Enable seccomp profile for Dynatrace init containers
Dynatrace Operator version 0.11.2+
The seccomp (secure computing mode) profile determines the system calls that a process in the initContainer can make. By default, the seccomp profile is not set. You can set the seccomp profile for the initContainer
in your DynaKube by using the feature.dynatrace.com/init-container-seccomp-profile
feature flag to one of the following values.
false
—theinitContainer
will not have a seccomp profile set, and the default behavior of your container runtime will be used.true
—theinitContainer
will have theRuntime/default
seccomp profile added, which can help meet the requirements of the restrictedPodSecurityStandard
for your Kubernetes workloads.
apiVersion: dynatrace.com/v1beta2kind: DynaKubemetadata:annotations:feature.dynatrace.com/init-container-seccomp-profile: "true"