• Kubernetes Submit Queue's avatar
    Merge pull request #31473 from timstclair/aa-gate · cefc4c30
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue
    
    Add AppArmor feature gate
    
    Add option to disable AppArmor via a feature gate. This PR treats AppArmor as Beta, and thus depends on https://github.com/kubernetes/kubernetes/pull/31471 (I will remove `do-not-merge` once that merges).
    
    Note that disabling AppArmor means that pods with AppArmor annotations will be rejected in validation. It does not mean that the components act as though AppArmor was never implemented. This is by design, because we want to make it difficult to accidentally run a Pod with an AppArmor annotation without AppArmor protection.
    
    /cc @dchen1107
    cefc4c30
validation.go 146 KB