airship
/
armada
Code Issues Proposed changes

Tiller: Add apparmor profile to tiller container 

Adding profile to missing container in armada chart

Change-Id: Ic51c93c503d616f7583050d36eff9d774a257312
This commit is contained in:
KHIYANI, RAHUL (rk0850) 2020-04-13 09:52:41 -05:00 committed by Rahul Khiyani
parent a04c2e1e3e
commit c72dae0c5c
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
charts/armada/templates/deployment-api.yaml
View File

@ -106,7 +106,7 @@ spec:
{{ $labels | indent 8 }}
annotations:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "armada-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "init" "armada-api" "tiller") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ tuple $prometheus_annotations | include "helm-toolkit.snippets.prometheus_pod_annotations" | indent 8 }}

2
charts/armada/values.yaml
View File

@ -229,7 +229,9 @@ pod:
mandatory_access_control:
type: apparmor
armada-api:
init: runtime/default
armada-api: runtime/default
tiller: runtime/default
probes:
armada:
api: