pod:
  mandatory_access_control:
    type: apparmor
    ceph-checkdns:
      ceph-checkdns: runtime/default
      init: runtime/default
    ceph-mds:
      ceph-mds: runtime/default
      ceph-init-dirs: runtime/default
    ceph-mgr:
      ceph-mgr: runtime/default
      ceph-init-dirs: runtime/default
    ceph-rbd-pool:
      ceph-rbd-pool: runtime/default
      init: runtime/default