- Sort Score
- Result 10 results
- Languages All
Results 1 - 7 of 7 for AppArmorFields (0.24 sec)
-
pkg/security/apparmor/helpers.go
return false } // GetProfileName returns the name of the profile to use with the container. func GetProfile(pod *v1.Pod, container *v1.Container) *v1.AppArmorProfile { if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) { return getProfileFromPodAnnotations(pod.Annotations, container.Name) } if container.SecurityContext != nil && container.SecurityContext.AppArmorProfile != nil { return container.SecurityContext.AppArmorProfile
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 18:46:32 UTC 2024 - 3.5K bytes - Viewed (0) -
pkg/features/kube_features.go
AnyVolumeDataSource featuregate.Feature = "AnyVolumeDataSource" // owner: @tallclair // beta: v1.4 AppArmor featuregate.Feature = "AppArmor" // owner: @tallclair // beta: v1.30 AppArmorFields featuregate.Feature = "AppArmorFields" // owner: @danwinship // alpha: v1.27 // beta: v1.29 // GA: v1.30 // // Enables dual-stack --node-ip in kubelet with external cloud providers
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 22:51:23 UTC 2024 - 45.2K bytes - Viewed (0) -
pkg/api/pod/warnings.go
} } // use of container AppArmor annotation without accompanying field if utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) { isPodTemplate := fieldPath != nil // Pod warnings are emitted through applyAppArmorVersionSkew instead. hasAppArmorField := hasPodAppArmorProfile || (c.SecurityContext != nil && c.SecurityContext.AppArmorProfile != nil)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Mar 07 17:51:48 UTC 2024 - 16.6K bytes - Viewed (0) -
pkg/registry/core/pod/strategy.go
// https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/24-apparmor#version-skew-strategy func applyAppArmorVersionSkew(ctx context.Context, pod *api.Pod) { if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) { return } if pod.Spec.OS != nil && pod.Spec.OS.Name == api.Windows { return } var podProfile *api.AppArmorProfile if pod.Spec.SecurityContext != nil {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Mar 07 17:51:48 UTC 2024 - 29.8K bytes - Viewed (0) -
pkg/api/pod/util.go
delete(podAnnotations, k) } } } if (!utilfeature.DefaultFeatureGate.Enabled(features.AppArmor) || !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields)) && !appArmorFieldsInUse(oldPodSpec) { if podSpec.SecurityContext != nil { podSpec.SecurityContext.AppArmorProfile = nil } VisitContainers(podSpec, AllContainers, func(c *api.Container, _ ContainerType) bool {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 41.3K bytes - Viewed (0) -
pkg/api/pod/util_test.go
featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, features.AppArmor, enabled) featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, features.AppArmorFields, fieldsEnabled) newPod := test.pod.DeepCopy() if hasAnnotations := appArmorAnnotationsInUse(newPod.Annotations); hasAnnotations != test.hasAnnotations {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 108.8K bytes - Viewed (0) -
pkg/apis/core/validation/validation.go
func validateAppArmorAnnotationsAndFieldsMatchOnCreate(objectMeta metav1.ObjectMeta, podSpec *core.PodSpec, specPath *field.Path) field.ErrorList { if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) { return nil } if podSpec.OS != nil && podSpec.OS.Name == core.Windows { // Skip consistency check for windows pods. return nil } allErrs := field.ErrorList{}
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 349.5K bytes - Viewed (0)