Added seccomp annotation to falco-exporter psp (#192)

giantswarm · Dec 14, 2023 · 348110a · 348110a
1 parent 56d7634
commit 348110a
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Added SeccompProfile annotation to `Falco-exporter` PSP.
+
 ## [0.7.0] - 2023-11-08
 
 ### Changed

diff --git a/helm/falco/values.schema.json b/helm/falco/values.schema.json
@@ -134,6 +134,14 @@
                 "podSecurityPolicy": {
                     "type": "object",
                     "properties": {
+                        "annotations": {
+                            "type": "object",
+                            "properties": {
+                                "seccomp.security.alpha.kubernetes.io/allowedProfileNames": {
+                                    "type": "string"
+                                }
+                            }
+                        },
                         "create": {
                             "type": "boolean"
                         }

diff --git a/helm/falco/values.yaml b/helm/falco/values.yaml
@@ -48,6 +48,7 @@ falco-exporter:
     repository: giantswarm/falco-exporter
   podSecurityPolicy:
     create: true
+    annotations: {seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'}
   resources:
     limits:
       cpu: 100m