From 394fdb3b9fe689ef6a6be3728b856e4f0e982535 Mon Sep 17 00:00:00 2001 From: "KAVVA, JAGAN MOHAN REDDY (jk330k)" Date: Tue, 3 Mar 2020 11:52:13 -0600 Subject: [PATCH] Enable Docker default AppArmor profile to nova-placement-api This adds default Apparmor profile to nova-placement-api. Change-Id: I075c4639c692eafbc4cdd692420e9cbfac0285fd --- nova/templates/deployment-placement.yaml | 1 + nova/values_overrides/apparmor.yaml | 2 ++ 2 files changed, 3 insertions(+) diff --git a/nova/templates/deployment-placement.yaml b/nova/templates/deployment-placement.yaml index 818c0c9d69..f45af3a879 100644 --- a/nova/templates/deployment-placement.yaml +++ b/nova/templates/deployment-placement.yaml @@ -45,6 +45,7 @@ spec: {{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} +{{ dict "envAll" $envAll "podName" "nova-placement" "containerNames" (list "nova-placement-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: serviceAccountName: {{ $serviceAccountName }} affinity: diff --git a/nova/values_overrides/apparmor.yaml b/nova/values_overrides/apparmor.yaml index 1cae26ad8a..559c9df916 100644 --- a/nova/values_overrides/apparmor.yaml +++ b/nova/values_overrides/apparmor.yaml @@ -3,3 +3,5 @@ pod: type: apparmor nova-compute-default: nova-compute: runtime/default + nova-placement: + nova-placement-api: runtime/default