Merge pull request kubernetes-sigs#1183 from BenTheElder/unarmored

disable apparmor confinement for kind nodes
rezamt · Dec 18, 2019 · fb4f3ba · fb4f3ba
2 parents 68779ae + f2d05cd
commit fb4f3ba
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/cluster/internal/providers/docker/provision.go b/pkg/cluster/internal/providers/docker/provision.go
@@ -164,6 +164,7 @@ func runArgsForNode(node *config.Node, name string, args []string) []string {
 		// for now this is what we want. in the future we may revisit this.
 		"--privileged",
 		"--security-opt", "seccomp=unconfined", // also ignore seccomp
+		"--security-opt", "apparmor=unconfined", // also ignore apparmor
 		// runtime temporary storage
 		"--tmpfs", "/tmp", // various things depend on working /tmp
 		"--tmpfs", "/run", // systemd wants a writable /run