Page MenuHomePhabricator

Set AppArmor profile via SecurityContext rather than annotations (k8s >=1.30)
Open, LowPublic

Description

With Kubernetes 1.30+, AppArmor profiles can now be configured through fields on the PodSecurityContext and container SecurityContext. The beta AppArmor annotations are deprecated, and AppArmor status is no longer included in the node ready condition. (https://github.com/kubernetes/kubernetes/pull/123435)

See also: T273507: PodSecurityPolicies will be deprecated with Kubernetes 1.21