airship
/
promenade
Code Issues Proposed changes

Add Docker default AppArmor profile to coredns 

Change-Id: Iae8b1b2c2b51b5f18567e46ae4aae55ca4c1d279
This commit is contained in:
KHIYANI, RAHUL (rk0850) 2020-01-27 10:11:52 -06:00 committed by Rahul Khiyani
parent 88434cbcb7
commit 7c8377447c
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
charts/coredns/templates/deployment.yaml
View File

@ -57,6 +57,7 @@ spec:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" $envAll | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" $envAll | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "coredns" "containerNames" (list "coredns") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
{{ dict "envAll" $envAll "application" "coredns" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: coredns

4
charts/coredns/values.yaml
View File

@ -38,6 +38,10 @@ service:
ip: 10.96.0.10
pod:
mandatory_access_control:
type: apparmor
coredns:
coredns: runtime/default
security_context:
coredns:
pod: