openstack-helm-infra/ceph-mon/values_overrides/apparmor.yaml
diwakar thyagaraj 5d50433362 Enable Application Armor to all ceph key-generator pods.
1) Changed the pod name and container name to pick name dynamically for
   osd,mon,mgr and mds.

2) Added Init container for ceph-provisioners.

Change-Id: I3e27d51c055010cff982ddb0951d01ea8adac234
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-07-20 01:29:42 +00:00

35 lines
964 B
YAML

---
pod:
mandatory_access_control:
type: apparmor
ceph-mon:
ceph-init-dirs: runtime/default
ceph-mon: runtime/default
ceph-log-ownership: runtime/default
ceph-mon-check:
ceph-mon: runtime/default
init: runtime/default
ceph-bootstrap:
ceph-bootstrap: runtime/default
init: runtime/default
ceph-storage-keys-generator:
ceph-storage-keys-generator: runtime/default
init: runtime/default
ceph-mon-keyring-generator:
ceph-mon-keyring-generator: runtime/default
init: runtime/default
ceph-mgr-keyring-generator:
init: runtime/default
ceph-mgr-keyring-generator: runtime/default
ceph-mds-keyring-generator:
init: runtime/default
ceph-mds-keyring-generator: runtime/default
ceph-osd-keyring-generator:
ceph-osd-keyring-generator: runtime/default
init: runtime/default
bootstrap:
enabled: true
manifests:
job_bootstrap: true
...