openstack-helm-infra/ceph-mon/values_overrides/apparmor.yaml
Stephen Taylor ae17a61836 [ceph-mon] Add a post-apply job to restart mons after mgrs
If the OnDelete pod restart strategy is used for the ceph-mon
daemonset, run a post-apply job to restart the ceph-mon pods one
at a time. Otherwise the mons could restart before the mgrs, which
can be problematic in some upgrade scenarios.

Change-Id: I57f87130e95088217c3cfe73512caaae41d3ef22
2022-02-10 12:43:23 -07:00

40 lines
1.1 KiB
YAML

---
pod:
mandatory_access_control:
type: apparmor
ceph-mon:
ceph-init-dirs: runtime/default
ceph-mon: runtime/default
ceph-log-ownership: runtime/default
ceph-mgr:
ceph-mgr: runtime/default
ceph-init-dirs: runtime/default
ceph-mon-check:
ceph-mon: runtime/default
init: runtime/default
ceph-bootstrap:
ceph-bootstrap: runtime/default
init: runtime/default
ceph-storage-keys-generator:
ceph-storage-keys-generator: runtime/default
init: runtime/default
ceph-mon-keyring-generator:
ceph-mon-keyring-generator: runtime/default
init: runtime/default
ceph-mgr-keyring-generator:
init: runtime/default
ceph-mgr-keyring-generator: runtime/default
ceph-mds-keyring-generator:
init: runtime/default
ceph-mds-keyring-generator: runtime/default
ceph-osd-keyring-generator:
ceph-osd-keyring-generator: runtime/default
init: runtime/default
ceph-mon-post-apply:
ceph-mon-post-apply: runtime/default
bootstrap:
enabled: true
manifests:
job_bootstrap: true
...