AppArmorProfile¶

Contexts¶

Context	Relationship	Object Path	Package File Path
`Database.Shard.Dap.Instances.K8sPolicy.PodSecurityContext`	`Package` -> `Database` -> `Shard` -> `Dap` -> `Instances` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].daps.instances.*.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Dap.Instances.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Dap` -> `Instances` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].daps.instances.*.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Dap.Instances.K8sPolicy.SecurityContext`	`Package` -> `Database` -> `Shard` -> `Dap` -> `Instances` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].daps.instances.*.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Dap.Instances.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Dap` -> `Instances` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].daps.instances.*.k8sPolicy.securityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sequencer.K8sPolicy.PodSecurityContext`	`Package` -> `Database` -> `Shard` -> `Sequencer` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sequencers.*.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sequencer.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Sequencer` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sequencers.*.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sequencer.K8sPolicy.SecurityContext`	`Package` -> `Database` -> `Shard` -> `Sequencer` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sequencers.*.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sequencer.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Sequencer` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sequencers.*.k8sPolicy.securityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sm.K8sPolicy.PodSecurityContext`	`Package` -> `Database` -> `Shard` -> `Sm` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sm.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sm.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Sm` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sm.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sm.K8sPolicy.SecurityContext`	`Package` -> `Database` -> `Shard` -> `Sm` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sm.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Database.Shard.Sm.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Database` -> `Shard` -> `Sm` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.databases[].shards[].sm.k8sPolicy.securityContext.seccompProfile`	`{package-root}/databases/{db-name}/shards/{shard-name}.yaml`
`Pipeline.Controller.K8sPolicy.PodSecurityContext`	`Package` -> `Pipeline` -> `Controller` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.pipelines[*].controller.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Controller.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Pipeline` -> `Controller` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.pipelines[*].controller.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Controller.K8sPolicy.SecurityContext`	`Package` -> `Pipeline` -> `Controller` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.pipelines[*].controller.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Controller.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Pipeline` -> `Controller` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.pipelines[*].controller.k8sPolicy.securityContext.seccompProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Worker.K8sPolicy.PodSecurityContext`	`Package` -> `Pipeline` -> `Worker` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.pipelines[*].worker.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Worker.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Pipeline` -> `Worker` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.pipelines[*].worker.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Worker.K8sPolicy.SecurityContext`	`Package` -> `Pipeline` -> `Worker` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.pipelines[*].worker.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Pipeline.Worker.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Pipeline` -> `Worker` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.pipelines[*].worker.k8sPolicy.securityContext.seccompProfile`	`{package-root}/pipelines/{pipeline-name}.yaml`
`Router.Agg.K8sPolicy.PodSecurityContext`	`Package` -> `Router` -> `Agg` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.router.agg.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Agg.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Router` -> `Agg` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.router.agg.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Agg.K8sPolicy.SecurityContext`	`Package` -> `Router` -> `Agg` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.router.agg.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Agg.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Router` -> `Agg` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.router.agg.k8sPolicy.securityContext.seccompProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Rc.K8sPolicy.PodSecurityContext`	`Package` -> `Router` -> `Rc` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.router.rc.k8sPolicy.podSecurityContext.appArmorProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Rc.K8sPolicy.PodSecurityContext.seccompProfile`	`Package` -> `Router` -> `Rc` -> `K8sPolicy` -> `PodSecurityContext` -> `AppArmorProfile`	`$.router.rc.k8sPolicy.podSecurityContext.seccompProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Rc.K8sPolicy.SecurityContext`	`Package` -> `Router` -> `Rc` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.router.rc.k8sPolicy.securityContext.appArmorProfile`	`{package-root}/router/{router-name}.yaml`
`Router.Rc.K8sPolicy.SecurityContext.seccompProfile`	`Package` -> `Router` -> `Rc` -> `K8sPolicy` -> `SecurityContext` -> `AppArmorProfile`	`$.router.rc.k8sPolicy.securityContext.seccompProfile`	`{package-root}/router/{router-name}.yaml`

Fields¶

Field	Type	Required	Description	Constraints	Default
`type`	`string`	yes	type indicates which kind of AppArmor profile will be applied. Valid options are: Localhost - a profile pre-loaded on the node. RuntimeDefault - the container runtime's default profile. Unconfined - no AppArmor enforcement.	-	-
`localhostProfile`	`string` \| `null`	no	localhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is "Localhost".	-	`null`

Links To¶

No linked schemas.

Used In¶

PodSecurityContext via appArmorProfile
PodSecurityContext via seccompProfile
SecurityContext via appArmorProfile
SecurityContext via seccompProfile