Fix AppArmor test for docker 1.13

[timstclair]

... & better debugging.

The issue is that we run the pod containers in a shared PID namespace with docker 1.13, so PID 1 is no longer the container's root process. Since it's messy to get the container's root process, I switched to using /proc/self to read the apparmor profile. While this wouldn't catch a regression that caused only the init process to run with the wrong profile, I think it's a good approximation.

/cc @aulanov @Amey-D

[k8s-ci-robot]

@timstclair: GitHub didn't allow me to request PR reviews from the following users: aulanov.

Note that only kubernetes members can review this PR, and authors cannot review their own PRs.

In response to this:

Help debug a test failure on docker 1.13

/cc @aulanov @Amey-D

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[Amey-D]

I'm not familiar with the test code, but +1 to the additional logging to help debugging.

[Amey-D]

/lgtm

[timstclair]

It turns out AfterEach blocks are not executed in reverse order, so the test needs to be wrapped in a Context to ensure the logs are captured before the namespace is torn down. (Updated)

[timstclair]

Repurposing as a bug fix.

[soltysh]

/lgtm
/approve

[k8s-github-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Amey-D, soltysh, timstclair

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these OWNERS Files:

• test/OWNERS [soltysh]

You can indicate your approval by writing /approve in a comment
You can cancel your approval by writing /approve cancel in a comment

[timstclair]

@k8s-bot pull-kubernetes-e2e-gce-etcd3 test this
@k8s-bot pull-kubernetes-federation-e2e-gce test this

[shashidharatd]

@k8s-bot pull-kubernetes-federation-e2e-gce test this
ref: #46827

[shashidharatd]

@k8s-bot pull-kubernetes-federation-e2e-gce test this

[k8s-github-robot]

Automatic merge from submit-queue (batch tested with PRs 46620, 46732, 46773, 46772, 46725)