---
pod:
  mandatory_access_control:
    type: apparmor
    ceph-cephfs-provisioner:
      ceph-cephfs-provisioner: runtime/default
      init: runtime/default
    ceph-cephfs-client-key-generator:
      ceph-storage-keys-generator: runtime/default
      init: runtime/default
    ceph-rbd-provisioner:
      ceph-rbd-provisioner: runtime/default
      init: runtime/default
    ceph-rbd-csi-provisioner:
      ceph-rbd-provisioner: runtime/default
      init: runtime/default
      ceph-rbd-snapshotter: runtime/default
      ceph-rbd-attacher: runtime/default
      csi-resizer: runtime/default
      csi-rbdplugin: runtime/default
    ceph-provisioner-test:
      init: runtime/default
      ceph-provisioner-helm-test: runtime/default
    ceph-osh-infra-config-test:
      init: runtime/default
      ceph-provisioner-helm-test: runtime/default
    ceph-provisioners-ceph-ns-key-generator:
      ceph-storage-keys-generator: runtime/default
      init: runtime/default
    ceph-rbd-plugin:
      driver-registrar: runtime/default
      csi-rbdplugin: runtime/default
      init: runtime/default

deployment:
  client_secrets: true
...