Files
openstack-helm/values_overrides/ceph-osd/apparmor.yaml
Ritchie, Frank (fr801x) 062261562f Use security_context for apparmor
Starting with kubernetes 1.30 apparmor profiles are specified in the
security_context instead of annotations:

https://kubernetes.io/docs/tutorials/security/apparmor/

This PS:

1: updates apparmor value overrides to use security_context
2: removes apparmor annotations from top level values where found
3: removes non apparmor values from apparmor value overrides where found

End users can still use annotations by setting values appropriately.

Change-Id: I2c1a473e81d0904cbb1f96ee6ffb08b0d68e8651
2025-06-11 22:48:33 -04:00

37 lines
842 B
YAML

---
pod:
security_context:
osd:
container:
osd_pod:
appArmorProfile:
type: RuntimeDefault
log_runner:
appArmorProfile:
type: RuntimeDefault
ceph_init_dirs:
appArmorProfile:
type: RuntimeDefault
ceph_log_ownership:
appArmorProfile:
type: RuntimeDefault
osd_init:
appArmorProfile:
type: RuntimeDefault
test:
container:
ceph_cluster_helm_test:
appArmorProfile:
type: RuntimeDefault
post_apply:
container:
ceph_osd_post_apply:
appArmorProfile:
type: RuntimeDefault
kubernetes_entrypoint:
container:
kubernetes_entrypoint:
appArmorProfile:
type: RuntimeDefault
...