
Removes stale DHCP and L3 namespaces. The cron runs once in 12 hours. Network namespace cleanup is implemented as a daemonset as Kubernetes does not have a cronjob that works like daemonset-cronjob. Network namespace cleanup should run on all nodes where DHCP and L3 agents run. Change-Id: I7525e493067669026e0d57889a3e3238a2bd1308
18 lines
642 B
YAML
18 lines
642 B
YAML
pod:
|
|
mandatory_access_control:
|
|
type: apparmor
|
|
neutron-dhcp-agent-default:
|
|
neutron-dhcp-agent-default: runtime/default
|
|
neutron-l3-agent-default:
|
|
neutron-l3-agent-default: runtime/default
|
|
neutron-lb-agent-default:
|
|
neutron-lb-agent-default: runtime/default
|
|
neutron-metadata-agent-default:
|
|
neutron-metadata-agent-default: runtime/default
|
|
neutron-ovs-agent-default:
|
|
neutron-ovs-agent-default: runtime/default
|
|
neutron-sriov-agent-default:
|
|
neutron-sriov-agent-default: runtime/default
|
|
neutron-netns-cleanup-cron-default:
|
|
neutron-netns-cleanup-cron-default: runtime/default
|