How do I add all apps inside AND outside the container to a VPN profile?

This is only possible if you install the VPN client outside of the Knox container. If installed outside, then simply call the addAllPackagesToVPN() and addAllContainerPackages() APIs to add all apps from inside and outside your container to the VPN profile. If your VPN client is installed inside the container, the best you can do is call the addAllPackagesToVPN() API which adds all the apps in the container to the profile.