Apply SEC-7 baseline to Knowledge

2026-06-21 03:18:55 -05:00
parent 11122b5139
commit e41c9f4ae7
4 changed files with 175 additions and 5 deletions
--- a/apps-gx10/knowledge/deployment-knowledge-web.json
+++ b/apps-gx10/knowledge/deployment-knowledge-web.json
@@ -233,11 +233,14 @@
        "dnsPolicy": "ClusterFirst",
        "restartPolicy": "Always",
        "schedulerName": "default-scheduler",
-        "securityContext": {
-          "fsGroup": 1654,
-          "fsGroupChangePolicy": "OnRootMismatch",
-          "runAsNonRoot": true
-        },
+        "securityContext": {
+          "fsGroup": 1654,
+          "fsGroupChangePolicy": "OnRootMismatch",
+          "runAsNonRoot": true,
+          "seccompProfile": {
+            "type": "RuntimeDefault"
+          }
+        },
        "terminationGracePeriodSeconds": 30,
        "volumes": [
          {