Add Docker default AppArmor profile to coredns
Change-Id: Iae8b1b2c2b51b5f18567e46ae4aae55ca4c1d279
This commit is contained in:
parent
88434cbcb7
commit
7c8377447c
@ -57,6 +57,7 @@ spec:
|
||||
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
|
||||
configmap-bin-hash: {{ tuple "configmap-bin.yaml" $envAll | include "helm-toolkit.utils.hash" }}
|
||||
configmap-etc-hash: {{ tuple "configmap-etc.yaml" $envAll | include "helm-toolkit.utils.hash" }}
|
||||
{{ dict "envAll" $envAll "podName" "coredns" "containerNames" (list "coredns") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
|
||||
spec:
|
||||
{{ dict "envAll" $envAll "application" "coredns" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
|
||||
serviceAccountName: coredns
|
||||
|
@ -38,6 +38,10 @@ service:
|
||||
ip: 10.96.0.10
|
||||
|
||||
pod:
|
||||
mandatory_access_control:
|
||||
type: apparmor
|
||||
coredns:
|
||||
coredns: runtime/default
|
||||
security_context:
|
||||
coredns:
|
||||
pod:
|
||||
|
Loading…
Reference in New Issue
Block a user