security

func AppArmorTestPod ¶ added in v1.30.0

func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod

CreateAppArmorTestPod creates a pod that tests apparmor profile enforcement. The pod exits with an error code if the profile is incorrectly enforced. If runOnce is true the pod will exit after a single test, otherwise it will repeat the test every 1 second until failure.

func LoadAppArmorProfiles ¶

func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface)

LoadAppArmorProfiles creates apparmor-profiles ConfigMap and apparmor-loader ReplicationController.

func RunAppArmorTestPod ¶ added in v1.30.0

func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, podClient *e2epod.PodClient, runOnce bool) *v1.Pod