From 203aeeefb9b11191bec8f42921d2ce81813222cb Mon Sep 17 00:00:00 2001
From: danish9039 <danishsiddiqui040@gmail.com>
Date: Sun, 5 Jul 2026 01:33:52 +0530
Subject: [PATCH] workspaces: set restricted pss sample context

Signed-off-by: danish9039 <danishsiddiqui040@gmail.com>
---
 .../kustomize/samples/codeserver_v1beta1_workspacekind.yaml   | 4 ++++
 .../kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml   | 4 ++++
 .../kustomize/samples/rstudio_v1beta1_workspacekind.yaml      | 4 ++++
 3 files changed, 12 insertions(+)

diff --git a/workspaces/controller/manifests/kustomize/samples/codeserver_v1beta1_workspacekind.yaml b/workspaces/controller/manifests/kustomize/samples/codeserver_v1beta1_workspacekind.yaml
index b4bbb0855..3b72b0ef7 100644
--- a/workspaces/controller/manifests/kustomize/samples/codeserver_v1beta1_workspacekind.yaml
+++ b/workspaces/controller/manifests/kustomize/samples/codeserver_v1beta1_workspacekind.yaml
@@ -51,12 +51,16 @@ spec:
           medium: "Memory"
     securityContext:
       fsGroup: 100
+      seccompProfile:
+        type: RuntimeDefault
     containerSecurityContext:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
           - ALL
       runAsNonRoot: true
+      seccompProfile:
+        type: RuntimeDefault
     options:
       imageConfig:
         spawner:
diff --git a/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml b/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml
index ba6f972b8..f4a44161f 100644
--- a/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml
+++ b/workspaces/controller/manifests/kustomize/samples/jupyterlab_v1beta1_workspacekind.yaml
@@ -226,6 +226,8 @@ spec:
     ##
     securityContext:
       fsGroup: 100
+      seccompProfile:
+        type: RuntimeDefault
 
     ## container SecurityContext for Workspace Pods (MUTABLE)
     ##  - spec for SecurityContext:
@@ -237,6 +239,8 @@ spec:
         drop:
           - ALL
       runAsNonRoot: true
+      seccompProfile:
+        type: RuntimeDefault
 
     ## ==============================================================
     ## WORKSPACE OPTIONS
diff --git a/workspaces/controller/manifests/kustomize/samples/rstudio_v1beta1_workspacekind.yaml b/workspaces/controller/manifests/kustomize/samples/rstudio_v1beta1_workspacekind.yaml
index ac7da7f98..0cf0173c6 100644
--- a/workspaces/controller/manifests/kustomize/samples/rstudio_v1beta1_workspacekind.yaml
+++ b/workspaces/controller/manifests/kustomize/samples/rstudio_v1beta1_workspacekind.yaml
@@ -54,12 +54,16 @@ spec:
           medium: "Memory"
     securityContext:
       fsGroup: 100
+      seccompProfile:
+        type: RuntimeDefault
     containerSecurityContext:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
           - ALL
       runAsNonRoot: true
+      seccompProfile:
+        type: RuntimeDefault
     options:
       imageConfig:
         spawner: