// Checks whether app armor is required for the pod to run. AppArmor is considered required if any // non-unconfined profiles are specified. func isRequired(pod *v1.Pod) bool { … } // GetProfileName returns the name of the profile to use with the container. func GetProfile(pod *v1.Pod, container *v1.Container) *v1.AppArmorProfile { … } // getProfileFromPodAnnotations gets the AppArmor profile to use with container from // (deprecated) pod annotations. func getProfileFromPodAnnotations(annotations map[string]string, containerName string) *v1.AppArmorProfile { … }