Tortoise mutating webhook removes appArmorProfile from pod spec

[randytqwjp]

Kubernetes v1.30 deprecates enabling appArmor through annotations and enables it via securitycontext. Tortoise seems to remove this securitycontext through the mutating webhook {"configuration":"tortoise-mutating-webhook-configuration","webhook":"mpod.kb.io","patch":[{"op":"remove","path":"/spec/containers/0/securityContext/appArmorProfile"},

[randytqwjp]

@sanposhiho I suspect this could be due to underlying libs like container runtime being out of date causing the field to be securitycontext field to be dropped. An upgrade to support kubernetes v1.30 would require a major version upgrade for kubebuilder https://github.com/kubernetes-sigs/kubebuilder/releases?q=v3&expanded=true

[sanposhiho]

Yeah, we don't touch security context in our webhooks directly ourselves, so it should be caused by underlying dependencies like kubebuilder.

[lchavey]

Will do next week.