Enable seccomp profile for Dynatrace init containers

Dynatrace Operator version 0.11.2+

The seccomp (secure computing mode) profile determines the system calls that a process in the initContainer can make. By default, the seccomp profile is not set. You can set the seccomp profile for the initContainer in your DynaKube by using the feature.dynatrace.com/init-container-seccomp-profile feature flag to one of the following values.

  • false—the initContainer will not have a seccomp profile set, and the default behavior of your container runtime will be used.
  • true—the initContainer will have the Runtime/default seccomp profile added, which can help meet the requirements of the restricted PodSecurityStandard for your Kubernetes workloads.
apiVersion: dynatrace.com/v1beta2
kind: DynaKube
metadata:
annotations:
feature.dynatrace.com/init-container-seccomp-profile: "true"