airship/promenade
Code Issues Proposed changes

Add apparmor profile to scheduler chart

Browse Source 
Change-Id: I35aca44eac1c66f54a3922c73e7ad3858081cebb
This commit is contained in:
KHIYANI, RAHUL (rk0850) 2020-02-06 15:30:02 -06:00
parent da398d8b2b
commit c6ee7344a5
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
charts/scheduler/templates/sched-anchor.yaml
View File

@ -37,6 +37,7 @@ spec:
scheduler.alpha.kubernetes.io/critical-pod: ''
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "scheduler" "containerNames" (list "anchor") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
labels:
{{ $labels | indent 8 }}
spec:

4
charts/scheduler/values.yaml
View File

@ -25,6 +25,10 @@ labels:
node_selector_value: enabled
pod:
mandatory_access_control:
type: apparmor
scheduler:
anchor: runtime/default
security_context:
scheduler:
pod: