Enable seccomp profile for Dynatrace init containers

1-min read
Published Jul 28, 2023

Dynatrace Operator version 0.11.2+

The seccomp (secure computing mode) profile determines the system calls that a process in the initContainer can make. By default, the seccomp profile is not set. You can set the seccomp profile for the initContainer in your DynaKube by using the feature.dynatrace.com/init-container-seccomp-profile feature flag to one of the following values.

false—the initContainer will not have a seccomp profile set, and the default behavior of your container runtime will be used.
true—the initContainer will have the Runtime/default seccomp profile added, which can help meet the requirements of the restricted PodSecurityStandard for your Kubernetes workloads.

apiVersion: dynatrace.com/v1beta5
kind: DynaKube
metadata:
  annotations:
    feature.dynatrace.com/init-container-seccomp-profile: "true"