kubernetes/pkg/capabilities/capabilities.go

type Capabilities …

type PrivilegedSources …

var capInstance …

// Initialize the capability set.  This can only be done once per binary, subsequent calls are ignored.
func Initialize(c Capabilities) { … }

// Setup the capability set.  It wraps Initialize for improving usability.
func Setup(allowPrivileged bool, perConnectionBytesPerSec int64) { … }

// ResetForTest resets the capabilities to a given state for testing purposes.
// This function should only be called from tests.
func ResetForTest() { … }

// Get returns a read-only copy of the system capabilities.
func Get() Capabilities { … }