华为云UCS-k8spspapparmor:符合策略实例的资源定义

时间:2025-02-12 15:05:17

符合策略实例的资源定义

示例中apparmor的值在上述定义的允许范围内,符合策略实例。

apiVersion: v1kind: Podmetadata:  name: nginx-apparmor-allowed  annotations:    # apparmor.security.beta.kubernetes.io/pod: unconfined # runtime/default    container.apparmor.security.beta.kubernetes.io/nginx: runtime/default  labels:    app: nginx-apparmorspec:  containers:  - name: nginx    image: nginx
support.huaweicloud.com/usermanual-ucs/ucs_01_0229.html