kubernetes/staging/src/k8s.io/pod-security-admission/policy/check_capabilities_baseline.go

func init() { … }

const checkCapabilitiesBaselineID …

// CheckCapabilitiesBaseline returns a baseline level check
// that limits the capabilities that can be added in 1.0+
func CheckCapabilitiesBaseline() Check { … }

var capabilities_allowed_1_0 …

func capabilitiesBaseline_1_0(podMetadata *metav1.ObjectMeta, podSpec *corev1.PodSpec) CheckResult { … }