set apparmor profile unconfined

ledroide · Jan 9, 2024 · df41054 · df41054
1 parent 8c09c3f
commit df41054
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/container-engine/cri-o/templates/crio.conf.j2 b/roles/container-engine/cri-o/templates/crio.conf.j2
@@ -146,7 +146,7 @@ seccomp_profile = "{{ crio_seccomp_profile }}"
 # does not specify a profile via the Kubernetes Pod's metadata annotation. If
 # the profile is set to "unconfined", then this equals to disabling AppArmor.
 # This option supports live configuration reload.
-# apparmor_profile = "crio-default"
+apparmor_profile = "unconfined"
 
 # Cgroup management implementation used for the runtime.
 cgroup_manager = "{{ crio_cgroup_manager }}"