Moved the seccompProfile patches to istio/base/patches

Signed-off-by: biswajit-9776 <biswajitpatt139@gmail.com>

common/istio-1-22/istio-install/base/kustomization.yaml

@@ -16,3 +16,5 @@ patches:
 - path: patches/disable-debugging.yaml
 - path: patches/istio-ingressgateway-remove-pdb.yaml
 - path: patches/istiod-remove-pdb.yaml
+- path: patches/seccomp-istio-ingressgateway.yaml
+- path: patches/seccomp-istiod.yaml

common/istio-1-22/istio-install/base/patches/seccomp-istio-ingressgateway.yaml

@@ -0,0 +1,16 @@
+# Seccomp profile must be explicitly set to one of the allowed values. Both the Unconfined profile and the absence of a profile are prohibited.
+# According to https://kubernetes.io/docs/concepts/security/pod-security-standards/#:~:text=undefined/null-,Seccomp%20(v1.19%2B),-Seccomp%20profile%20must
+# This is done to enable 'restricted' level security standards for the pods.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: istio-ingressgateway
+  namespace: istio-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: istio-proxy
+        securityContext:
+          seccompProfile:
+            type: RuntimeDefault

common/istio-1-22/istio-install/base/patches/seccomp-istiod.yaml

@@ -0,0 +1,16 @@
+# Seccomp profile must be explicitly set to one of the allowed values. Both the Unconfined profile and the absence of a profile are prohibited.
+# According to https://kubernetes.io/docs/concepts/security/pod-security-standards/#:~:text=undefined/null-,Seccomp%20(v1.19%2B),-Seccomp%20profile%20must
+# This is done to enable 'restricted' level security standards for the pods.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: istiod
+  namespace: istio-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: discovery
+        securityContext:
+          seccompProfile:
+            type: RuntimeDefault

common/istio-1-22/kubeflow-istio-resources/base/kustomization.yaml

@@ -3,7 +3,4 @@ kind: Kustomization
 resources:
 - kf-istio-resources.yaml
 - cluster-roles.yaml
-namespace: kubeflow
-patches:
-- path: patches/seccomp-istio-ingressgateway.yaml
-- path: patches/seccomp-istiod.yaml
+namespace: kubeflow

common/istio-cni-1-22/istio-install/base/kustomization.yaml

@@ -14,3 +14,5 @@ patches:
 - path: patches/disable-debugging.yaml
 - path: patches/istio-ingressgateway-remove-pdb.yaml
 - path: patches/istiod-remove-pdb.yaml
+- path: patches/seccomp-istio-ingressgateway.yaml
+- path: patches/seccomp-istiod.yaml

common/istio-cni-1-22/istio-install/base/patches/seccomp-istio-ingressgateway.yaml

@@ -0,0 +1,16 @@
+# Seccomp profile must be explicitly set to one of the allowed values. Both the Unconfined profile and the absence of a profile are prohibited.
+# According to https://kubernetes.io/docs/concepts/security/pod-security-standards/#:~:text=undefined/null-,Seccomp%20(v1.19%2B),-Seccomp%20profile%20must
+# This is done to enable 'restricted' level security standards for the pods.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: istio-ingressgateway
+  namespace: istio-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: istio-proxy
+        securityContext:
+          seccompProfile:
+            type: RuntimeDefault

common/istio-cni-1-22/istio-install/base/patches/seccomp-istiod.yaml

@@ -0,0 +1,16 @@
+# Seccomp profile must be explicitly set to one of the allowed values. Both the Unconfined profile and the absence of a profile are prohibited.
+# According to https://kubernetes.io/docs/concepts/security/pod-security-standards/#:~:text=undefined/null-,Seccomp%20(v1.19%2B),-Seccomp%20profile%20must
+# This is done to enable 'restricted' level security standards for the pods.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: istiod
+  namespace: istio-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: discovery
+        securityContext:
+          seccompProfile:
+            type: RuntimeDefault

common/istio-cni-1-22/kubeflow-istio-resources/base/kustomization.yaml

@@ -4,6 +4,3 @@ resources:
 - kf-istio-resources.yaml
 - cluster-roles.yaml
 namespace: kubeflow
-patches:
-- path: patches/seccomp-istio-ingressgateway.yaml
-- path: patches/seccomp-istiod.yaml