type PodSecurityContextAccessor … type PodSecurityContextMutator … // NewPodSecurityContextAccessor returns an accessor for the given pod security context. // May be initialized with a nil PodSecurityContext. func NewPodSecurityContextAccessor(podSC *api.PodSecurityContext) PodSecurityContextAccessor { … } // NewPodSecurityContextMutator returns a mutator for the given pod security context. // May be initialized with a nil PodSecurityContext. func NewPodSecurityContextMutator(podSC *api.PodSecurityContext) PodSecurityContextMutator { … } type podSecurityContextWrapper … func (w *podSecurityContextWrapper) PodSecurityContext() *api.PodSecurityContext { … } func (w *podSecurityContextWrapper) ensurePodSC() { … } func (w *podSecurityContextWrapper) HostNetwork() bool { … } func (w *podSecurityContextWrapper) SetHostNetwork(v bool) { … } func (w *podSecurityContextWrapper) HostPID() bool { … } func (w *podSecurityContextWrapper) SetHostPID(v bool) { … } func (w *podSecurityContextWrapper) HostIPC() bool { … } func (w *podSecurityContextWrapper) SetHostIPC(v bool) { … } func (w *podSecurityContextWrapper) HostUsers() *bool { … } func (w *podSecurityContextWrapper) SetHostUsers(v *bool) { … } func (w *podSecurityContextWrapper) SELinuxOptions() *api.SELinuxOptions { … } func (w *podSecurityContextWrapper) SetSELinuxOptions(v *api.SELinuxOptions) { … } func (w *podSecurityContextWrapper) RunAsUser() *int64 { … } func (w *podSecurityContextWrapper) SetRunAsUser(v *int64) { … } func (w *podSecurityContextWrapper) RunAsGroup() *int64 { … } func (w *podSecurityContextWrapper) SetRunAsGroup(v *int64) { … } func (w *podSecurityContextWrapper) RunAsNonRoot() *bool { … } func (w *podSecurityContextWrapper) SetRunAsNonRoot(v *bool) { … } func (w *podSecurityContextWrapper) SeccompProfile() *api.SeccompProfile { … } func (w *podSecurityContextWrapper) SetSeccompProfile(p *api.SeccompProfile) { … } func (w *podSecurityContextWrapper) SupplementalGroups() []int64 { … } func (w *podSecurityContextWrapper) SetSupplementalGroups(v []int64) { … } func (w *podSecurityContextWrapper) FSGroup() *int64 { … } func (w *podSecurityContextWrapper) SetFSGroup(v *int64) { … } type ContainerSecurityContextAccessor … type ContainerSecurityContextMutator … // NewContainerSecurityContextAccessor returns an accessor for the provided container security context // May be initialized with a nil SecurityContext func NewContainerSecurityContextAccessor(containerSC *api.SecurityContext) ContainerSecurityContextAccessor { … } // NewContainerSecurityContextMutator returns a mutator for the provided container security context // May be initialized with a nil SecurityContext func NewContainerSecurityContextMutator(containerSC *api.SecurityContext) ContainerSecurityContextMutator { … } type containerSecurityContextWrapper … func (w *containerSecurityContextWrapper) ContainerSecurityContext() *api.SecurityContext { … } func (w *containerSecurityContextWrapper) ensureContainerSC() { … } func (w *containerSecurityContextWrapper) Capabilities() *api.Capabilities { … } func (w *containerSecurityContextWrapper) SetCapabilities(v *api.Capabilities) { … } func (w *containerSecurityContextWrapper) Privileged() *bool { … } func (w *containerSecurityContextWrapper) SetPrivileged(v *bool) { … } func (w *containerSecurityContextWrapper) ProcMount() api.ProcMountType { … } func (w *containerSecurityContextWrapper) SELinuxOptions() *api.SELinuxOptions { … } func (w *containerSecurityContextWrapper) SetSELinuxOptions(v *api.SELinuxOptions) { … } func (w *containerSecurityContextWrapper) RunAsUser() *int64 { … } func (w *containerSecurityContextWrapper) SetRunAsUser(v *int64) { … } func (w *containerSecurityContextWrapper) RunAsGroup() *int64 { … } func (w *containerSecurityContextWrapper) SetRunAsGroup(v *int64) { … } func (w *containerSecurityContextWrapper) RunAsNonRoot() *bool { … } func (w *containerSecurityContextWrapper) SetRunAsNonRoot(v *bool) { … } func (w *containerSecurityContextWrapper) ReadOnlyRootFilesystem() *bool { … } func (w *containerSecurityContextWrapper) SetReadOnlyRootFilesystem(v *bool) { … } func (w *containerSecurityContextWrapper) SeccompProfile() *api.SeccompProfile { … } func (w *containerSecurityContextWrapper) SetSeccompProfile(p *api.SeccompProfile) { … } func (w *containerSecurityContextWrapper) AllowPrivilegeEscalation() *bool { … } func (w *containerSecurityContextWrapper) SetAllowPrivilegeEscalation(v *bool) { … } // NewEffectiveContainerSecurityContextAccessor returns an accessor for reading effective values // for the provided pod security context and container security context func NewEffectiveContainerSecurityContextAccessor(podSC PodSecurityContextAccessor, containerSC ContainerSecurityContextMutator) ContainerSecurityContextAccessor { … } // NewEffectiveContainerSecurityContextMutator returns a mutator for reading and writing effective values // for the provided pod security context and container security context func NewEffectiveContainerSecurityContextMutator(podSC PodSecurityContextAccessor, containerSC ContainerSecurityContextMutator) ContainerSecurityContextMutator { … } type effectiveContainerSecurityContextWrapper … func (w *effectiveContainerSecurityContextWrapper) ContainerSecurityContext() *api.SecurityContext { … } func (w *effectiveContainerSecurityContextWrapper) Capabilities() *api.Capabilities { … } func (w *effectiveContainerSecurityContextWrapper) SetCapabilities(v *api.Capabilities) { … } func (w *effectiveContainerSecurityContextWrapper) Privileged() *bool { … } func (w *effectiveContainerSecurityContextWrapper) SetPrivileged(v *bool) { … } func (w *effectiveContainerSecurityContextWrapper) ProcMount() api.ProcMountType { … } func (w *effectiveContainerSecurityContextWrapper) SELinuxOptions() *api.SELinuxOptions { … } func (w *effectiveContainerSecurityContextWrapper) SetSELinuxOptions(v *api.SELinuxOptions) { … } func (w *effectiveContainerSecurityContextWrapper) RunAsUser() *int64 { … } func (w *effectiveContainerSecurityContextWrapper) SetRunAsUser(v *int64) { … } func (w *effectiveContainerSecurityContextWrapper) RunAsGroup() *int64 { … } func (w *effectiveContainerSecurityContextWrapper) SetRunAsGroup(v *int64) { … } func (w *effectiveContainerSecurityContextWrapper) RunAsNonRoot() *bool { … } func (w *effectiveContainerSecurityContextWrapper) SetRunAsNonRoot(v *bool) { … } func (w *effectiveContainerSecurityContextWrapper) ReadOnlyRootFilesystem() *bool { … } func (w *effectiveContainerSecurityContextWrapper) SetReadOnlyRootFilesystem(v *bool) { … } func (w *effectiveContainerSecurityContextWrapper) SeccompProfile() *api.SeccompProfile { … } func (w *effectiveContainerSecurityContextWrapper) SetSeccompProfile(p *api.SeccompProfile) { … } func (w *effectiveContainerSecurityContextWrapper) AllowPrivilegeEscalation() *bool { … } func (w *effectiveContainerSecurityContextWrapper) SetAllowPrivilegeEscalation(v *bool) { … }
Codebase Browser
kubernetes