From c72dae0c5c6c570e44e2777bf7ab93bf721c7c7b Mon Sep 17 00:00:00 2001 From: "KHIYANI, RAHUL (rk0850)" Date: Mon, 13 Apr 2020 09:52:41 -0500 Subject: [PATCH] Tiller: Add apparmor profile to tiller container Adding profile to missing container in armada chart Change-Id: Ic51c93c503d616f7583050d36eff9d774a257312 --- charts/armada/templates/deployment-api.yaml | 2 +- charts/armada/values.yaml | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/charts/armada/templates/deployment-api.yaml b/charts/armada/templates/deployment-api.yaml index 7d43fc9b..772c5732 100644 --- a/charts/armada/templates/deployment-api.yaml +++ b/charts/armada/templates/deployment-api.yaml @@ -106,7 +106,7 @@ spec: {{ $labels | indent 8 }} annotations: {{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }} -{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "armada-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} +{{ dict "envAll" $envAll "podName" "armada-api" "containerNames" (list "init" "armada-api" "tiller") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} {{ tuple $prometheus_annotations | include "helm-toolkit.snippets.prometheus_pod_annotations" | indent 8 }} diff --git a/charts/armada/values.yaml b/charts/armada/values.yaml index 2885c7c1..8c2d979c 100644 --- a/charts/armada/values.yaml +++ b/charts/armada/values.yaml @@ -229,7 +229,9 @@ pod: mandatory_access_control: type: apparmor armada-api: + init: runtime/default armada-api: runtime/default + tiller: runtime/default probes: armada: api: