airship/porthole
Code Issues Proposed changes

Merge "Add apparmor profile for postgresql-ondemand containers"

Browse Source
This commit is contained in:
Zuul 2020-08-24 15:33:09 +00:00 committed by Gerrit Code Review
commit 76626b65ca
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
charts/postgresql-utility/templates/bin/utility/_pg_ondemand_job.sh.tpl
View File

@ -34,6 +34,9 @@ metadata:
spec:
template:
metadata:
annotations:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" }}
{{ dict "envAll" $envAll "podName" "postgresql-ondemand" "containerNames" (list "backup-perms" "postgresql-ondemand") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
labels:
{{ tuple $envAll "postgresql-ondemand" "ondemand" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
spec:

3
charts/postgresql-utility/values.yaml
View File

@ -66,6 +66,9 @@ pod:
type: apparmor
postgresql-utility:
postgresql-utility: runtime/default
postgresql-ondemand:
backup-perms: runtime/default
postgresql-ondemand: runtime/default
resources:
enabled: false
utility: