EksSeccompProfile

The Linux seccomp profile for a pod or container. For more information, see Restrict a Container's Syscalls with seccomp in the Kubernetes documentation.

type

The seccomp profile type can be one of the following values:

RuntimeDefault: The RuntimeDefault value uses the container runtime's default seccomp profile.
Unconfined: The Unconfined value doesn't filter the container with seccomp.
Localhost: The Localhost value uses a custom profile at the path specified by localhostProfile.

Type: String

Valid Values: RuntimeDefault | Localhost | Unconfined

Required: Yes

localhostProfile

The path of the profile on the node, relative to the configured seccomp profile location. You must specify this parameter when type is Localhost. Don't set this parameter for any other type. You are responsible for ensuring that the profile exists on every eligible worker node. For information about providing files to Amazon EKS nodes, see Use a launch template with AWS Batch on Amazon EKS in the AWS Batch User Guide.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 4095.

Required: No

EksSeccompProfile

Contents

See Also