apiVersion: v1
kind: Pod
metadata:
  name: apparmor
  annotations:
    container.apparmor.security.beta.kubernetes.io/ubuntu: "localhost/my-profile"
    test.pod-security.cybozu.com/message: "denied the request: spec.annotations[container.apparmor.security.beta.kubernetes.io/ubuntu]: Forbidden: localhost/my-profile is not an allowed AppArmor profile"
spec:
  securityContext:
    runAsNonRoot: true
  containers:
    - name: ubuntu
      image: quay.io/cybozu/ubuntu
