github/intel-device-plugins-for-kubernetes
7
0
Fork 0
mirror of https://github.com/intel/intel-device-plugins-for-kubernetes.git synced 2025-06-03 03:59:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

deployments: qat: add an overlay for Apparmor annotations

Browse Source 
Some Ubuntu systems may run with Apparmor LSM policy enformements making
the default QAT daemonset to fail with (un)bind errors.

This commit adds a sample kustomize overlay to deploy the QAT daemonset with
Apparmor uconfined policy.

Fixes: #381

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
This commit is contained in:
Mikko Ylinen 2020-05-30 09:19:05 +03:00
parent fdaecd1d98
commit c8ed2bb798
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
deployments/qat_plugin/overlays/apparmor_unconfined/add-apparmor-unconfined-intel-qat.yaml Normal file
View File

@ -0,0 +1,9 @@
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: intel-qat-plugin
spec:
template:
metadata:
annotations:
container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined

4
deployments/qat_plugin/overlays/apparmor_unconfined/kustomization.yaml Normal file
View File

@ -0,0 +1,4 @@
bases:
- ../../base
patches:
- add-apparmor-unconfined-intel-qat.yaml