- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 425 for SecurityContext (0.23 sec)
-
releasenotes/notes/securitycontext-condition.yaml
apiVersion: release-notes/v2 kind: bug-fix area: installation issue: - 49549 releaseNotes: - |
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Jun 03 01:55:05 UTC 2024 - 197 bytes - Viewed (0) -
pkg/kubelet/kuberuntime/security_context.go
if securityContext == nil { return nil } sc := &runtimeapi.LinuxContainerSecurityContext{ Capabilities: convertToRuntimeCapabilities(securityContext.Capabilities), SelinuxOptions: convertToRuntimeSELinuxOption(securityContext.SELinuxOptions), } if securityContext.RunAsUser != nil { sc.RunAsUser = &runtimeapi.Int64Value{Value: int64(*securityContext.RunAsUser)}
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 5.2K bytes - Viewed (0) -
pkg/security/apparmor/helpers.go
func isRequired(pod *v1.Pod) bool { if pod.Spec.SecurityContext != nil && pod.Spec.SecurityContext.AppArmorProfile != nil && pod.Spec.SecurityContext.AppArmorProfile.Type != v1.AppArmorProfileTypeUnconfined { return true } inUse := !podutil.VisitContainers(&pod.Spec, podutil.AllContainers, func(c *v1.Container, _ podutil.ContainerType) bool { if c.SecurityContext != nil && c.SecurityContext.AppArmorProfile != nil &&
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:32 UTC 2024 - 3.5K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/kuberuntime_sandbox_linux_test.go
assert.NoError(t, err) assert.Equal(t, expectedLinuxPodSandboxConfig.SecurityContext.SelinuxOptions, podSandboxConfig.Linux.SecurityContext.SelinuxOptions) assert.Equal(t, expectedLinuxPodSandboxConfig.SecurityContext.RunAsUser, podSandboxConfig.Linux.SecurityContext.RunAsUser) assert.Equal(t, expectedLinuxPodSandboxConfig.SecurityContext.RunAsGroup, podSandboxConfig.Linux.SecurityContext.RunAsGroup) } func newTestPodWithLinuxSecurityContext() *v1.Pod {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 8K bytes - Viewed (0) -
pkg/kubelet/sysctl/util.go
// according to the linux sysctl conversion rules. // see https://man7.org/linux/man-pages/man5/sysctl.d.5.html for more details. func ConvertPodSysctlsVariableToDotsSeparator(securityContext *v1.PodSecurityContext) { if securityContext == nil { return } for i, sysctl := range securityContext.Sysctls {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 27 22:58:54 UTC 2023 - 1.2K bytes - Viewed (0) -
cmd/kubeadm/app/util/staticpod/utils_linux.go
} } pod.Spec.Containers[0].SecurityContext = &v1.SecurityContext{ AllowPrivilegeEscalation: ptr.To(false), Capabilities: &v1.Capabilities{ // We drop all capabilities that are added by default. Drop: []v1.Capability{"ALL"}, }, } pod.Spec.SecurityContext.RunAsUser = runAsUser pod.Spec.SecurityContext.RunAsGroup = runAsGroup pod.Spec.SecurityContext.SupplementalGroups = []int64{*supplementalGroup}
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Sep 11 14:41:12 UTC 2023 - 8.4K bytes - Viewed (0) -
pkg/volume/util/util_test.go
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri May 31 12:32:15 UTC 2024 - 28.7K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/kuberuntime_sandbox_test.go
pod := newTestPod() if podFieldProfile != nil { pod.Spec.SecurityContext = &v1.PodSecurityContext{ SeccompProfile: podFieldProfile, } } if containerFieldProfile != nil { pod.Spec.Containers[0].SecurityContext = &v1.SecurityContext{ SeccompProfile: containerFieldProfile, } } return pod }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 14.3K bytes - Viewed (0) -
pkg/kubelet/container/helpers_test.go
return &b } tests := map[string]struct { securityContext *v1.SecurityContext expected bool }{ "nil security context": { securityContext: nil, expected: false, }, "nil privileged": { securityContext: &v1.SecurityContext{}, expected: false, }, "false privileged": { securityContext: &v1.SecurityContext{Privileged: newBoolPtr(false)}, expected: false,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 22 01:55:46 UTC 2024 - 24.5K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/kuberuntime_sandbox.go
}, } sysctls := make(map[string]string) if pod.Spec.SecurityContext != nil { for _, c := range pod.Spec.SecurityContext.Sysctls { sysctls[c.Name] = c.Value } } lc.Sysctls = sysctls if pod.Spec.SecurityContext != nil { sc := pod.Spec.SecurityContext if sc.RunAsUser != nil && runtime.GOOS != "windows" { lc.SecurityContext.RunAsUser = &runtimeapi.Int64Value{Value: int64(*sc.RunAsUser)} }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 13.6K bytes - Viewed (0)