apparmor

const (
	// AppArmorAnnotationMissing occurs when the apparmor annotation is missing
	AppArmorAnnotationMissing = "AppArmorAnnotationMissing"
	// AppArmorDisabled occurs when the apparmor annotation is set to the unconfined value
	AppArmorDisabled = "AppArmorDisabled"
	// AppArmorDisabled occurs when the apparmor annotation is set to a bad value
	AppArmorBadValue = "AppArmorBadValue"
	// AppArmorInvalidAnnotation occurs when the apparmor annotation key refers to a container which doesn't exist. This will
	// prevent the manifest from being applied to a cluster with AppArmor enabled.
	AppArmorInvalidAnnotation = "AppArmorInvalidAnnotation"
)

const (
	// The prefix to an annotation key specifying a container profile.
	ContainerAnnotationKeyPrefix = "container.apparmor.security.beta.kubernetes.io/"

	// The profile specifying the runtime default.
	ProfileRuntimeDefault = "runtime/default"
	// The profile specifying the unconfined profile.
	ProfileUnconfined = "unconfined"
	// The prefix for specifying profiles loaded on the node.
	ProfileNamePrefix = "localhost/"
)

const Name = "apparmor"

const OverrideLabel = "allow-disabled-apparmor"