---
pod:
  mandatory_access_control:
    type: apparmor
    placement-api:
      placement-api: runtime/default
      init: runtime/default
    placement-db-migrate:
      init: runtime/default
      placement-mysql-migration: runtime/default

manifests:
  job_db_migrate: true
...