Seccomp messages with openebs and percona-postgres-operator

[idc77]

I have enabled user namespaces.
I ran helm charts of openebs and percona-postgres-operator and received following messages:

--- openebs ---
W0130 09:58:27.525242    9477 warnings.go:70] would violate PodSecurity "restricted:latest": host namespaces (hostNetwork=true), privileged (container "openebs-ndm" must not set securityContext.privileged=true), allowPrivilegeEscalation != false (container "openebs-ndm" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "openebs-ndm" must set securityContext.capabilities.drop=["ALL"]), restricted volume types (volumes "udev", "procmount", "devmount", "basepath", "sparsepath" use restricted volume type "hostPath"), runAsNonRoot != true (pod or container "openebs-ndm" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "openebs-ndm" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0130 09:58:27.645005    9477 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "openebs-localpv-provisioner" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "openebs-localpv-provisioner" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "openebs-localpv-provisioner" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "openebs-localpv-provisioner" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0130 09:58:27.645058    9477 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "openebs-ndm-operator" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "openebs-ndm-operator" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "openebs-ndm-operator" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "openebs-ndm-operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
--- pg ---
W0130 10:39:18.307540   13394 warnings.go:70] would violate PodSecurity "restricted:latest": seccompProfile (pod or container "percona-postgresql-operator" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

As a result, I imagine because of this, I couldn't deploy a postgres cluster.
Or maybe it's something different.

What do I have to do to fix it?
Is it talos related or do I have to provide additional settings with helm install?

Update: It's not Talos.
It's percona-pg-db not running on arm64

[smira]

These are warnings first of all, so they do not block anything from being deployed.

See https://www.talos.dev/v1.9/kubernetes-guides/configuration/pod-security/ for more information, also Kubernetes documentation https://kubernetes.io/docs/concepts/security/pod-security-standards/

[idc77]

I see. So it's something like selinux in permissive mode. Ty

[smira]

No, it has nothing to do with SELinux, but Kubernetes documentation would explain it better than I can here.