Merge pull request #1 from dotbalo/hello-apparmor-upgrade

Update the configuration location of appArmorProfile
kubernetes · Jun 20, 2024 · 565d12d · 565d12d
2 parents 052ff22 + 70ede28
commit 565d12d
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/content/zh-cn/examples/pods/security/hello-apparmor.yaml b/content/zh-cn/examples/pods/security/hello-apparmor.yaml
@@ -2,11 +2,11 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: hello-apparmor
-  annotations:
-    # 告知 Kubernetes 去应用 AppArmor 配置 "k8s-apparmor-example-deny-write"。
-    # 请注意，如果节点上运行的 Kubernetes 不是 1.4 或更高版本，此注解将被忽略。
-    container.apparmor.security.beta.kubernetes.io/hello: localhost/k8s-apparmor-example-deny-write
 spec:
+  securityContext:
+    appArmorProfile:
+      type: Localhost
+      localhostProfile: k8s-apparmor-example-deny-write
   containers:
   - name: hello
     image: busybox:1.28