deployments: qat: add an overlay for Apparmor annotations

Some Ubuntu systems may run with Apparmor LSM policy enformements making
the default QAT daemonset to fail with (un)bind errors.

This commit adds a sample kustomize overlay to deploy the QAT daemonset with
Apparmor uconfined policy.

Fixes: #381

Signed-off-by: Mikko Ylinen <[email protected]>

Author: mythi

deployments/qat_plugin/overlays/apparmor_unconfined/add-apparmor-unconfined-intel-qat.yaml

@@ -0,0 +1,9 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: intel-qat-plugin
+spec:
+  template:
+    metadata:
+      annotations:
+        container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined

deployments/qat_plugin/overlays/apparmor_unconfined/kustomization.yaml

@@ -0,0 +1,4 @@
+bases:
+  - ../../base
+patches:
+- add-apparmor-unconfined-intel-qat.yaml