set profile per container

Azure · Jan 23, 2025 · e095a58 · e095a58
1 parent f1fb957
commit e095a58
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/test/integration/manifests/cilium/v1.16/cilium-agent/templates/daemonset-dualstack.yaml b/test/integration/manifests/cilium/v1.16/cilium-agent/templates/daemonset-dualstack.yaml
@@ -39,9 +39,6 @@ spec:
                 operator: In
                 values:
                 - linux
-      securityContext:
-        appArmorProfile:
-          type: Unconfined
       containers:
       - args:
         - --config-dir=/tmp/cilium/config-map
@@ -287,6 +284,8 @@ spec:
             cpu: 100m
             memory: 100Mi
         securityContext:
+          appArmorProfile: 
+            type: Unconfined
           capabilities:
             add:
             - NET_ADMIN

diff --git a/test/integration/manifests/cilium/v1.16/cilium-agent/templates/daemonset.yaml b/test/integration/manifests/cilium/v1.16/cilium-agent/templates/daemonset.yaml
@@ -39,9 +39,6 @@ spec:
                 operator: In
                 values:
                 - linux
-      securityContext:
-        appArmorProfile: 
-          type: Unconfined
       containers:
       - args:
         - --config-dir=/tmp/cilium/config-map
@@ -287,6 +284,8 @@ spec:
             cpu: 100m
             memory: 100Mi
         securityContext:
+          appArmorProfile: 
+            type: Unconfined
           capabilities:
             add:
             - NET_ADMIN