32.4. 为自定义Seccomp 配置集配置 OpenShift Container Platform
确保集群中的 pod 使用自定义配置集运行:
- 在 seccomp-profile-root 中创建 seccomp 配置集。
配置 seccomp-profile-root :
kubeletArguments: seccomp-profile-root: - "/your/path"
kubeletArguments: seccomp-profile-root: - "/your/path"
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 重启节点服务以应用更改:
systemctl restart atomic-openshift-node
# systemctl restart atomic-openshift-node
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 配置 SCC:
seccompProfiles: - localhost/<profile-name>
seccompProfiles: - localhost/<profile-name>
Copy to Clipboard Copied! Toggle word wrap Toggle overflow