster:
|
Create the Pod in the cluster:
|
||||||
|
|
||||||
```
|
```
|
||||||
@@ -276,7 +284,7 @@ Download the correct manifest for your Kubernetes version:
|
|||||||
{{< tab name="v1.19 or Later (GA)" >}}
|
{{< tab name="v1.19 or Later (GA)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/ga/violation-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/ga/violation-pod.yaml" >}}
|
||||||
{{< /tab >}}}
|
{{< /tab >}}}
|
||||||
{{{< tab name="Pre-v1.19 (alpha)" >}}
|
{{{< tab name="Pre-v1.19 (deprecated)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/alpha/violation-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/alpha/violation-pod.yaml" >}}
|
||||||
{{< /tab >}}
|
{{< /tab >}}
|
||||||
{{< /tabs >}}
|
{{< /tabs >}}
|
||||||
@@ -327,7 +335,7 @@ Download the correct manifest for your Kubernetes version:
|
|||||||
{{< tab name="v1.19 or Later (GA)" >}}
|
{{< tab name="v1.19 or Later (GA)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/ga/fine-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/ga/fine-pod.yaml" >}}
|
||||||
{{< /tab >}}}
|
{{< /tab >}}}
|
||||||
{{{< tab name="Pre-v1.19 (alpha)" >}}
|
{{{< tab name="Pre-v1.19 (deprecated)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/alpha/fine-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/alpha/fine-pod.yaml" >}}
|
||||||
{{< /tab >}}
|
{{< /tab >}}
|
||||||
{{< /tabs >}}
|
{{< /tabs >}}
|
||||||
@@ -409,7 +417,7 @@ Download the correct manifest for your Kubernetes version:
|
|||||||
{{< tab name="v1.19 or Later (GA)" >}}
|
{{< tab name="v1.19 or Later (GA)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/ga/default-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/ga/default-pod.yaml" >}}
|
||||||
{{< /tab >}}}
|
{{< /tab >}}}
|
||||||
{{{< tab name="Pre-v1.19 (alpha)" >}}
|
{{{< tab name="Pre-v1.19 (deprecated)" >}}
|
||||||
{{< codenew file="pods/security/seccomp/alpha/default-pod.yaml" >}}
|
{{< codenew file="pods/security/seccomp/alpha/default-pod.yaml" >}}
|
||||||
{{< /tab >}}
|
{{< /tab >}}
|
||||||
{{< /tabs >}}
|
{{< /tabs >}}
|
||||||
|
|||||||
Reference in New Issue
Block a user