// with apply.
type AppArmorProfileApplyConfiguration struct {
	Type             *v1.AppArmorProfileType `json:"type,omitempty"`
	LocalhostProfile *string                 `json:"localhostProfile,omitempty"`
}

// AppArmorProfileApplyConfiguration constructs an declarative configuration of the AppArmorProfile type for use with
// apply.

		// that is called for API validation, and this is tightening validation.
		if profile.Type == v1.AppArmorProfileTypeLocalhost {
			if profile.LocalhostProfile == nil || strings.TrimSpace(*profile.LocalhostProfile) == "" {
				retErr = fmt.Errorf("invalid empty AppArmor profile name: %q", profile)
				return false
			}
		}
		return true
	})

	return retErr
}

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: target
  name: target
spec:
  securityContext:
    seccompProfile: 
      type: Localhost
      localhostProfile: dummy.json
  containers:
  - image: busybox
    name: target
    command: ["/bin/sh", "-c", "sleep 100"]
    securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        runAsNonRoot: true
        allowPrivilegeEscalation: false

	unconfined := &v1.AppArmorProfile{Type: v1.AppArmorProfileTypeUnconfined}
	localhost := &v1.AppArmorProfile{
		Type:             v1.AppArmorProfileTypeLocalhost,
		LocalhostProfile: ptr.To("test"),
	}

	tests := []struct {
		name              string
		annotationProfile string
		containerProfile  *v1.AppArmorProfile
		podProfile        *v1.AppArmorProfile

		profileName := strings.TrimPrefix(val, v1.DeprecatedAppArmorBetaProfileNamePrefix)
		return &v1.AppArmorProfile{
			Type:             v1.AppArmorProfileTypeLocalhost,
			LocalhostProfile: &profileName,
		}

	default:
		// Invalid annotation.
		return nil
	}