---
pod:
  mandatory_access_control:
    type: apparmor
    ceph-mon:
      ceph-init-dirs: runtime/default
      ceph-mon: runtime/default
      ceph-log-ownership: runtime/default
    ceph-mon-check:
      ceph-mon: runtime/default
      init: runtime/default
    ceph-bootstrap:
      ceph-bootstrap: runtime/default
      init: runtime/default
    ceph-storage-keys-generator:
      ceph-storage-keys-generator: runtime/default
      init: runtime/default
bootstrap:
  enabled: true
manifests:
  job_bootstrap: true
...