From d00c9a33f9ee4a350e9812fe425df1e3971c93af Mon Sep 17 00:00:00 2001
From: "Dr. Stefan Schimanski" <stefan.schimanski@gmail.com>
Date: Mon, 23 Jan 2017 10:06:57 +0100
Subject: [PATCH] Add TODO for AppArmor validation depending on feature gate

---
 pkg/api/validation/validation.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/api/validation/validation.go b/pkg/api/validation/validation.go
index d1f0215dc84..727b71ff407 100644
--- a/pkg/api/validation/validation.go
+++ b/pkg/api/validation/validation.go
@@ -2064,6 +2064,7 @@ func ValidateAppArmorPodAnnotations(annotations map[string]string, spec *api.Pod
 		if !strings.HasPrefix(k, apparmor.ContainerAnnotationKeyPrefix) {
 			continue
 		}
+		// TODO: this belongs to admission, not general pod validation:
 		if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmor) {
 			allErrs = append(allErrs, field.Forbidden(fldPath.Key(k), "AppArmor is disabled by feature-gate"))
 			continue