AppArmor documentation

[timstclair]

Adds full documentation for AppArmor.

Original proposal: https://github.com/kubernetes/kubernetes/blob/master/docs/proposals/apparmor.md
Feature issue: kubernetes/enhancements#24

Note: 2 features referenced in this document have not yet been merged:

• Profile loader DaemonSet: AppArmor loader DaemonSet kubernetes-retired/contrib#1658
• NodeStatus ready condition: Append "AppArmor enabled" to the Node ready condition message kubernetes#31659

/cc @thockin @jfrazelle @pwittrock @dchen1107 @matchstick @kubernetes/docs

---

This change is

[devin-donnelly]

Review status: 0 of 4 files reviewed at latest revision, 1 unresolved discussion.

---

docs/admin/apparmor/index.md, line 7 [r1] (raw file):

---

AppArmor is a Linux kernel enhancement that can reduce the potential attack surface and provide

For clarity, I'd recommend changing to "reduce the potential attack surface of an Application and provide greater defense in depth."

---

Comments from Reviewable

[devin-donnelly]

Overall excellent. One very minor issue, but Docs LGTM.

[timstclair]

Thanks! Done.

---

Review status: 0 of 4 files reviewed at latest revision, 1 unresolved discussion.

---

docs/admin/apparmor/index.md, line 7 [r1] (raw file):

Previously, devin-donnelly wrote…

For clarity, I'd recommend changing to "reduce the potential attack surface of an Application and provide greater defense in depth."

Done.

---

Comments from Reviewable

[dchen1107]

LGTM

[timstclair]

Squashed commits.

[devin-donnelly]

Looks good, merging to release-1.4 line.