Verifying AppArmor Enforcement on VMware vSphere Kubernetes Service

AppArmor support in Kubernetes is easy to configure and easy to get wrong quietly. A pod can be scheduled, come up Running, and report Ready: True while the profile you thought was attached either isn’t loaded, isn’t the one you expect, or is enforcing something different from what you intended. The only way to be sure is to test it end to end:... Weiterlesen: Verifying AppArmor Enforcement on VMware vSphere Kubernetes Service