华为云UCS-k8spspapparmor:不符合策略实例的资源定义

时间:2025-02-12 15:05:17

不符合策略实例的资源定义

示例中apparmor的值不在上述定义的允许范围内,不符合策略实例。

apiVersion: v1kind: Podmetadata:  name: nginx-apparmor-disallowed  annotations:    # apparmor.security.beta.kubernetes.io/pod: unconfined # runtime/default    container.apparmor.security.beta.kubernetes.io/nginx: unconfined  labels:    app: nginx-apparmorspec:  containers:  - name: nginx    image: nginx
support.huaweicloud.com/usermanual-ucs/ucs_01_0229.html