landlock-genprof rollback
Explicitly rolls back an eligible ApplyAttempt
Synopsis
Creates a durable RollbackAttempt and reverses only eligible, strict-resource-version-bound mutations. Rollback is explicit, sequential, nontransactional, and CLI-only.
Installed as a kubectl plugin (the common case): run this as kubectl landlock-genprof <command>. Running this binary directly instead (standalone, not via kubectl) works the same way, without that prefix.
landlock-genprof rollback <apply-attempt> [flags]
Options
-h, --help help for rollback
-n, --namespace string Kubernetes namespace (default "default")
-y, --yes Skip the explicit rollback confirmation
SEE ALSO
- landlock-genprof - Generates least-privilege Kubernetes security profiles by observing a running pod