Install libapparmor1 in kubekins-test image

[ixdy]

Recent versions of Docker are dynamically linked, so when we run the verification tests in the kubekins-test image, docker-in-docker fails, due to a missing shared library:

docker: error while loading shared libraries: libapparmor.so.1: cannot open shared object file: No such file or directory
!!! Error in ./hack/update-api-reference-docs.sh:53
  'docker run -u $(id -u) --rm -v $V1_TMP_IN_HOST:/output:z -v ${SWAGGER_PATH}:/swagger-source:z gcr.io/google_containers/gen-swagger-docs:v4 v1 https://raw.githubusercontent.com/kubernetes/kubernetes/master/pkg/api/v1/register.go' exited with status 127
Call stack:
  1: ./hack/update-api-reference-docs.sh:53 main(...)
Exiting with status 1
!!! Error in ./hack/../hack/verify-api-reference-docs.sh:34
  '"./hack/update-api-reference-docs.sh" "${OUTPUT_DIR}"' exited with status 1
Call stack:
  1: ./hack/../hack/verify-api-reference-docs.sh:34 main(...)
Exiting with status 1
FAILED

Per moby/moby#15024 it seems this is WAI, and the workarounds are to either include the library dependency in the docker mount or install the library in the container. The latter seemed less fragile for now.

I've tested this locally, but I haven't pushed a new image (yet), so this will fail on PR Jenkins. If you're happy with the changes, I'll push the image to gcr.io, then re-run unit tests to verify everything is still good.

@kubernetes/goog-testing

[k8s-bot]

GCE e2e build/test failed for commit 597547777a93106ba8e0cb6f7e8bbec23c329669.

• Build Log
• Test Artifacts
• Internal Jenkins Results

[k8s-github-robot]

Labelling this PR as size/XS

[k8s-bot]

GCE e2e test build/test passed for commit 896d04d.

• Build Log
• Test Artifacts
• Internal Jenkins Results

[j3ffml]

lgtm, go ahead and push

[piosz]

@k8s-bot unit test this please

[wojtek-t]

@ixdy - unit tests are failing with the following error:
"Tag 0.3 not found in repository gcr.io/google_containers/kubekins-test"

Can you please push this first, before merging this PR so that we can test it?

[ixdy]

@k8s-bot unit test this please

[ixdy]

it's now been pushed to gcr.io

[ixdy]

I misunderstood the error message from docker as thinking this had already been pushed. It's actually been pushed to gcr.io now.

@k8s-bot unit test this

[ixdy]

@k8s-oncall FYI we may want to manually merge this ASAP - it'll let me enable additional Jenkins slaves for the PR queue.