[Fix] Enable Apparmor to missing ranger-agent completed job.

Change-Id: I5b3b0b15eca56816695efe11219f61b05069256f
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>

ranger-agent/templates/job-add-region.yaml

@@ -25,7 +25,7 @@ limitations under the License.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: {{ $serviceAccountName | quote }}
+  name: ranger-agent-add-region
   annotations:
     "helm.sh/hook": post-install,post-upgrade
     "helm.sh/hook-delete-policy": before-hook-creation
@@ -35,6 +35,8 @@ spec:
     metadata:
       labels:
 {{ tuple $envAll $serviceName "job" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
+      annotations:
+{{ dict "envAll" $envAll "podName" "ranger-agent-add-region" "containerNames" (list "init" "ranger-agent-add-region" ) | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
     spec:
       serviceAccountName: {{ $serviceAccountName | quote }}
       restartPolicy: Never
@@ -43,7 +45,7 @@ spec:
       initContainers:
 {{ tuple $envAll "add_region" $mounts_ranger_agent_add_region_init | include "helm-toolkit.snippets.kubernetes_entrypoint_init_container" | indent 8 }}
       containers:
-        - name: {{ $serviceAccountName | quote }}
+        - name: ranger-agent-add-region
           image: {{ .Values.images.tags.scripted_test | quote }}
           imagePullPolicy: {{ $envAll.Values.images.pull_policy | quote }}
 {{ tuple $envAll $envAll.Values.pod.resources.jobs.add_region | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}

ranger-agent/values_overrides/apparmor.yaml

@@ -11,4 +11,13 @@ pod:
     ranger-agent-test:
       ranger-agent-test: runtime/default
       init: runtime/default
+    ranger-agent-add-region:
+      ranger-agent-add-region: runtime/default
+      init: runtime/default
+conf:
+  region:
+    location:
+      "TBD"
+manifests:
+  job_add_region: true
 ...