pod:
  mandatory_access_control:
    type: apparmor
    alertmanager:
      alertmanager-perms: runtime/default