From 7c8377447c9acd96166a77b1ea7ac8c3eab1b52c Mon Sep 17 00:00:00 2001 From: "KHIYANI, RAHUL (rk0850)" Date: Mon, 27 Jan 2020 10:11:52 -0600 Subject: [PATCH] Add Docker default AppArmor profile to coredns Change-Id: Iae8b1b2c2b51b5f18567e46ae4aae55ca4c1d279 --- charts/coredns/templates/deployment.yaml | 1 + charts/coredns/values.yaml | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/charts/coredns/templates/deployment.yaml b/charts/coredns/templates/deployment.yaml index ba0087ea..5ce8c192 100644 --- a/charts/coredns/templates/deployment.yaml +++ b/charts/coredns/templates/deployment.yaml @@ -57,6 +57,7 @@ spec: {{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" $envAll | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" $envAll | include "helm-toolkit.utils.hash" }} +{{ dict "envAll" $envAll "podName" "coredns" "containerNames" (list "coredns") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: {{ dict "envAll" $envAll "application" "coredns" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }} serviceAccountName: coredns diff --git a/charts/coredns/values.yaml b/charts/coredns/values.yaml index 0938863d..8b7951ea 100644 --- a/charts/coredns/values.yaml +++ b/charts/coredns/values.yaml @@ -38,6 +38,10 @@ service: ip: 10.96.0.10 pod: + mandatory_access_control: + type: apparmor + coredns: + coredns: runtime/default security_context: coredns: pod: