Bumping k8s dependencies to 1.13
This commit is contained in:
50
vendor/k8s.io/kubernetes/test/images/apparmor-loader/example-daemon.yaml
generated
vendored
Normal file
50
vendor/k8s.io/kubernetes/test/images/apparmor-loader/example-daemon.yaml
generated
vendored
Normal file
@@ -0,0 +1,50 @@
|
||||
# The example DaemonSet demonstrating how the profile loader can be deployed onto a cluster to
|
||||
# automatically load AppArmor profiles from a ConfigMap.
|
||||
|
||||
apiVersion: extensions/v1beta1
|
||||
kind: DaemonSet
|
||||
metadata:
|
||||
name: apparmor-loader
|
||||
# Namespace must match that of the ConfigMap.
|
||||
namespace: apparmor
|
||||
spec:
|
||||
template:
|
||||
metadata:
|
||||
name: apparmor-loader
|
||||
labels:
|
||||
daemon: apparmor-loader
|
||||
spec:
|
||||
containers:
|
||||
- name: apparmor-loader
|
||||
image: google/apparmor-loader:latest
|
||||
args:
|
||||
# Tell the loader to pull the /profiles directory every 30 seconds.
|
||||
- -poll
|
||||
- 30s
|
||||
- /profiles
|
||||
securityContext:
|
||||
# The loader requires root permissions to actually load the profiles.
|
||||
privileged: true
|
||||
volumeMounts:
|
||||
- name: sys
|
||||
mountPath: /sys
|
||||
readOnly: true
|
||||
- name: apparmor-includes
|
||||
mountPath: /etc/apparmor.d
|
||||
readOnly: true
|
||||
- name: profiles
|
||||
mountPath: /profiles
|
||||
readOnly: true
|
||||
volumes:
|
||||
# The /sys directory must be mounted to interact with the AppArmor module.
|
||||
- name: sys
|
||||
hostPath:
|
||||
path: /sys
|
||||
# The /etc/apparmor.d directory is required for most apparmor include templates.
|
||||
- name: apparmor-includes
|
||||
hostPath:
|
||||
path: /etc/apparmor.d
|
||||
# Map in the profile data.
|
||||
- name: profiles
|
||||
configMap:
|
||||
name: apparmor-profiles
|
||||
Reference in New Issue
Block a user