securityContext - Code Search

helm/minio/templates/post-job.yaml

      {{- end }}
      {{- with .Values.postJob.tolerations }}
      tolerations: {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- if .Values.postJob.securityContext.enabled }}
      securityContext: {{ omit .Values.postJob.securityContext "enabled" | toYaml | nindent 12 }}
      {{- end }}
      volumes:
        - name: etc-path
          emptyDir: {}
        - name: tmp
          emptyDir: {}

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Thu Oct 10 15:48:31 UTC 2024

- 10.4K bytes

- Viewed (0)

github.com/minio/minio

helm/minio/values.yaml

nodeSelector: {}
tolerations: []
affinity: {}
topologySpreadConstraints: []

## Add stateful containers to have security context, if enabled MinIO will run as this
## user and group NOTE: securityContext is only enabled if persistence.enabled=true
securityContext:
  enabled: true
  runAsUser: 1000
  runAsGroup: 1000
  fsGroup: 1000
  fsGroupChangePolicy: "OnRootMismatch"

containerSecurityContext:
  readOnlyRootFilesystem: false

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Thu Oct 10 15:48:31 UTC 2024

- 18.8K bytes

- Viewed (1)

github.com/minio/minio

helm-releases/minio-5.0.15.tgz

runtimeClassName: "{{ .Values.runtimeClassName }}" {{- end }} {{- if and .Values.securityContext.enabled .Values.persistence.enabled }} securityContext: runAsUser: {{ .Values.securityContext.runAsUser }} runAsGroup: {{ .Values.securityContext.runAsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }} {{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor "20") }} fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }} {{- end }} {{- end }} {{ if .Values.serviceAccount.create...

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Fri Jan 12 18:18:57 UTC 2024

- 20.8K bytes

- Viewed (0)

github.com/minio/minio

helm/minio/templates/deployment.yaml

      {{- end }}
      {{- if .Values.runtimeClassName }}
      runtimeClassName: "{{ .Values.runtimeClassName }}"
      {{- end }}
      {{- if and .Values.securityContext.enabled .Values.persistence.enabled }}
      securityContext:
        {{ omit .Values.securityContext "enabled" | toYaml | nindent 8 }}
      {{- end }}
      {{ if .Values.serviceAccount.create }}
      serviceAccountName: {{ .Values.serviceAccount.name }}

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Thu Oct 10 15:48:31 UTC 2024

- 8.6K bytes

- Viewed (0)

github.com/minio/minio

helm-releases/minio-5.2.0.tgz

runtimeClassName: "{{ .Values.runtimeClassName }}" {{- end }} {{- if and .Values.securityContext.enabled .Values.persistence.enabled }} securityContext: runAsUser: {{ .Values.securityContext.runAsUser }} runAsGroup: {{ .Values.securityContext.runAsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }} {{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor "20") }} fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }} {{- end }} {{- end }} {{ if .Values.serviceAccount.create...

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Sun Apr 28 10:14:37 UTC 2024

- 21.7K bytes

- Viewed (0)

github.com/minio/minio

helm-releases/minio-5.1.0.tgz

runtimeClassName: "{{ .Values.runtimeClassName }}" {{- end }} {{- if and .Values.securityContext.enabled .Values.persistence.enabled }} securityContext: runAsUser: {{ .Values.securityContext.runAsUser }} runAsGroup: {{ .Values.securityContext.runAsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }} {{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor "20") }} fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }} {{- end }} {{- end }} {{ if .Values.serviceAccount.create...

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Sun Mar 03 18:49:37 UTC 2024

- 21.3K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/plugin/plugin_dryrun_test.go

			pod.Spec.Containers[1].Env = tt.proxyEnv

			pod.Spec.Containers[1].SecurityContext = &corev1.SecurityContext{}

			if tt.customGID != nil {
				pod.Spec.Containers[1].SecurityContext.RunAsGroup = tt.customGID
			}

			if tt.customUID != nil {
				pod.Spec.Containers[1].SecurityContext.RunAsUser = tt.customUID
			}

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Tue Aug 27 16:44:45 UTC 2024

- 8.5K bytes

- Viewed (0)

github.com/minio/minio

helm/minio/templates/statefulset.yaml

      {{- end }}
      {{- if .Values.runtimeClassName }}
      runtimeClassName: "{{ .Values.runtimeClassName }}"
      {{- end }}
      {{- if and .Values.securityContext.enabled .Values.persistence.enabled }}
      securityContext:
        {{- omit .Values.securityContext "enabled" | toYaml | nindent 8 }}
      {{- end }}
      {{- if .Values.serviceAccount.create }}
      serviceAccountName: {{ .Values.serviceAccount.name }}

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Fri Oct 11 12:21:05 UTC 2024

- 10.4K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/core/v1/generated.proto

  // - spec.securityContext.runAsUser
  // - spec.securityContext.runAsGroup
  // - spec.securityContext.supplementalGroups
  // - spec.containers[*].securityContext.seLinuxOptions
  // - spec.containers[*].securityContext.seccompProfile
  // - spec.containers[*].securityContext.capabilities
  // - spec.containers[*].securityContext.readOnlyRootFilesystem
  // - spec.containers[*].securityContext.privileged

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Mon Mar 11 18:43:24 UTC 2024

- 255.8K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/plugin/kubernetes.go

			for _, e := range c.Env {
				pi.ProxyEnvironments[e.Name] = e.Value
			}
			if len(c.Args) >= 2 && c.Args[0] == "proxy" {
				pi.ProxyType = c.Args[1]
			}
			if c.SecurityContext != nil {
				pi.ProxyUID = c.SecurityContext.RunAsUser
				pi.ProxyGID = c.SecurityContext.RunAsGroup
			}
		}
	}
	return pi
}

// containers fetches all containers in the pod.

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Thu Aug 01 18:38:14 UTC 2024

- 3.7K bytes

- Viewed (0)

Search Options