Configuring AppArmor on Kubernetes Runner

I’m pretty new to Drone. Could someone help me configure an AppArmor profile for a pipeline in the kubernetes runner?

I’m trying to build a container with buildah in my drone pipeline, and I think AppArmor is getting in the way. The solution seems to be to configure a custom AppArmor profile, but as far as I can tell, the only way to do that in k8s is with a container level annotation. The problem here is that the container name created by the drone runner appears to be randomized, so I can’t figure out how to set metadata.annotations in my pipeline config to load the modified AppArmor profile.

Is there a workaround for this?

For background, see this buildah issue.