openstack/openstack-helm-infra
Code Issues Proposed changes

Rename mandatory access control annotation func

Browse Source 
This patch set renames the existing apparmor annotation
function to a more generic MAC (Mandatory Access Control)
name to be flexible enough to handle other MAC annotations
in the future.

Change-Id: I98a34484cebc2b420ad8f2664e4aaa84cfb9dca1
This commit is contained in:
Cliff Parsons 2018-10-16 13:58:12 -05:00 committed by Chris Wedgwood
parent f3d8bda9d6
commit c5b10d155f
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
helm-toolkit/templates/snippets/_kubernetes_apparmor_annotation.tpl → helm-toolkit/templates/snippets/_kubernetes_mandatory_access_control_annotation.tpl
View File

@ -16,7 +16,9 @@ limitations under the License.
{{/*
abstract: |
Renders apparmor annotations for a list of containers driven by values.yaml.
Renders mandatory access control annotations for a list of containers
driven by values.yaml. As of now, it can only generate an apparmor
annotation, but in the future could generate others.
values: |
pod:
apparmor:
@ -25,7 +27,7 @@ values: |
mySecondContainerName: localhost/secondProfile # optional
myThirdContainerName: localhost/thirdProfile # optional
usage: |
{{ dict "envAll" . "podName" "myPodName" "containerNames" (list "myContainerName" "mySecondContainerName" "myThirdContainerName") | include "helm-toolkit.snippets.kubernetes_apparmor_annotation" }}
{{ dict "envAll" . "podName" "myPodName" "containerNames" (list "myContainerName" "mySecondContainerName" "myThirdContainerName") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" }}
return: |
container.apparmor.security.beta.kubernetes.io/myContainerName: localhost/myAppArmor
container.apparmor.security.beta.kubernetes.io/mySecondContainerName: localhost/secondProfile
@ -34,7 +36,7 @@ note: |
The number of container underneath is a variable arguments. It loops through
all the container names specified.
*/}}
{{- define "helm-toolkit.snippets.kubernetes_apparmor_annotation" -}}
{{- define "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" -}}
{{- $envAll := index . "envAll" -}}
{{- $podName := index . "podName" -}}
{{- $containerNames := index . "containerNames" -}}