It is not understood in which level the AppArmor profile should be loaded… the right level the question expects is in the container level, but how can I know if not explicitly written?
At least as I read the docs, unless you have multiple containers in the pod, it should not make a difference:
You can specify the
appArmorProfileon either a container’ssecurityContextor on a Pod’ssecurityContext. If the profile is set at the pod level, it will be used as the default profile for all containers in the pod (including init, sidecar, and ephemeral containers). If both a pod & container AppArmor profile are set, the container’s profile will be used.
Probably the grader for this lab should accept either placement for the appArmorProfile in this case. In general, if it matters to the problem, the question should probably give you instructions.
I see.
Well it failed me the first time, when it was in the level of the pod and passed me when I moved it to the level of the container (or vise versa) - I’m not sure at the moment, but I also think it should either be mentioned in the question or pass both ways