const annotationKeyPod … const annotationKeyContainerPrefix … var seccompProfileRuntimeDefault … var seccompProfileUnconfined … // the Localhost seccomp profile func seccompProfileLocalhost(profile string) *corev1.SeccompProfile { … } // annotationKeyContainer builds the annotation key for a specific container func annotationKeyContainer(c corev1.Container) string { … }