}, {
		name:            "pod profile",
		podProfile:      runtimeDefault,
		expectedProfile: runtimeDefault,
	}, {
		name:             "container profile",
		containerProfile: unconfined,
		expectedProfile:  unconfined,
	}, {
		name:              "annotation profile",
		annotationProfile: v1.DeprecatedAppArmorBetaProfileNamePrefix + "test",
		expectedProfile:   localhost,
	}, {

	SeccompProfileRuntimeDefault string = "runtime/default"

	// SeccompProfileNameUnconfined is the unconfined seccomp profile.
	SeccompProfileNameUnconfined string = "unconfined"

	// SeccompLocalhostProfileNamePrefix is the prefix for specifying profiles loaded from the node's disk.
	SeccompLocalhostProfileNamePrefix = "localhost/"

	DeprecatedAppArmorAnnotationValueLocalhostPrefix = "localhost/"

	// DeprecatedAppArmorAnnotationValueUnconfined is the Unconfined AppArmor profile
	DeprecatedAppArmorAnnotationValueUnconfined = "unconfined"

	// PreferAvoidPodsAnnotationKey represents the key of preferAvoidPods data (json serialized)
	// in the Annotations of a Node.

	podutil "k8s.io/kubernetes/pkg/api/v1/pod"
	"k8s.io/kubernetes/pkg/features"
)

// Checks whether app armor is required for the pod to run. AppArmor is considered required if any
// non-unconfined profiles are specified.
func isRequired(pod *v1.Pod) bool {
	if pod.Spec.SecurityContext != nil && pod.Spec.SecurityContext.AppArmorProfile != nil &&

 *
 * It is possible to cancel the finding process by canceling its call.
 *
 * Implementations of this interface are not thread-safe. Each instance is thread-confined to the
 * thread executing the call.
 */
interface RoutePlanner {
  val address: Address

  /** Follow-ups for failed plans and plans that lost a race. */
  val deferredPlans: ArrayDeque<Plan>

				return model.DiscoverableFromSameCluster
			}
		} else {
			// MCS cluster.local mode is not enabled, so requests to the cluster.local host are not confined
			// to the same cluster. Use the same discoverability policy as for clusterset.local.
			ec.clusterLocalPolicySelector = ec.clusterSetLocalPolicySelector
		}

		return ec
	}