From 95e6542f4feed3c9490ba80858103600ebf4003e Mon Sep 17 00:00:00 2001
From: SdgJlbl <sarah.diot-girard@owkin.com>
Date: Wed, 29 May 2024 14:53:31 +0200
Subject: [PATCH] chore: add seccompprofile to compute function pods

Signed-off-by: SdgJlbl <sarah.diot-girard@owkin.com>
---
 backend/substrapp/kubernetes_utils.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/substrapp/kubernetes_utils.py b/backend/substrapp/kubernetes_utils.py
index 61c8d0404..4732a165a 100644
--- a/backend/substrapp/kubernetes_utils.py
+++ b/backend/substrapp/kubernetes_utils.py
@@ -34,6 +34,7 @@ def get_security_context(root: bool = False, capabilities: list[str] = None) ->
         privileged=False,
         allow_privilege_escalation=False,
         capabilities=kubernetes.client.V1Capabilities(drop=["ALL"], add=capabilities),
+        seccomp_profile=kubernetes.client.V1SeccompProfile(type="RuntimeDefault"),
     )
 
     if root: