openstack
/
openstack-helm
Code Issues Proposed changes

Enable Docker default AppArmor profile to barbican 

This adds default Apparmor profile to barbican initContainer.

Change-Id: I76382830a52f2c8b5161bdda821b0a66e34e8e72
This commit is contained in:
KAVVA, JAGAN MOHAN REDDY (jk330k) 2020-03-11 10:04:59 -05:00
parent ef1f5ec153
commit a94add06c3
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
barbican/templates/deployment-api.yaml
View File

@ -45,7 +45,7 @@ spec:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "barbican-api" "containerNames" (list "barbican-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
{{ dict "envAll" $envAll "podName" "barbican-api" "containerNames" (list "init" "barbican-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
{{ dict "envAll" $envAll "application" "barbican" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}

1
barbican/values_overrides/apparmor.yaml
View File

@ -3,3 +3,4 @@ pod:
type: apparmor
barbican-api:
barbican-api: runtime/default
init: runtime/default