openstack/openstack-helm-infra
Code Issues Proposed changes

Add default AppArmor profile to prometheus-node-exporter

Browse Source 
Change-Id: Icb407f5271581979d3a2869b776013ba478c9487
This commit is contained in:
dt241s 2019-02-27 14:21:17 -06:00 committed by diwakar thyagaraj
parent c4f6453511
commit 469b31356d
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
prometheus-node-exporter/templates/daemonset.yaml
View File

@ -51,6 +51,8 @@ spec:
metadata: metadata:
labels: labels:
{{ tuple $envAll "node_exporter" "metrics" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} {{ tuple $envAll "node_exporter" "metrics" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
annotations:
{{ dict "envAll" $envAll "podName" "node-exporter" "containerNames" (list "node-exporter") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
namespace: {{ .Values.endpoints.node_metrics.namespace }} namespace: {{ .Values.endpoints.node_metrics.namespace }}
spec: spec:
securityContext: securityContext:

5
prometheus-node-exporter/values.yaml
View File

@ -37,6 +37,10 @@ labels:
node_selector_value: enabled node_selector_value: enabled
pod: pod:
mandatory_access_control:
type: apparmor
node-exporter:
node-exporter: localhost/docker-default
affinity: affinity:
anti: anti:
type: type:
@ -87,7 +91,6 @@ pod:
operator: Exists operator: Exists
- key: node-role.kubernetes.io/node - key: node-role.kubernetes.io/node
operator: Exists operator: Exists
dependencies: dependencies:
dynamic: dynamic:
common: common: