openstack/openstack-helm
Code Issues Proposed changes

Enable Apparmor to Placement db-migrate Jobs

Browse Source 
Change-Id: I15141ff74cbc731238d634fb11995d21234327ba
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
This commit is contained in:
diwakar thyagaraj 2020-08-13 21:54:13 +00:00
parent 94642833dd
commit 2ae6f9200a
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
placement/templates/job-db-migrate.yaml
View File

@ -29,6 +29,8 @@ spec:
metadata: metadata:
labels: labels:
{{ tuple $envAll "placement" $service | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} {{ tuple $envAll "placement" $service | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ dict "envAll" $envAll "podName" "placement-db-migrate" "containerNames" (list "placement-mysql-migration" "init") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec: spec:
serviceAccountName: {{ $serviceAccountName }} serviceAccountName: {{ $serviceAccountName }}
restartPolicy: OnFailure restartPolicy: OnFailure

6
placement/values_overrides/apparmor.yaml
View File

@ -5,4 +5,10 @@ pod:
placement-api: placement-api:
placement-api: runtime/default placement-api: runtime/default
init: runtime/default init: runtime/default
placement-db-migrate:
init: runtime/default
placement-mysql-migration: runtime/default
manifests:
job_db_migrate: true
... ...