openstack
/
openstack-helm-infra
Code Issues Proposed changes

Merge "Add default AppArmor profile to prometheus-openstack-exporter"

This commit is contained in:
Zuul 2019-03-15 17:53:30 +00:00 committed by Gerrit Code Review
parent 5198ae29b3 f97f56fae5
commit c4f6453511
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
prometheus-openstack-exporter/templates/deployment.yaml
View File

@ -39,6 +39,8 @@ spec:
metadata:
labels:
{{ tuple $envAll "prometheus-openstack-exporter" "exporter" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ dict "envAll" $envAll "podName" "prometheus-openstack-exporter" "containerNames" (list "openstack-metrics-exporter") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
securityContext:
readOnlyRootFilesystem: true

5
prometheus-openstack-exporter/values.yaml
View File

@ -38,6 +38,10 @@ labels:
node_selector_value: enabled
pod:
mandatory_access_control:
type: apparmor
openstack-metrics-exporter:
openstack-metrics-exporter: localhost/docker-default
user:
openstack_exporter:
uid: 65534
@ -87,7 +91,6 @@ pod:
limits:
memory: "1024Mi"
cpu: "2000m"
dependencies:
dynamic:
common: