- Sort Score
- Result 10 results
- Languages All
Results 1 - 5 of 5 for unconfined (0.12 sec)
-
pkg/security/apparmor/helpers_test.go
}, { name: "pod profile", podProfile: runtimeDefault, expectedProfile: runtimeDefault, }, { name: "container profile", containerProfile: unconfined, expectedProfile: unconfined, }, { name: "annotation profile", annotationProfile: v1.DeprecatedAppArmorBetaProfileNamePrefix + "test", expectedProfile: localhost, }, {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:31 UTC 2024 - 3.7K bytes - Viewed (0) -
staging/src/k8s.io/api/core/v1/annotation_key_constants.go
SeccompProfileRuntimeDefault string = "runtime/default" // SeccompProfileNameUnconfined is the unconfined seccomp profile. SeccompProfileNameUnconfined string = "unconfined" // SeccompLocalhostProfileNamePrefix is the prefix for specifying profiles loaded from the node's disk. SeccompLocalhostProfileNamePrefix = "localhost/"
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:31 UTC 2024 - 8.6K bytes - Viewed (0) -
pkg/apis/core/annotation_key_constants.go
DeprecatedAppArmorAnnotationValueLocalhostPrefix = "localhost/" // DeprecatedAppArmorAnnotationValueUnconfined is the Unconfined AppArmor profile DeprecatedAppArmorAnnotationValueUnconfined = "unconfined" // PreferAvoidPodsAnnotationKey represents the key of preferAvoidPods data (json serialized) // in the Annotations of a Node.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:31 UTC 2024 - 8.7K bytes - Viewed (0) -
pkg/security/apparmor/helpers.go
podutil "k8s.io/kubernetes/pkg/api/v1/pod" "k8s.io/kubernetes/pkg/features" ) // Checks whether app armor is required for the pod to run. AppArmor is considered required if any // non-unconfined profiles are specified. func isRequired(pod *v1.Pod) bool { if pod.Spec.SecurityContext != nil && pod.Spec.SecurityContext.AppArmorProfile != nil &&
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:32 UTC 2024 - 3.5K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/serviceexportcache.go
return model.DiscoverableFromSameCluster } } else { // MCS cluster.local mode is not enabled, so requests to the cluster.local host are not confined // to the same cluster. Use the same discoverability policy as for clusterset.local. ec.clusterLocalPolicySelector = ec.clusterSetLocalPolicySelector } return ec }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 28 16:41:38 UTC 2024 - 7.5K bytes - Viewed (0)