)]}'
{"helm-toolkit/templates/snippets/_kubernetes_apparmor_configmap.tpl":[{"author":{"_account_id":29254,"name":"Luna Das","email":"luna.das@att.com","username":"ld366r"},"change_message_id":"b4d52519e4a00015669c20bf9e09536fa4c9de1c","unresolved":false,"context_lines":[{"line_number":60,"context_line":"  name: {{ $mapName }}"},{"line_number":61,"context_line":"  namespace: {{ $envAll.Release.Namespace }}"},{"line_number":62,"context_line":"data:"},{"line_number":63,"context_line":"{{ $envAll.Values.conf.apparmor_profiles | toYaml | indent 2 }}"},{"line_number":64,"context_line":"{{- end }}"},{"line_number":65,"context_line":"{{- end }}"},{"line_number":66,"context_line":"{{- end }}"}],"source_content_type":"text/x-smarty","patch_set":50,"id":"9fdfeff1_f7cd8230","line":63,"updated":"2019-03-05 13:57:23.000000000","message":"it expects apparmor_profiles will be provided under the conf section , but from the abstract section I got the impression that it should be a part of mandatory_access_control section under the pod, correct me if I am wrong .","commit_id":"323f588d597c47a21f5e70d7fb205c97a52a024a"},{"author":{"_account_id":22636,"name":"Cliff Parsons","email":"cliffhparsons@aol.com","username":"cliffparsons"},"change_message_id":"6bd57d8e2e9dfa7a58b000fa73b30d39d3951178","unresolved":false,"context_lines":[{"line_number":60,"context_line":"  name: {{ $mapName }}"},{"line_number":61,"context_line":"  namespace: {{ $envAll.Release.Namespace }}"},{"line_number":62,"context_line":"data:"},{"line_number":63,"context_line":"{{ $envAll.Values.conf.apparmor_profiles | toYaml | indent 2 }}"},{"line_number":64,"context_line":"{{- end }}"},{"line_number":65,"context_line":"{{- end }}"},{"line_number":66,"context_line":"{{- end }}"}],"source_content_type":"text/x-smarty","patch_set":50,"id":"5fc1f717_d1ee6887","line":63,"in_reply_to":"9fdfeff1_f7cd8230","updated":"2019-03-06 19:45:59.000000000","message":"The mandatory_access_control section is for enabling MAC, specifying the type of MAC and for providing the annotations (in this case AppArmor annotations). The conf.apparmor_profiles section is for specifying any custom profiles that need to be loaded for this component/chart, which may be referenced in the previously mentioned annotations.","commit_id":"323f588d597c47a21f5e70d7fb205c97a52a024a"}],"helm-toolkit/templates/snippets/_kubernetes_apparmor_loader_init_container.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"ae1db822c22b0b41943906538d4dc9d99daaf717","unresolved":false,"context_lines":[{"line_number":43,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":44,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":45,"context_line":"- name: apparmor-loader"},{"line_number":46,"context_line":"  image: google/apparmor-loader:latest"},{"line_number":47,"context_line":"  args:"},{"line_number":48,"context_line":"    - /profiles"},{"line_number":49,"context_line":"  securityContext:"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_def3f26c","line":46,"range":{"start_line":46,"start_character":9,"end_line":46,"end_character":38},"updated":"2018-10-17 13:26:52.000000000","message":"this should be specified in the image section of the values.yaml and use the image macro to insert.","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"06263aa9c45dc665763a1f889a74465b20c6c4f1","unresolved":false,"context_lines":[{"line_number":43,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":44,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":45,"context_line":"- name: apparmor-loader"},{"line_number":46,"context_line":"  image: google/apparmor-loader:latest"},{"line_number":47,"context_line":"  args:"},{"line_number":48,"context_line":"    - /profiles"},{"line_number":49,"context_line":"  securityContext:"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_3492454c","line":46,"range":{"start_line":46,"start_character":9,"end_line":46,"end_character":38},"in_reply_to":"3f79a3b5_def3f26c","updated":"2018-10-17 15:42:23.000000000","message":"Done","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"ae1db822c22b0b41943906538d4dc9d99daaf717","unresolved":false,"context_lines":[{"line_number":46,"context_line":"  image: google/apparmor-loader:latest"},{"line_number":47,"context_line":"  args:"},{"line_number":48,"context_line":"    - /profiles"},{"line_number":49,"context_line":"  securityContext:"},{"line_number":50,"context_line":"    privileged: true"},{"line_number":51,"context_line":"  volumeMounts:"},{"line_number":52,"context_line":"    - name: sys"},{"line_number":53,"context_line":"      mountPath: /sys"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_9e933a00","line":50,"range":{"start_line":49,"start_character":0,"end_line":50,"end_character":20},"updated":"2018-10-17 13:26:52.000000000","message":"do the privileges require to be this open?","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"06263aa9c45dc665763a1f889a74465b20c6c4f1","unresolved":false,"context_lines":[{"line_number":46,"context_line":"  image: google/apparmor-loader:latest"},{"line_number":47,"context_line":"  args:"},{"line_number":48,"context_line":"    - /profiles"},{"line_number":49,"context_line":"  securityContext:"},{"line_number":50,"context_line":"    privileged: true"},{"line_number":51,"context_line":"  volumeMounts:"},{"line_number":52,"context_line":"    - name: sys"},{"line_number":53,"context_line":"      mountPath: /sys"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_6f26aa6a","line":50,"range":{"start_line":49,"start_character":0,"end_line":50,"end_character":20},"in_reply_to":"3f79a3b5_9e933a00","updated":"2018-10-17 15:42:23.000000000","message":"Unfortunately, yes. per POC\u0027s comment: https://review.openstack.org/#/c/590501/39/memcached/templates/daemonset.yaml@23.  Applying the default profile (instead of unconfined) cause this to fail.","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"9d8c20f51d640e180aeb9678d323b7714ae575c6","unresolved":false,"context_lines":[{"line_number":21,"context_line":"  images:"},{"line_number":22,"context_line":"    tags:"},{"line_number":23,"context_line":"      apparmor_loader: my-repo.io/apparmor-loader:1.0.0"},{"line_number":24,"context_line":"  manifests:"},{"line_number":25,"context_line":"    configmap_apparmor: true"},{"line_number":26,"context_line":"usage: |"},{"line_number":27,"context_line":"  {{ dict \"envAll\" . | include \"helm-toolkit.snippets.kubernetes_apparmor_loader_init_container\" }}"}],"source_content_type":"text/x-smarty","patch_set":43,"id":"9fdfeff1_6094898c","line":24,"range":{"start_line":24,"start_character":2,"end_line":24,"end_character":12},"updated":"2019-01-21 15:16:11.000000000","message":"this is not a manifest, but a yaml snippet - a more appropriate place for this would be to be driven by the \u0027pod\u0027 section.","commit_id":"52797f8330ed8336b26186bf21fceefd001d4d8f"},{"author":{"_account_id":22636,"name":"Cliff Parsons","email":"cliffhparsons@aol.com","username":"cliffparsons"},"change_message_id":"a7a32a7950228b520b6a318c1674a10863c716b8","unresolved":false,"context_lines":[{"line_number":21,"context_line":"  images:"},{"line_number":22,"context_line":"    tags:"},{"line_number":23,"context_line":"      apparmor_loader: my-repo.io/apparmor-loader:1.0.0"},{"line_number":24,"context_line":"  manifests:"},{"line_number":25,"context_line":"    configmap_apparmor: true"},{"line_number":26,"context_line":"usage: |"},{"line_number":27,"context_line":"  {{ dict \"envAll\" . | include \"helm-toolkit.snippets.kubernetes_apparmor_loader_init_container\" }}"}],"source_content_type":"text/x-smarty","patch_set":43,"id":"9fdfeff1_207d21b1","line":24,"range":{"start_line":24,"start_character":2,"end_line":24,"end_character":12},"in_reply_to":"9fdfeff1_6094898c","updated":"2019-01-21 15:44:42.000000000","message":"Yes, this can be integrated nicely with the Values.pod.mandatory_access_control section. Will work on that.","commit_id":"52797f8330ed8336b26186bf21fceefd001d4d8f"}],"helm-toolkit/templates/snippets/_kubernetes_apparmor_profile_loader.tpl":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"aebba77888ae611bb78c752b3d9175ebbd7215e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"3f79a3b5_5cbc8a06","updated":"2018-10-09 03:28:26.000000000","message":"should put in documentation for this in future patchset.","commit_id":"6841dff0b34f9e403119fb123832aebadce6f283"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"db9ba5cecf6b8624cb616ce0bfb51045c8a8439a","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"{{/*"},{"line_number":18,"context_line":"abstract: |"},{"line_number":19,"context_line":"  Renders the volumes used by the apparmor loader."},{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  NONE"},{"line_number":22,"context_line":"usage: |"},{"line_number":23,"context_line":"  {{ dict \"envAll\" . \"component\" \"keystone\" | include \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" }}"},{"line_number":24,"context_line":"return: |"},{"line_number":25,"context_line":"- name: sys"},{"line_number":26,"context_line":"  hostPath:"},{"line_number":27,"context_line":"    path: /sys"},{"line_number":28,"context_line":"- name: includes"},{"line_number":29,"context_line":"  hostPath:"},{"line_number":30,"context_line":"    path: /etc/apparmor.d"},{"line_number":31,"context_line":"- name: profiles"},{"line_number":32,"context_line":"  configMap:"},{"line_number":33,"context_line":"    name: RELEASENAME-keystone-apparmor"},{"line_number":34,"context_line":"    defaultMode: 0555"},{"line_number":35,"context_line":"*/}}"},{"line_number":36,"context_line":"{{- define \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" -}}"},{"line_number":37,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":38,"context_line":"{{- $component :\u003d index . \"component\" -}}"},{"line_number":39,"context_line":"{{- $configName :\u003d printf \"%s-%s-%s\" $envAll.Release.Name $component \"apparmor\"  }}"},{"line_number":40,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":41,"context_line":"- name: sys"},{"line_number":42,"context_line":"  hostPath:"},{"line_number":43,"context_line":"    path: /sys"},{"line_number":44,"context_line":"- name: includes"},{"line_number":45,"context_line":"  hostPath:"},{"line_number":46,"context_line":"    path: /etc/apparmor.d"},{"line_number":47,"context_line":"- name: profiles"},{"line_number":48,"context_line":"  configMap:"},{"line_number":49,"context_line":"    name: {{ $configName | quote }}"},{"line_number":50,"context_line":"    defaultMode: 0555"},{"line_number":51,"context_line":"{{- end }}"},{"line_number":52,"context_line":"{{- end }}"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"{{/*"},{"line_number":55,"context_line":"abstract: |"}],"source_content_type":"text/x-smarty","patch_set":20,"id":"3f79a3b5_f6d70abf","line":52,"range":{"start_line":17,"start_character":0,"end_line":52,"end_character":10},"updated":"2018-10-16 17:53:14.000000000","message":"this function is not contained in this file?","commit_id":"f5b19f4d4f6129d088eb941cc30f54580b691131"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"167e35396154e7e0157e678f911cfdbad75c0c1d","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"{{/*"},{"line_number":18,"context_line":"abstract: |"},{"line_number":19,"context_line":"  Renders the volumes used by the apparmor loader."},{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  NONE"},{"line_number":22,"context_line":"usage: |"},{"line_number":23,"context_line":"  {{ dict \"envAll\" . \"component\" \"keystone\" | include \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" }}"},{"line_number":24,"context_line":"return: |"},{"line_number":25,"context_line":"- name: sys"},{"line_number":26,"context_line":"  hostPath:"},{"line_number":27,"context_line":"    path: /sys"},{"line_number":28,"context_line":"- name: includes"},{"line_number":29,"context_line":"  hostPath:"},{"line_number":30,"context_line":"    path: /etc/apparmor.d"},{"line_number":31,"context_line":"- name: profiles"},{"line_number":32,"context_line":"  configMap:"},{"line_number":33,"context_line":"    name: RELEASENAME-keystone-apparmor"},{"line_number":34,"context_line":"    defaultMode: 0555"},{"line_number":35,"context_line":"*/}}"},{"line_number":36,"context_line":"{{- define \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" -}}"},{"line_number":37,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":38,"context_line":"{{- $component :\u003d index . \"component\" -}}"},{"line_number":39,"context_line":"{{- $configName :\u003d printf \"%s-%s-%s\" $envAll.Release.Name $component \"apparmor\"  }}"},{"line_number":40,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":41,"context_line":"- name: sys"},{"line_number":42,"context_line":"  hostPath:"},{"line_number":43,"context_line":"    path: /sys"},{"line_number":44,"context_line":"- name: includes"},{"line_number":45,"context_line":"  hostPath:"},{"line_number":46,"context_line":"    path: /etc/apparmor.d"},{"line_number":47,"context_line":"- name: profiles"},{"line_number":48,"context_line":"  configMap:"},{"line_number":49,"context_line":"    name: {{ $configName | quote }}"},{"line_number":50,"context_line":"    defaultMode: 0555"},{"line_number":51,"context_line":"{{- end }}"},{"line_number":52,"context_line":"{{- end }}"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"{{/*"},{"line_number":55,"context_line":"abstract: |"}],"source_content_type":"text/x-smarty","patch_set":20,"id":"3f79a3b5_aee4d20b","line":52,"range":{"start_line":17,"start_character":0,"end_line":52,"end_character":10},"in_reply_to":"3f79a3b5_76921afe","updated":"2018-10-17 03:28:46.000000000","message":"Done","commit_id":"f5b19f4d4f6129d088eb941cc30f54580b691131"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"a07039b8446699d97d60471f0090ff5ebef43b1d","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"{{/*"},{"line_number":18,"context_line":"abstract: |"},{"line_number":19,"context_line":"  Renders the volumes used by the apparmor loader."},{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  NONE"},{"line_number":22,"context_line":"usage: |"},{"line_number":23,"context_line":"  {{ dict \"envAll\" . \"component\" \"keystone\" | include \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" }}"},{"line_number":24,"context_line":"return: |"},{"line_number":25,"context_line":"- name: sys"},{"line_number":26,"context_line":"  hostPath:"},{"line_number":27,"context_line":"    path: /sys"},{"line_number":28,"context_line":"- name: includes"},{"line_number":29,"context_line":"  hostPath:"},{"line_number":30,"context_line":"    path: /etc/apparmor.d"},{"line_number":31,"context_line":"- name: profiles"},{"line_number":32,"context_line":"  configMap:"},{"line_number":33,"context_line":"    name: RELEASENAME-keystone-apparmor"},{"line_number":34,"context_line":"    defaultMode: 0555"},{"line_number":35,"context_line":"*/}}"},{"line_number":36,"context_line":"{{- define \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" -}}"},{"line_number":37,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":38,"context_line":"{{- $component :\u003d index . \"component\" -}}"},{"line_number":39,"context_line":"{{- $configName :\u003d printf \"%s-%s-%s\" $envAll.Release.Name $component \"apparmor\"  }}"},{"line_number":40,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":41,"context_line":"- name: sys"},{"line_number":42,"context_line":"  hostPath:"},{"line_number":43,"context_line":"    path: /sys"},{"line_number":44,"context_line":"- name: includes"},{"line_number":45,"context_line":"  hostPath:"},{"line_number":46,"context_line":"    path: /etc/apparmor.d"},{"line_number":47,"context_line":"- name: profiles"},{"line_number":48,"context_line":"  configMap:"},{"line_number":49,"context_line":"    name: {{ $configName | quote }}"},{"line_number":50,"context_line":"    defaultMode: 0555"},{"line_number":51,"context_line":"{{- end }}"},{"line_number":52,"context_line":"{{- end }}"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"{{/*"},{"line_number":55,"context_line":"abstract: |"}],"source_content_type":"text/x-smarty","patch_set":20,"id":"3f79a3b5_76921afe","line":52,"range":{"start_line":17,"start_character":0,"end_line":52,"end_character":10},"in_reply_to":"3f79a3b5_f6d70abf","updated":"2018-10-16 17:54:51.000000000","message":"whoops - sorry i see it now, as below can we have each function in its own file in the same way as used in every other part of htk.","commit_id":"f5b19f4d4f6129d088eb941cc30f54580b691131"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"db9ba5cecf6b8624cb616ce0bfb51045c8a8439a","unresolved":false,"context_lines":[{"line_number":76,"context_line":"        mountPath: /profiles"},{"line_number":77,"context_line":"        readOnly: true"},{"line_number":78,"context_line":"*/}}"},{"line_number":79,"context_line":"{{- define \"helm-toolkit.snippets.kubernetes_apparmor_loader_init_container\" -}}"},{"line_number":80,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":81,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":82,"context_line":"- name: apparmor-loader"}],"source_content_type":"text/x-smarty","patch_set":20,"id":"3f79a3b5_76c45a0e","line":79,"range":{"start_line":79,"start_character":12,"end_line":79,"end_character":75},"updated":"2018-10-16 17:53:14.000000000","message":"the file name/path should match the function name.","commit_id":"f5b19f4d4f6129d088eb941cc30f54580b691131"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"167e35396154e7e0157e678f911cfdbad75c0c1d","unresolved":false,"context_lines":[{"line_number":76,"context_line":"        mountPath: /profiles"},{"line_number":77,"context_line":"        readOnly: true"},{"line_number":78,"context_line":"*/}}"},{"line_number":79,"context_line":"{{- define \"helm-toolkit.snippets.kubernetes_apparmor_loader_init_container\" -}}"},{"line_number":80,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":81,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":82,"context_line":"- name: apparmor-loader"}],"source_content_type":"text/x-smarty","patch_set":20,"id":"3f79a3b5_4e873e13","line":79,"range":{"start_line":79,"start_character":12,"end_line":79,"end_character":75},"in_reply_to":"3f79a3b5_76c45a0e","updated":"2018-10-17 03:28:46.000000000","message":"Done","commit_id":"f5b19f4d4f6129d088eb941cc30f54580b691131"}],"helm-toolkit/templates/snippets/_kubernetes_apparmor_volumes.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"ae1db822c22b0b41943906538d4dc9d99daaf717","unresolved":false,"context_lines":[{"line_number":18,"context_line":"abstract: |"},{"line_number":19,"context_line":"  Renders the volumes used by the apparmor loader."},{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  NONE"},{"line_number":22,"context_line":"usage: |"},{"line_number":23,"context_line":"  {{ dict \"envAll\" . \"component\" \"keystone\" | include \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" }}"},{"line_number":24,"context_line":"return: |"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_fe6fcef8","line":21,"range":{"start_line":21,"start_character":0,"end_line":21,"end_character":6},"updated":"2018-10-17 13:26:52.000000000","message":"there needs to be some input values to return the following.","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"06263aa9c45dc665763a1f889a74465b20c6c4f1","unresolved":false,"context_lines":[{"line_number":18,"context_line":"abstract: |"},{"line_number":19,"context_line":"  Renders the volumes used by the apparmor loader."},{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  NONE"},{"line_number":22,"context_line":"usage: |"},{"line_number":23,"context_line":"  {{ dict \"envAll\" . \"component\" \"keystone\" | include \"helm-toolkit.snippets.kubernetes_apparmor_volumes\" }}"},{"line_number":24,"context_line":"return: |"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_b47975c7","line":21,"range":{"start_line":21,"start_character":0,"end_line":21,"end_character":6},"in_reply_to":"3f79a3b5_fe6fcef8","updated":"2018-10-17 15:42:23.000000000","message":"this should just be:\n   \n   manifests:\n     configmap_apparmor: true","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"ae1db822c22b0b41943906538d4dc9d99daaf717","unresolved":false,"context_lines":[{"line_number":38,"context_line":"{{- $component :\u003d index . \"component\" -}}"},{"line_number":39,"context_line":"{{- $configName :\u003d printf \"%s-%s-%s\" $envAll.Release.Name $component \"apparmor\"  }}"},{"line_number":40,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":41,"context_line":"- name: sys"},{"line_number":42,"context_line":"  hostPath:"},{"line_number":43,"context_line":"    path: /sys"},{"line_number":44,"context_line":"- name: includes"},{"line_number":45,"context_line":"  hostPath:"},{"line_number":46,"context_line":"    path: /etc/apparmor.d"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_7e5c1e58","line":43,"range":{"start_line":41,"start_character":0,"end_line":43,"end_character":14},"updated":"2018-10-17 13:26:52.000000000","message":"how would this account for cases where \u0027sys\u0027 is specified by the pod?","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"06263aa9c45dc665763a1f889a74465b20c6c4f1","unresolved":false,"context_lines":[{"line_number":38,"context_line":"{{- $component :\u003d index . \"component\" -}}"},{"line_number":39,"context_line":"{{- $configName :\u003d printf \"%s-%s-%s\" $envAll.Release.Name $component \"apparmor\"  }}"},{"line_number":40,"context_line":"{{- if $envAll.Values.manifests.configmap_apparmor }}"},{"line_number":41,"context_line":"- name: sys"},{"line_number":42,"context_line":"  hostPath:"},{"line_number":43,"context_line":"    path: /sys"},{"line_number":44,"context_line":"- name: includes"},{"line_number":45,"context_line":"  hostPath:"},{"line_number":46,"context_line":"    path: /etc/apparmor.d"}],"source_content_type":"text/x-smarty","patch_set":22,"id":"3f79a3b5_748e7dd8","line":43,"range":{"start_line":41,"start_character":0,"end_line":43,"end_character":14},"in_reply_to":"3f79a3b5_7e5c1e58","updated":"2018-10-17 15:42:23.000000000","message":"Adding a flag there to toggle this snippet","commit_id":"ad33c9ddf63286cf70fa05f4c3aa874529416551"}],"memcached/templates/configmap-apparmor.yaml":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"f00ceab8588952b0f3cbc9ab1cc2ba7e6e6f1824","unresolved":false,"context_lines":[{"line_number":24,"context_line":"  name: {{ $configName }}"},{"line_number":25,"context_line":"  namespace: {{ $envAll.Release.Namespace }}"},{"line_number":26,"context_line":"data:"},{"line_number":27,"context_line":"  my-apparmor-v1.profile: |-"},{"line_number":28,"context_line":"    #include \u003ctunables/global\u003e"},{"line_number":29,"context_line":"    profile my-apparmor-v1 flags\u003d(attach_disconnected,mediate_deleted) {"},{"line_number":30,"context_line":"      #include \u003cabstractions/base\u003e"},{"line_number":31,"context_line":"      network inet tcp,"},{"line_number":32,"context_line":"      network inet udp,"},{"line_number":33,"context_line":"      network inet icmp,"},{"line_number":34,"context_line":"      deny network raw,"}],"source_content_type":"text/x-yaml","patch_set":8,"id":"3f79a3b5_ad6b2aee","line":31,"range":{"start_line":27,"start_character":0,"end_line":31,"end_character":23},"updated":"2018-10-09 07:55:55.000000000","message":"should we move this to values.yaml and make the whole thing configurable?","commit_id":"f921e20ab91e8221a35cd4ba952cca1f2b8b73b5"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"bdea290810697e7269d90632496822c19581f83f","unresolved":false,"context_lines":[{"line_number":24,"context_line":"  name: {{ $configName }}"},{"line_number":25,"context_line":"  namespace: {{ $envAll.Release.Namespace }}"},{"line_number":26,"context_line":"data:"},{"line_number":27,"context_line":"  my-apparmor-v1.profile: |-"},{"line_number":28,"context_line":"    #include \u003ctunables/global\u003e"},{"line_number":29,"context_line":"    profile my-apparmor-v1 flags\u003d(attach_disconnected,mediate_deleted) {"},{"line_number":30,"context_line":"      #include \u003cabstractions/base\u003e"},{"line_number":31,"context_line":"      network inet tcp,"},{"line_number":32,"context_line":"      network inet udp,"},{"line_number":33,"context_line":"      network inet icmp,"},{"line_number":34,"context_line":"      deny network raw,"}],"source_content_type":"text/x-yaml","patch_set":8,"id":"3f79a3b5_8b5bacf7","line":31,"range":{"start_line":27,"start_character":0,"end_line":31,"end_character":23},"in_reply_to":"3f79a3b5_8b716cae","updated":"2018-10-09 15:19:19.000000000","message":"I agree - let\u0027s get the gate to pass first, and then we can polish this.","commit_id":"f921e20ab91e8221a35cd4ba952cca1f2b8b73b5"},{"author":{"_account_id":22636,"name":"Cliff Parsons","email":"cliffhparsons@aol.com","username":"cliffparsons"},"change_message_id":"f633ed49278bc131f14c837b6fdf1869bcaea38d","unresolved":false,"context_lines":[{"line_number":24,"context_line":"  name: {{ $configName }}"},{"line_number":25,"context_line":"  namespace: {{ $envAll.Release.Namespace }}"},{"line_number":26,"context_line":"data:"},{"line_number":27,"context_line":"  my-apparmor-v1.profile: |-"},{"line_number":28,"context_line":"    #include \u003ctunables/global\u003e"},{"line_number":29,"context_line":"    profile my-apparmor-v1 flags\u003d(attach_disconnected,mediate_deleted) {"},{"line_number":30,"context_line":"      #include \u003cabstractions/base\u003e"},{"line_number":31,"context_line":"      network inet tcp,"},{"line_number":32,"context_line":"      network inet udp,"},{"line_number":33,"context_line":"      network inet icmp,"},{"line_number":34,"context_line":"      deny network raw,"}],"source_content_type":"text/x-yaml","patch_set":8,"id":"3f79a3b5_8b716cae","line":31,"range":{"start_line":27,"start_character":0,"end_line":31,"end_character":23},"in_reply_to":"3f79a3b5_ad6b2aee","updated":"2018-10-09 15:13:25.000000000","message":"I don\u0027t see why not - wouldn\u0027t that be more flexible to do it that way?\n\nconf:\n  apparmor_profile:\n    my-apparmor-v1.profile: |-\n      ...","commit_id":"f921e20ab91e8221a35cd4ba952cca1f2b8b73b5"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"bee40edc479e5a7aa44580aafe798082e6a2e775","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"{{- if hasKey .Values.pod \"mandatory_access_control\" -}}"},{"line_number":18,"context_line":"{{- if hasKey .Values.pod.mandatory_access_control \"type\" -}}"},{"line_number":19,"context_line":"{{- if hasKey .Values.pod.mandatory_access_control \"configmap_apparmor\" -}}"},{"line_number":20,"context_line":"{{- if eq .Values.pod.mandatory_access_control.type \"apparmor\" -}}"},{"line_number":21,"context_line":"{{- if .Values.pod.mandatory_access_control.configmap_apparmor }}"},{"line_number":22,"context_line":"{{- $envAll :\u003d . }}"},{"line_number":23,"context_line":"{{- $configName :\u003d printf \"%s-%s\" $envAll.Release.Name \"memcached-apparmor\"  }}"},{"line_number":24,"context_line":"---"}],"source_content_type":"text/x-yaml","patch_set":44,"id":"9fdfeff1_31ac8c8b","line":21,"range":{"start_line":17,"start_character":0,"end_line":21,"end_character":65},"updated":"2019-01-21 23:37:01.000000000","message":"Are these if\u0027s going to be replicated to all the configmap-apparmors for all the charts - if so, should we refactor this to another HTK snippet?","commit_id":"ac2ed453b4763b773de65888ff7bcb911c862c0d"},{"author":{"_account_id":22636,"name":"Cliff Parsons","email":"cliffhparsons@aol.com","username":"cliffparsons"},"change_message_id":"b86acaf950d1da2787b053e0aaa4214b7ff70359","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"{{- if hasKey .Values.pod \"mandatory_access_control\" -}}"},{"line_number":18,"context_line":"{{- if hasKey .Values.pod.mandatory_access_control \"type\" -}}"},{"line_number":19,"context_line":"{{- if hasKey .Values.pod.mandatory_access_control \"configmap_apparmor\" -}}"},{"line_number":20,"context_line":"{{- if eq .Values.pod.mandatory_access_control.type \"apparmor\" -}}"},{"line_number":21,"context_line":"{{- if .Values.pod.mandatory_access_control.configmap_apparmor }}"},{"line_number":22,"context_line":"{{- $envAll :\u003d . }}"},{"line_number":23,"context_line":"{{- $configName :\u003d printf \"%s-%s\" $envAll.Release.Name \"memcached-apparmor\"  }}"},{"line_number":24,"context_line":"---"}],"source_content_type":"text/x-yaml","patch_set":44,"id":"9fdfeff1_657420ff","line":21,"range":{"start_line":17,"start_character":0,"end_line":21,"end_character":65},"in_reply_to":"9fdfeff1_31ac8c8b","updated":"2019-01-28 16:30:56.000000000","message":"Yep, good suggestion. Implemented in the next patch set.","commit_id":"ac2ed453b4763b773de65888ff7bcb911c862c0d"}],"memcached/templates/deployment.yaml":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"aebba77888ae611bb78c752b3d9175ebbd7215e5","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"{{- $rcControllerName :\u003d printf \"%s-%s\" $envAll.Release.Name \"memcached\"  }}"},{"line_number":21,"context_line":"{{- $configMapBinName :\u003d printf \"%s-%s\" $envAll.Release.Name \"memcached-bin\"  }}"},{"line_number":22,"context_line":"{{- $configMapApparmprName :\u003d printf \"%s-%s\" $envAll.Release.Name \"memcached-apparmor\" -}}"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"{{ tuple $envAll \"memcached\" $rcControllerName | include \"helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount\" }}"},{"line_number":25,"context_line":"---"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_5cd32a64","line":22,"range":{"start_line":22,"start_character":0,"end_line":22,"end_character":90},"updated":"2018-10-09 03:28:26.000000000","message":"this will be removed.","commit_id":"6841dff0b34f9e403119fb123832aebadce6f283"}],"tools/deployment/developer/common/046-memcached.sh":[{"author":{"_account_id":22636,"name":"Cliff Parsons","email":"cliffhparsons@aol.com","username":"cliffparsons"},"change_message_id":"f425dd97d3faf0f61b1333865d309c1113160e85","unresolved":false,"context_lines":[{"line_number":46,"context_line":""},{"line_number":47,"context_line":"# Run a test"},{"line_number":48,"context_line":"POD\u003d$(kubectl --namespace\u003dosh-infra get pod | grep memcached | awk \u0027{print $1}\u0027)"},{"line_number":49,"context_line":"RESULT\u003d$(kubectl --namespace\u003dosh-infra exec $POD -- cat /proc/1/attr/current)"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"echo $RESULT"}],"source_content_type":"text/x-sh","patch_set":11,"id":"3f79a3b5_e07fd6b9","line":49,"range":{"start_line":49,"start_character":62,"end_line":49,"end_character":63},"updated":"2018-10-09 20:43:47.000000000","message":"Will it always be proc ID 1? When I wrote the verification script for the other patchset, I saw lots of variation, depending on how many containers were running in the pod. It may be that a simple pod like this will always have just one process.","commit_id":"d3e4c5a1326923c1b7368d632adf07705200d054"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e7846c3ef48ec69d7d43aa6455084791692864de","unresolved":false,"context_lines":[{"line_number":46,"context_line":""},{"line_number":47,"context_line":"# Run a test"},{"line_number":48,"context_line":"POD\u003d$(kubectl --namespace\u003dosh-infra get pod | grep memcached | awk \u0027{print $1}\u0027)"},{"line_number":49,"context_line":"RESULT\u003d$(kubectl --namespace\u003dosh-infra exec $POD -- cat /proc/1/attr/current)"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"echo $RESULT"}],"source_content_type":"text/x-sh","patch_set":11,"id":"3f79a3b5_a050fe2d","line":49,"range":{"start_line":49,"start_character":62,"end_line":49,"end_character":63},"in_reply_to":"3f79a3b5_e07fd6b9","updated":"2018-10-09 20:49:05.000000000","message":"No, it is not always PID 1.  It is coded to 1 because this is part of the memcached script and itsvalidation - and it should be PID 1 in this specific case. If this is a more generic script, it should use what you wrote to more intelligently determine the PID.","commit_id":"d3e4c5a1326923c1b7368d632adf07705200d054"}],"zuul.d/jobs.yaml":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"29e7f97d981d92b1107ded038b9fbd0ef11f606f","unresolved":false,"context_lines":[{"line_number":145,"context_line":"    timeout: 7200"},{"line_number":146,"context_line":"    pre-run: playbooks/osh-infra-upgrade-host.yaml"},{"line_number":147,"context_line":"    run: playbooks/osh-infra-gate-runner.yaml"},{"line_number":148,"context_line":"    # run: playbooks/osh-infra-apparmor.yaml"},{"line_number":149,"context_line":"    post-run: playbooks/osh-infra-collect-logs.yaml"},{"line_number":150,"context_line":"    nodeset: openstack-helm-single-node"},{"line_number":151,"context_line":"    vars:"}],"source_content_type":"text/x-yaml","patch_set":17,"id":"3f79a3b5_77a8118a","line":148,"range":{"start_line":148,"start_character":5,"end_line":148,"end_character":44},"updated":"2018-10-13 04:24:00.000000000","message":"will remove next PS","commit_id":"47fe824b762c4f48f518e3c1d35274e90ba7f90a"},{"author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"change_message_id":"1b76d5bda00714cde26a1a0c7d4108fce27b0ffe","unresolved":false,"context_lines":[{"line_number":154,"context_line":"        - ./tools/deployment/network-policy/140-kibana.sh"},{"line_number":155,"context_line":"        - ./tools/deployment/network-policy/901-test-networkpolicy.sh"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"- job:"},{"line_number":158,"context_line":"    name: openstack-helm-infra-apparmor"},{"line_number":159,"context_line":"    parent: openstack-helm-functional"},{"line_number":160,"context_line":"    timeout: 7200"},{"line_number":161,"context_line":"    pre-run: playbooks/osh-infra-upgrade-host.yaml"},{"line_number":162,"context_line":"    run: playbooks/osh-infra-gate-runner.yaml"},{"line_number":163,"context_line":"    post-run: playbooks/osh-infra-collect-logs.yaml"},{"line_number":164,"context_line":"    nodeset: openstack-helm-single-node"},{"line_number":165,"context_line":"    vars:"},{"line_number":166,"context_line":"      gate_scripts:"},{"line_number":167,"context_line":"        - ./tools/deployment/apparmor/000-install-packages.sh"},{"line_number":168,"context_line":"        - ./tools/deployment/apparmor/001-setup-apparmor-profiles.sh"},{"line_number":169,"context_line":"        - ./tools/deployment/apparmor/005-deploy-k8s.sh"},{"line_number":170,"context_line":"        - ./tools/deployment/apparmor/040-memcached.sh"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"- job:"},{"line_number":173,"context_line":"    name: openstack-helm-infra-openstack-support"},{"line_number":174,"context_line":"    parent: openstack-helm-infra-functional"}],"source_content_type":"text/x-yaml","patch_set":34,"id":"3f79a3b5_55cf3b53","line":171,"range":{"start_line":157,"start_character":2,"end_line":171,"end_character":0},"updated":"2018-10-24 04:00:34.000000000","message":"Job openstack-helm-functional not defined","commit_id":"f63bd9297853314abae9a36e976ea27472dcbf14"}]}