Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhancement: Support new pod API for AppArmor profiles with Kubernetes 1.30+ #1673

Open
DelusionalOptimist opened this issue Mar 8, 2024 · 1 comment
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@DelusionalOptimist
Copy link
Member

Feature Request

Description
KubeArmor supports using AppArmor as an enforcer for protecting Kubernetes pods and nodes.
For pods/pod templates, this is done by adding the annotation container.apparmor.security.beta.kubernetes.io/<container_name>: <profile_ref> till now.

However, AppArmor support is moving to GA 🥳 in the upcoming Kubernetes v1.30 release and the annotation would be soon removed in accordance to K8s' deprecation policy.

Describe the solution you'd like
Once K8s 1.30 is released, support both the new AppArmorProfile field that's being added at pod and container level securityContext, along with the old annotation based mechanism for backward compatibility.

References

@DelusionalOptimist DelusionalOptimist added the enhancement New feature or request label Mar 8, 2024
@DelusionalOptimist DelusionalOptimist added the help wanted Extra attention is needed label May 1, 2024
@yp969803
Copy link

/assign

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants