2021-05-17 22:30:18 +00:00
|
|
|
--- charts-original/templates/podsecuritypolicy.yaml
|
|
|
|
|
+++ charts/templates/podsecuritypolicy.yaml
|
2021-06-26 00:19:25 +00:00
|
|
|
@@ -6,13 +6,9 @@
|
2021-05-17 22:30:18 +00:00
|
|
|
namespace: {{ template "grafana.namespace" . }}
|
|
|
|
|
labels:
|
|
|
|
|
{{- include "grafana.labels" . | nindent 4 }}
|
|
|
|
|
- annotations:
|
|
|
|
|
- seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
|
|
|
|
|
- seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
|
|
|
|
- {{- if .Values.rbac.pspUseAppArmor }}
|
|
|
|
|
- apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
|
|
|
|
|
- apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
|
|
|
|
- {{- end }}
|
|
|
|
|
+{{- if .Values.rbac.pspAnnotations }}
|
|
|
|
|
+ annotations: {{ toYaml .Values.rbac.pspAnnotations | nindent 4 }}
|
|
|
|
|
+{{- end }}
|
|
|
|
|
spec:
|
|
|
|
|
privileged: false
|
|
|
|
|
allowPrivilegeEscalation: false
|
