cc793f2144
The log-runner previously was not included in the mandatory access control (MAC) annotation for the OSD pods, which means it could not have any AppArmor profile applied to it. This patchset adds that capability for that container. Change-Id: I11036789de45c0f8f66b51e15f2cc253e6cb230c
23 lines
573 B
YAML
23 lines
573 B
YAML
---
|
|
pod:
|
|
mandatory_access_control:
|
|
type: apparmor
|
|
ceph-osd-default:
|
|
ceph-osd-default: runtime/default
|
|
log-runner: runtime/default
|
|
ceph-init-dirs: runtime/default
|
|
ceph-log-ownership: runtime/default
|
|
osd-init: runtime/default
|
|
init: runtime/default
|
|
ceph-osd-test:
|
|
init: runtime/default
|
|
ceph-cluster-helm-test: runtime/default
|
|
ceph-osd-post-apply:
|
|
ceph-osd-post-apply: runtime/default
|
|
init: runtime/default
|
|
lifecycle:
|
|
upgrades:
|
|
daemonsets:
|
|
pod_replacement_strategy: OnDelete
|
|
...
|