apparmor

Documentation

Index

• Constants
• func EnsureDefaultApparmorProfile() error
• func GetProfileNameFromPodAnnotations(annotations map[string]string, containerName string) string
• func IsEnabled() bool

Constants

const (
	// DefaultApparmorProfile is the name of default apparmor profile name.
	DefaultApparmorProfile = "crio-default"

	// ContainerAnnotationKeyPrefix is the prefix to an annotation key specifying a container profile.
	ContainerAnnotationKeyPrefix = "container.apparmor.security.beta.kubernetes.io/"

	// ProfileRuntimeDefault is he profile specifying the runtime default.
	ProfileRuntimeDefault = "runtime/default"
	// ProfileNamePrefix is the prefix for specifying profiles loaded on the node.
	ProfileNamePrefix = "localhost/"
)

Functions

func EnsureDefaultApparmorProfile

func EnsureDefaultApparmorProfile() error

EnsureDefaultApparmorProfile dose nothing, when build without apparmor build tag.

func GetProfileNameFromPodAnnotations

func GetProfileNameFromPodAnnotations(annotations map[string]string, containerName string) string

GetProfileNameFromPodAnnotations dose nothing, when build without apparmor build tag.

func IsEnabled

func IsEnabled() bool

IsEnabled returns false, when build without apparmor build tag.