fix

apps/code-server/deploy.tf

@@ -15,6 +15,9 @@ resource "kubectl_manifest" "deploy" {
       template:
         metadata:
           labels: ${jsonencode(local.common-labels)}
+          annotations:
+            container.apparmor.security.beta.kubernetes.io/code-server: unconfined
+            container.seccomp.security.alpha.kubernetes.io/code-server: unconfined
         spec:
           securityContext:
             fsGroup: 1000
@@ -33,6 +36,7 @@ resource "kubectl_manifest" "deploy" {
               runAsNonRoot: true
               runAsUser: 1000
               privileged: true
+              procMount: unmasked
             env:
             - name: USER
               value: coder