airship/porthole
Code Issues Proposed changes

Add apparmor profile for postgresql-ondemand containers

Browse Source 
Change-Id: I080f4aaa73f52e4502d61f82135cdff0217c3518
This commit is contained in:
KHIYANI, RAHUL (rk0850)
2020-07-31 11:40:05 -05:00
committed by Rahul Khiyani
parent 7506fba4c1
commit a426bb9441
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
charts/postgresql-utility/templates/bin/utility/_pg_ondemand_job.sh.tpl
View File

@@ -34,6 +34,9 @@ metadata:
spec:
template:
metadata:
annotations:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" }}
{{ dict "envAll" $envAll "podName" "postgresql-ondemand" "containerNames" (list "backup-perms" "postgresql-ondemand") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
labels:
{{ tuple $envAll "postgresql-ondemand" "ondemand" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
spec:

3
charts/postgresql-utility/values.yaml
View File

@@ -66,6 +66,9 @@ pod:
type: apparmor
postgresql-utility:
postgresql-utility: runtime/default
postgresql-ondemand:
backup-perms: runtime/default
postgresql-ondemand: runtime/default
resources:
enabled: false
utility: