Add default AppArmor profile to prometheus-openstack-exporter

Change-Id: I94e95e1f7d785a1d274e1ee3d9f90ffb00e23ea1
This commit is contained in:
dt241s 2019-02-27 15:48:44 -06:00
parent a367bacb4b
commit f97f56fae5
2 changed files with 6 additions and 1 deletions

View File

@ -39,6 +39,8 @@ spec:
metadata:
labels:
{{ tuple $envAll "prometheus-openstack-exporter" "exporter" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ dict "envAll" $envAll "podName" "prometheus-openstack-exporter" "containerNames" (list "openstack-metrics-exporter") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
{{ dict "envAll" $envAll "application" "openstack_exporter" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}

View File

@ -38,6 +38,10 @@ labels:
node_selector_value: enabled
pod:
mandatory_access_control:
type: apparmor
openstack-metrics-exporter:
openstack-metrics-exporter: localhost/docker-default
user:
openstack_exporter:
uid: 65534
@ -87,7 +91,6 @@ pod:
limits:
memory: "1024Mi"
cpu: "2000m"
dependencies:
dynamic:
common: