kubernetes-sigs / cri-tools

CLI and validation tools for Kubelet Container Runtime Interface (CRI) .

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Migrate off deprecated AppArmorProfile CRI API

roman-kiselenko opened this issue · comments

What would you like to be added:

The CRI API LinuxContainerSecurityContext field apparmor_profile has been deprecated in favor of the newer structured apparmor field:

https://github.com/kubernetes/kubernetes/blob/364ef335dbd49bfa3d66dbc606c642481d283851/staging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.proto#L926-L934

Why is this needed:

The following test might be improved in order to cover new field as well.

if apparmor.IsEnabled() {
BeforeEach(func() {
rc = f.CRIClient.CRIRuntimeClient
ic = f.CRIClient.CRIImageClient
Expect(loadTestProfiles()).NotTo(HaveOccurred())
})

/assign