diff --git a/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml b/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml index 01fa1aa0242..733afdd29c8 100644 --- a/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml +++ b/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml @@ -100,11 +100,9 @@ spec: drop: - ALL readOnlyRootFilesystem: true - runAsGroup: 999 runAsNonRoot: true - runAsUser: 1000 - # seccompProfile: - # type: RuntimeDefault + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /certs name: cert diff --git a/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml b/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml index c46784988b7..f3bb7beaa00 100644 --- a/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml +++ b/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml @@ -112,11 +112,9 @@ spec: drop: - ALL readOnlyRootFilesystem: true - runAsGroup: 999 runAsNonRoot: true - runAsUser: 1000 - # seccompProfile: - # type: RuntimeDefault + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /certs name: cert