kubernetes/test/e2e/framework/security/apparmor.go

const appArmorProfilePrefix …

const appArmorAllowedPath …

const appArmorDeniedPath …

const loaderLabelKey …

const loaderLabelValue …

// LoadAppArmorProfiles creates apparmor-profiles ConfigMap and apparmor-loader ReplicationController.
func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface) { … }

// CreateAppArmorTestPod creates a pod that tests apparmor profile enforcement. The pod exits with
// an error code if the profile is incorrectly enforced. If runOnce is true the pod will exit after
// a single test, otherwise it will repeat the test every 1 second until failure.
func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod { … }

func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, podClient *e2epod.PodClient, runOnce bool) *v1.Pod { … }

func createAppArmorProfileCM(ctx context.Context, nsName string, clientset clientset.Interface) { … }

func createAppArmorProfileLoader(ctx context.Context, nsName string, clientset clientset.Interface) { … }

func getRunningLoaderPod(ctx context.Context, nsName string, clientset clientset.Interface) *v1.Pod { … }