Enable Apparmor to etcd chart

Added Apparmor Job to etcd Change-Id: Ia1770ec44b0a3c186ee33a721d38b36120a3bc30
hossein-alit · Sep 9, 2020 · 81c8571 · 81c8571
1 parent cb1bd3c
commit 81c8571
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/etcd/templates/deployment.yaml b/etcd/templates/deployment.yaml
@@ -38,6 +38,7 @@ spec:
 {{ tuple $envAll "etcd" "server" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
  annotations:
 {{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
+{{ dict "envAll" $envAll "podName" "etcd" "containerNames" (list "init" "etcd") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
  configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
  spec:
 {{ dict "envAll" $envAll "application" "etcd" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}

diff --git a/etcd/values.yaml b/etcd/values.yaml
@@ -59,6 +59,11 @@ pod:
  etcd:
  runAsUser: 0
  readOnlyRootFilesystem: false
+ mandatory_access_control:
+ type: apparmor
+ etcd:
+ init: runtime/default
+ etcd: runtime/default
  affinity:
  anti:
  type: