From bf1ba11de2d5c1f2f184ccea04bcb540e8997e89 Mon Sep 17 00:00:00 2001
From: vikingowl <christian@nachtigall.dev>
Date: Sun, 22 Feb 2026 10:03:33 +0100
Subject: [PATCH] fix(deploy): add seccompProfile RuntimeDefault to satisfy
 PodSecurity restricted policy

---
 web/deploy/helm/values.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/deploy/helm/values.yaml b/web/deploy/helm/values.yaml
index 97fc038..6860326 100644
--- a/web/deploy/helm/values.yaml
+++ b/web/deploy/helm/values.yaml
@@ -45,6 +45,8 @@ podSecurityContext:
   runAsNonRoot: true
   runAsUser: 65534
   fsGroup: 65534
+  seccompProfile:
+    type: RuntimeDefault
 
 securityContext:
   allowPrivilegeEscalation: false