openstack
/
openstack-helm
Code Issues Proposed changes

Enable Apparmor to Glance Completed pods 

Change-Id: Ic8c655a570cfb4121ed1441a4583ce5c1220a8b2
This commit is contained in:
dt241s@att.com 2020-05-01 23:19:21 +00:00 committed by diwakar thyagaraj
parent a4c3127c39
commit 81b32c522e
3 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
glance/templates/job-metadefs-load.yaml
View File

@ -29,6 +29,9 @@ spec:
metadata:
labels:
{{ tuple $envAll "glance" "metadefs_load" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
{{ dict "envAll" $envAll "podName" "glance-metadefs-load" "containerNames" (list "init" "glance-metadefs-load" ) | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
serviceAccountName: {{ $serviceAccountName }}
{{ dict "envAll" $envAll "application" "glance" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}

3
glance/templates/job-storage-init.yaml
View File

@ -57,6 +57,9 @@ spec:
metadata:
labels:
{{ tuple $envAll "glance" "storage-init" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
{{ dict "envAll" $envAll "podName" "glance-storage-init" "containerNames" (list "init" "glance-storage-init" ) | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
serviceAccountName: {{ $serviceAccountName }}
{{ dict "envAll" $envAll "application" "glance" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}

8
glance/values_overrides/apparmor.yaml
View File

@ -8,5 +8,11 @@ pod:
glance-registry:
glance-registry: runtime/default
init: runtime/default
glance-metadefs-load:
init: runtime/default
glance-metadefs-load: runtime/default
glance-storage-init:
init: runtime/default
glance-storage-init: runtime/default
manifests:
deployment_registry: true
deployment_registry: true