| Field | Type | Description | Value(s) |
|---|---|---|---|
name | string | Name of the seccomp profile. The name is used as the profile’s file name, so it must be at most 255 characters long and may only contain ASCII letters, digits, ., _ and -. | |
profile | Unstructured | The seccomp profile, in the OCI runtime specification LinuxSeccomp format.This is the same JSON format Kubernetes Localhost seccomp profiles use, expressedas YAML. defaultAction is required. |
CRI
SeccompProfileConfig
SeccompProfileConfig declares a named seccomp profile. SeccompProfileConfig declares a seccomp profile which can be referenced by name.
Every profile is written to /var/lib/kubelet/seccomp/profiles/<name>, so Kubernetes pods
can use it with securityContext.seccompProfile.type: Localhost and
localhostProfile: profiles/<name>.
This document replaces the deprecated .machine.seccompProfiles field.