What is Kubernetes Pod Security Context AppArmor?

Question

Accepted Answer

**AppArmor** — Linux kernel module for process confinement.

```yaml
apiVersion: v1
kind: Pod
metadata:
  name: apparmor-pod
  annotations:
    container.apparmor.security.beta.kubernetes.io/app: localhost/custom-profile
spec:
  containers:
  - name: app
    image: nginx:latest
    securityContext:
      allowPrivilegeEscalation: false
```

```bash
aa-status
kubectl get pod apparmor-pod -o jsonpath='{.metadata.annotations}' | jq
dmesg | grep apparmor
```

**Profiles:** runtime/default, localhost/<profile>, unconfined.

DevOps: What is Kubernetes Pod Security Context AppArmor?