openstack/openstack-helm-infra
Code Issues Proposed changes

Updated the Node Problem Detector chart

Browse Source 
The image for the npd is updated to use from the openstackhelm images
repo rather than the k8 image . The k8 image had some security
vulnerabities.
The version for the image is updated to latest ie v0.8.2.

Added the apparmor file.

Change-Id: I4cb40d8bac0533d516d2105f9589636c81fa4111
This commit is contained in:
Pai, Radhika (rp592h) 2020-07-15 10:18:05 -05:00
parent 6409bb6879
commit efac80f2d2
4 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kubernetes-node-problem-detector/templates/bin/_node-problem-detector.sh.tpl
View File

@ -15,7 +15,7 @@ limitations under the License.
set -ex
exec /node-problem-detector \
exec /opt/node-problem-detector/bin/node-problem-detector \
{{- range $monitor, $monitorConfig := .Values.conf.monitors }}
{{- if $monitorConfig.enabled }}
--config.{{$monitor}}={{ include "helm-toolkit.utils.joinListWithComma" $monitorConfig.enabled }} \

2
kubernetes-node-problem-detector/values.yaml
View File

@ -17,7 +17,7 @@
---
images:
tags:
node_problem_detector: k8s.gcr.io/node-problem-detector:v0.7.0
node_problem_detector: docker.io/openstackhelm/node-problem-detector:ubuntu_bionic-20200714
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
image_repo_sync: docker.io/docker:17.07.0
pull_policy: IfNotPresent

8
kubernetes-node-problem-detector/values_overrides/apparmor.yaml Normal file
View File

@ -0,0 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
node-problem-detector:
node-problem-detector: runtime/default
init: runrtime/default
...

1
tools/deployment/apparmor/115-node-problem-detector.sh Normal file
View File

@ -0,0 +1 @@
../osh-infra-monitoring/075-node-problem-detector.sh