From a853ead9ccd9def4dbaa129642a84e97379ae96d Mon Sep 17 00:00:00 2001 From: danish9039 Date: Sun, 5 Jul 2026 01:33:52 +0530 Subject: [PATCH] workspaces: set restricted pss sample context Signed-off-by: danish9039 --- .../kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml b/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml index 9f614ba70..a16df0608 100644 --- a/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml +++ b/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml @@ -212,6 +212,8 @@ spec: ## securityContext: fsGroup: 100 + seccompProfile: + type: RuntimeDefault ## container SecurityContext for Workspace Pods (MUTABLE) ## - spec for SecurityContext: @@ -223,6 +225,9 @@ spec: drop: - ALL runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault ## ============================================================== ## WORKSPACE OPTIONS