[Feature] add support for bpf lsm to node group kernels

[learhy]

In other managed Kubernetes distros bpf lsm support is enabled in newer kernels (> 5.10 usually). We were hoping to see this feature enabled on the latest node pools that come standard with aks 1.25 but it doesn't look to be the case:

AKSUbuntu-2204gen2containerd-2023.02.15

/etc # cat /sys/kernel/security/lsm
lockdown,capability,landlock,yama,AppArmor

We'd love to have feature parity on Azure as this is important to our customers-- can this feature be enabled?

[learhy]

Would love to know what the team thinks about this capability. Thanks.

[alexeldeib]

@justindavies we were talking about this I think? did we have an answer from LSG?

[msecpim]

Next to GKE and EKS, we would love to see this working for AKS as well. Is there any feedback as when that will be available for Azure customers?

[microsoft-github-policy-service[bot]]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service[bot]]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service[bot]]

This issue has been automatically marked as stale because it has not had any activity for 180 days. It will be closed if no further activity occurs within 7 days of this comment. @allyford

[msecpim]

@allyford bpf is a very capable security feature, what are your thoughts on this?