diff --git a/charts/scheduler/templates/sched-anchor.yaml b/charts/scheduler/templates/sched-anchor.yaml index 7603e4a8..4b90c56f 100644 --- a/charts/scheduler/templates/sched-anchor.yaml +++ b/charts/scheduler/templates/sched-anchor.yaml @@ -37,6 +37,7 @@ spec: scheduler.alpha.kubernetes.io/critical-pod: '' configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} +{{ dict "envAll" $envAll "podName" "scheduler" "containerNames" (list "anchor") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} labels: {{ $labels | indent 8 }} spec: diff --git a/charts/scheduler/values.yaml b/charts/scheduler/values.yaml index a300585d..07810589 100644 --- a/charts/scheduler/values.yaml +++ b/charts/scheduler/values.yaml @@ -25,6 +25,10 @@ labels: node_selector_value: enabled pod: + mandatory_access_control: + type: apparmor + scheduler: + anchor: runtime/default security_context: scheduler: pod: