Merge "Add default AppArmor profile to prometheus-openstack-exporter"

This commit is contained in:
Zuul 2019-03-15 17:53:30 +00:00 committed by Gerrit Code Review
commit c4f6453511
2 changed files with 6 additions and 1 deletions

View File

@ -39,6 +39,8 @@ spec:
metadata: metadata:
labels: labels:
{{ tuple $envAll "prometheus-openstack-exporter" "exporter" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} {{ tuple $envAll "prometheus-openstack-exporter" "exporter" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ dict "envAll" $envAll "podName" "prometheus-openstack-exporter" "containerNames" (list "openstack-metrics-exporter") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec: spec:
securityContext: securityContext:
readOnlyRootFilesystem: true readOnlyRootFilesystem: true

View File

@ -38,6 +38,10 @@ labels:
node_selector_value: enabled node_selector_value: enabled
pod: pod:
mandatory_access_control:
type: apparmor
openstack-metrics-exporter:
openstack-metrics-exporter: localhost/docker-default
user: user:
openstack_exporter: openstack_exporter:
uid: 65534 uid: 65534
@ -87,7 +91,6 @@ pod:
limits: limits:
memory: "1024Mi" memory: "1024Mi"
cpu: "2000m" cpu: "2000m"
dependencies: dependencies:
dynamic: dynamic:
common: common: