diff --git a/nova/templates/deployment-placement.yaml b/nova/templates/deployment-placement.yaml index d6faa30f03..237d41f966 100644 --- a/nova/templates/deployment-placement.yaml +++ b/nova/templates/deployment-placement.yaml @@ -43,7 +43,7 @@ spec: {{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} -{{ dict "envAll" $envAll "podName" "nova-placement" "containerNames" (list "nova-placement-api") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} +{{ dict "envAll" $envAll "podName" "nova-placement" "containerNames" (list "nova-placement-api" "init") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: serviceAccountName: {{ $serviceAccountName }} affinity: diff --git a/nova/templates/job-cell-setup.yaml b/nova/templates/job-cell-setup.yaml index 675dac34c8..0e31b0a290 100644 --- a/nova/templates/job-cell-setup.yaml +++ b/nova/templates/job-cell-setup.yaml @@ -30,7 +30,7 @@ spec: labels: {{ tuple $envAll "nova" "cell-setup" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} annotations: -{{ dict "envAll" $envAll "podName" "nova-cell-setup" "containerNames" (list "nova-cell-setup-init" "nova-cell-setup") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} +{{ dict "envAll" $envAll "podName" "nova-cell-setup" "containerNames" (list "nova-cell-setup-init" "nova-cell-setup" "init") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: serviceAccountName: {{ $serviceAccountName }} restartPolicy: OnFailure diff --git a/nova/values_overrides/apparmor.yaml b/nova/values_overrides/apparmor.yaml index 027e3d987e..122a15ca84 100644 --- a/nova/values_overrides/apparmor.yaml +++ b/nova/values_overrides/apparmor.yaml @@ -8,6 +8,7 @@ pod: nova-compute-vnc-init: runtime/default nova-placement: nova-placement-api: runtime/default + init: runtime/default nova-api-metadata: nova-api-metadata-init: runtime/default nova-api: runtime/default @@ -31,4 +32,5 @@ pod: init: runtime/default nova-cell-setup: nova-cell-setup: runtime/default - nova-cell-setup-init: runtime/default \ No newline at end of file + nova-cell-setup-init: runtime/default + init: runtime/default \ No newline at end of file