kubernetes/pkg/security/apparmor/validate.go

var isDisabledBuild …

type Validator …

// NewValidator is in order to find AppArmor FS
func NewValidator() Validator { … }

type validator …

func (v *validator) Validate(pod *v1.Pod) error { … }

// ValidateHost verifies that the host and runtime is capable of enforcing AppArmor profiles.
// Note, this is intentionally only check the host at kubelet startup and never re-evaluates the host
// as the expectation is that the kubelet restart will be needed to enable or disable AppArmor support.
func (v *validator) ValidateHost() error { … }

// validateHost verifies that the host and runtime is capable of enforcing AppArmor profiles.
func validateHost() error { … }