Add default AppArmor profile to prometheus-node-exporter

Change-Id: Icb407f5271581979d3a2869b776013ba478c9487

prometheus-node-exporter/templates/daemonset.yaml

@@ -51,6 +51,8 @@ spec:
     metadata:
       labels:
 {{ tuple $envAll "node_exporter" "metrics" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
+      annotations:
+{{ dict "envAll" $envAll "podName" "node-exporter" "containerNames" (list "node-exporter") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
       namespace: {{ .Values.endpoints.node_metrics.namespace }}
     spec:
       securityContext:

prometheus-node-exporter/values.yaml

@@ -37,6 +37,10 @@ labels:
     node_selector_value: enabled
 
 pod:
+  mandatory_access_control:
+    type: apparmor
+    node-exporter:
+      node-exporter: localhost/docker-default
   affinity:
     anti:
       type:
@@ -87,7 +91,6 @@ pod:
         operator: Exists
       - key: node-role.kubernetes.io/node
         operator: Exists
-
 dependencies:
   dynamic:
     common: