Tiller: Add apparmor profile to tiller container
Adding profile to missing container in armada chart Change-Id: Ic51c93c503d616f7583050d36eff9d774a257312
This commit is contained in:
parent
a04c2e1e3e
commit
c72dae0c5c
@ -106,7 +106,7 @@ spec:
|
||||
{{ $labels | indent 8 }}
|
||||
annotations:
|
||||
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
|
||||
{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "armada-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
|
||||
{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "init" "armada-api" "tiller") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
|
||||
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
|
||||
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
|
||||
{{ tuple $prometheus_annotations | include "helm-toolkit.snippets.prometheus_pod_annotations" | indent 8 }}
|
||||
|
@ -229,7 +229,9 @@ pod:
|
||||
mandatory_access_control:
|
||||
type: apparmor
|
||||
armada-api:
|
||||
init: runtime/default
|
||||
armada-api: runtime/default
|
||||
tiller: runtime/default
|
||||
probes:
|
||||
armada:
|
||||
api:
|
||||
|
Loading…
Reference in New Issue
Block a user