From 9c592f9a10bffec0dbe6374633f0fdf7c29a7788 Mon Sep 17 00:00:00 2001
From: Manuel Ganter <manuel.ganter@think-ahead.tech>
Date: Mon, 27 Oct 2025 15:25:43 +0100
Subject: [PATCH] added security context

---
 provider/provider.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/provider/provider.go b/provider/provider.go
index 0be56da..085a031 100644
--- a/provider/provider.go
+++ b/provider/provider.go
@@ -115,6 +115,9 @@ func (a *edgeConnectProvider) CreateInstance(ctx context.Context, bootstrapParam
 			Template: corev1.PodTemplateSpec{
 				ObjectMeta: metav1.ObjectMeta{
 					Labels: map[string]string{"app": instancename},
+					Annotations: map[string]string{
+						"container.apparmor.security.beta.kubernetes.io/buildkitd": "unconfined",
+					},
 				},
 				Spec: podSpec,
 			},