openstack/openstack-helm-infra
Code Issues Proposed changes

Add default AppArmor profile to prometheus-alert-manager

Browse Source 
Change-Id: I008eeb520af853678078091b838b0b2ca48e026c
This commit is contained in:
dt241s 2019-02-27 14:58:12 -06:00 committed by Chris Wedgwood
parent 469b31356d
commit 77b37ca520
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
prometheus-alertmanager/templates/statefulset.yaml
View File

@ -44,6 +44,7 @@ spec:
annotations:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "alertmanager" "containerNames" (list "alertmanager") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
securityContext:
readOnlyRootFilesystem: true

4
prometheus-alertmanager/values.yaml
View File

@ -38,6 +38,10 @@ labels:
node_selector_value: enabled
pod:
mandatory_access_control:
type: apparmor
alertmanager:
alertmanager: localhost/docker-default
user:
alertmanager:
uid: 65534