Annotations & labels

Note

The annotations and labels should be placed on the pod, not the deployment.

Annotations

Annotation	Description	Default
service.bifrost.com/name	Name of the application. Required.	N/A
service.bifrost.com/version	Version of the application. Optional.	Container image tag
environment.bifrost.com/name	Name of bifrost environment. Optional.	N/A
profile.bifrost.com/name	Name of the security profile. Required unless profile.bifrost.com/mode: “audit”.	N/A
profile.bifrost.com/mode	Mode of the security profile. One of: audit, complain, enforce.	N/A

Labels

Label	Description	Default
bifrost.com/enabled	Must be true to use bifrost. One of: "true", "false".	N/A

Default container

The container to be used by bifrost will be the first one in the pod spec. If you want to override this you can specify the well-known kubectl.kubernetes.io/default-container pod annotation.