openstack/openstack-helm-infra
Code Issues Proposed changes

Merge "Ingress: add apparmor profile to ingress init containers"

Browse Source
This commit is contained in:
Zuul 2020-06-15 23:22:27 +00:00 committed by Gerrit Code Review
commit c8a5edb218
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ingress/templates/deployment-ingress.yaml
View File

@ -178,10 +178,11 @@ spec:
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-conf.yaml" . | include "helm-toolkit.utils.hash" }}
{{- $containers := (list "init" "ingress") }}
{{- $containers := "init ingress" }}
{{- if and .Values.network.host_namespace .Values.network.vip.manage }}
{{- $containers = append $containers "ingress-vip" }}
{{- $containers = printf "%s ingress-vip-kernel-modules ingress-vip-init ingress-vip" $containers }}
{{- end }}
{{- $containers = splitList " " $containers }}
{{ dict "envAll" $envAll "podName" "ingress-server" "containerNames" $containers | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
{{ dict "envAll" $envAll "application" "server" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}

2
ingress/values_overrides/apparmor.yaml
View File

@ -7,6 +7,8 @@ pod:
ingress-error-pages: runtime/default
ingress-server:
init: runtime/default
ingress-vip-kernel-modules: runtime/default
ingress-vip-init: runtime/default
ingress: runtime/default
ingress-vip: runtime/default
...