[stable/2025.2] fix(kube_prometheus_stack): set AppArmor to unconfined for node-exporter (#3528)

Signed-off-by: yaguang tang <yaguang.tang@vexxhost.com>
Co-authored-by: yaguang tang <yaguang.tang@vexxhost.com>

Author: vexxhost-bot

roles/kube_prometheus_stack/vars/main.yml

@@ -606,6 +606,11 @@ _kube_prometheus_stack_helm_values:
         repository: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('path') }}"
         tag: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('tag') }}"
   prometheus-node-exporter:
+    podAnnotations:
+      container.apparmor.security.beta.kubernetes.io/node-exporter: unconfined
+    securityContext:
+      appArmorProfile:
+        type: Unconfined
     image:
       registry: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('domain') }}"
       repository: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('path') }}"