From 0d536c5ef57edc697e79207654110e054fd06686 Mon Sep 17 00:00:00 2001 From: diwakar thyagaraj Date: Sun, 31 May 2020 02:07:35 +0000 Subject: [PATCH] Fix Apparmor for Heat cron Job pods. Change-Id: I7495cc0b4422615ac9527f8f6087145fc3c36c6a Signed-off-by: diwakar thyagaraj --- heat/templates/cron-job-engine-cleaner.yaml | 2 ++ heat/templates/cron-job-purge-deleted.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/heat/templates/cron-job-engine-cleaner.yaml b/heat/templates/cron-job-engine-cleaner.yaml index 4630a42f9d..6da474083f 100644 --- a/heat/templates/cron-job-engine-cleaner.yaml +++ b/heat/templates/cron-job-engine-cleaner.yaml @@ -39,6 +39,8 @@ spec: metadata: labels: {{ tuple $envAll "heat" "engine-cleaner" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} + annotations: +{{ dict "envAll" $envAll "podName" "heat-engine-cleaner" "containerNames" (list "heat-engine-cleaner" "init" ) | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: template: metadata: diff --git a/heat/templates/cron-job-purge-deleted.yaml b/heat/templates/cron-job-purge-deleted.yaml index 0013a5ed74..469d7171e4 100644 --- a/heat/templates/cron-job-purge-deleted.yaml +++ b/heat/templates/cron-job-purge-deleted.yaml @@ -36,6 +36,8 @@ spec: metadata: labels: {{ tuple $envAll "heat" "purge-deleted" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} + annotations: +{{ dict "envAll" $envAll "podName" "heat-purge-deleted" "containerNames" (list "init" "heat-purge-deleted" ) | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: template: metadata: