code: func (m *kubeGenericRuntimeManager) getSeccompProfileFromAnnotations(annotations map[string]string, containerName string) string {
  	// try the pod profile.
  	profile, profileOK := annotations[v1.SeccompPodAnnotationKey]
  	if containerName != "" {
  		// try the container profile.
  		cProfile, cProfileOK := annotations[v1.SeccompContainerAnnotationKeyPrefix+containerName]
  		if cProfileOK {
  			profile = cProfile
  			profileOK = cProfileOK
  		}
  	}
  
  	if !profileOK {
  		return ""
  	}
  
  	if strings.HasPrefix(profile, "localhost/") {
  		name := strings.TrimPrefix(profile, "localhost/")
  		fname := filepath.Join(m.seccompProfileRoot, filepath.FromSlash(name))
  		return "localhost/" + fname
  	}
  
  	return profile
  }
docs: // getSeccompProfileFromAnnotations gets seccomp profile from annotations.
  // It gets pod's profile if containerName is empty.