testing configmap

tuxerrante · Feb 1, 2023 · a6fc829 · a6fc829
1 parent 970142d
commit a6fc829
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/test/cm-kapparmor-home-profile.yml b/test/cm-kapparmor-home-profile.yml
@@ -0,0 +1,17 @@
+apiVersion: v1
+data:
+  custom.deny-write-outside-home: |-
+    profile custom.deny-write-outside-home flags=(attach_disconnected) {
+      file,       # access all filesystem
+      /home/** rw,
+      deny /bin/** w, # deny writes in all subdirectories
+      deny /etc/** w,
+      deny /usr/** w,
+    }
+kind: ConfigMap
+metadata:
+  annotations:
+    meta.helm.sh/release-name: kapparmor
+  labels:
+    app.kubernetes.io/managed-by: Helm
+  name: kapparmor-profiles