airship/maas
Code Issues Proposed changes

Enable Docker default AppArmor profile to maas

Browse Source 
This adds default Apparmor profile to maas-cache container.

Change-Id: Ib181189d968e328291b802d1528b33fc74b7873e
This commit is contained in:
KAVVA, JAGAN MOHAN REDDY (jk330k) 2020-06-22 11:36:50 -05:00
parent afe3d6e444
commit a8a530bec7
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
charts/maas/templates/statefulset-region.yaml
View File

@ -44,7 +44,12 @@ spec:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "maas-region" "containerNames" (list "init" "maas-region") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
{{- $containers := "init maas-region" }}
{{- if .Values.conf.cache.enabled }}
{{- $containers = printf "%s maas-cache" $containers }}
{{- end }}
{{- $containers = splitList " " $containers }}
{{ dict "envAll" $envAll "podName" "maas-region" "containerNames" $containers | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
serviceAccountName: {{ $serviceAccountName }}
affinity:

1
charts/maas/values.yaml
View File

@ -308,6 +308,7 @@ pod:
init: runtime/default
maas-region:
maas-region: runtime/default
maas-cache: runtime/default
init: runtime/default
maas-syslog:
syslog: runtime/default