Harden GX10 Intranet pod boundary

2026-06-21 03:32:12 -05:00
parent e41c9f4ae7
commit 5e56dcb59c
4 changed files with 122 additions and 1 deletions
--- a/apps-gx10/intranet/deployment-intranet-web.json
+++ b/apps-gx10/intranet/deployment-intranet-web.json
@@ -166,7 +166,10 @@
          "fsGroupChangePolicy": "OnRootMismatch",
          "runAsGroup": 1654,
          "runAsNonRoot": true,
-          "runAsUser": 1654
+          "runAsUser": 1654,
+          "seccompProfile": {
+            "type": "RuntimeDefault"
+          }
        },
        "terminationGracePeriodSeconds": 30,
        "volumes": [