Configure seccomp profile for initContainer

Dynatrace Operator version 0.11.2+

The seccomp (secure computing mode) profile determines the system calls that a process in the initContainer can make. By default, the seccomp profile is not set. You can set the seccomp profile for the initContainer in your DynaKube by using the feature.dynatrace.com/init-container-seccomp-profile feature flag to one of the following values.

• false—the initContainer will not have a seccomp profile set, and the default behavior of your container runtime will be used.
• true—the initContainer will have the Runtime/default seccomp profile added, which can help meet the requirements of the restricted PodSecurityStandard for your Kubernetes workloads.

yamlcopydownload
apiVersion: dynatrace.com/v1beta1
kind: DynaKube
metadata:
  annotations:
    feature.dynatrace.com/init-container-seccomp-profile: "true"