Added seccompProfile attribute for istio-proxy

Signed-off-by: biswajit-9776 <biswajitpatt139@gmail.com>
kubeflow · Sep 16, 2024 · 0cd0454 · 0cd0454
1 parent b00fe48
commit 0cd0454
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/pss_test.yaml b/.github/workflows/pss_test.yaml
@@ -38,6 +38,9 @@ jobs:
       run: |
         kubectl get cm istio-sidecar-injector -n istio-system -o yaml > temporary_patch.yaml
         sed -i '0,/runAsNonRoot: true/{s//&\n              seccompProfile:\n                type: RuntimeDefault/}' temporary_patch.yaml
+        sed -i '/runAsNonRoot: true/{N; /runAsUser: {{ .ProxyUID | default "1337" }}/a\
+                      seccompProfile:\n                type: RuntimeDefault
+        }' temporary_patch.yaml
         kubectl apply -f temporary_patch.yaml
         rm temporary_patch.yaml