helm-charts icon indicating copy to clipboard operation
helm-charts copied to clipboard

Ensure that the seccomp profile is set to docker/default in your pod definitions

Open muralisankar32 opened this issue 2 months ago • 0 comments

As per CIS guidelines, seccomp profile needs to be set to docker/default in the pod definitions.

Information Enable docker/default seccomp profile in your pod definitions.

Rationale:

Seccomp (secure computing mode) is used to restrict the set of system calls applications can make, allowing cluster administrators greater control over the security of workloads running in the cluster. Kubernetes disables seccomp profiles by default for historical reasons. You should enable it to ensure that the workloads have restricted actions available within the container.

muralisankar32 avatar Oct 23 '25 09:10 muralisankar32