- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 25 for SecurityContext (0.17 sec)
-
manifests/charts/gateway/templates/deployment.yaml
imagePullSecrets: {{- toYaml . | nindent 8 }} {{- end }} serviceAccountName: {{ include "gateway.serviceAccountName" . }} securityContext: {{- if .Values.securityContext }} {{- toYaml .Values.securityContext | nindent 8 }} {{- else }} # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 sysctls:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 22:42:29 UTC 2024 - 3.8K bytes - Viewed (0) -
manifests/addons/values-grafana.yaml
GF_AUTH_BASIC_ENABLED: "false" GF_AUTH_ANONYMOUS_ENABLED: "true" GF_AUTH_ANONYMOUS_ORG_ROLE: Admin # Expose on port 3000 to match the Istio docs service: port: 3000 securityContext: null # Set up out dashboards dashboardProviders: dashboardproviders.yaml: apiVersion: 1 providers: - name: "istio" orgId: 1 folder: "istio" type: file
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 20:46:28 UTC 2024 - 1.7K bytes - Viewed (0) -
cluster/gce/manifests/kube-proxy.manifest
{{kube_watchlist_inconsistency_detector_env_value}} {{kube_list_from_cache_inconsistency_detector_env_name}} {{kube_list_from_cache_inconsistency_detector_env_value}} securityContext: privileged: true volumeMounts: - mountPath: /etc/ssl/certs name: etc-ssl-certs readOnly: true - mountPath: /usr/share/ca-certificates name: usr-ca-certs
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Jun 07 11:08:30 UTC 2024 - 2.2K bytes - Viewed (0) -
pkg/kubelet/container/helpers.go
var hasPrivileged bool podutil.VisitContainers(&pod.Spec, podutil.AllFeatureEnabledContainers(), func(c *v1.Container, containerType podutil.ContainerType) bool { if c.SecurityContext != nil && c.SecurityContext.Privileged != nil && *c.SecurityContext.Privileged { hasPrivileged = true return false } return true }) return hasPrivileged }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 04 06:25:43 UTC 2024 - 14.3K bytes - Viewed (0) -
samples/addons/loki.yaml
app.kubernetes.io/part-of: memberlist spec: serviceAccountName: loki automountServiceAccountToken: true enableServiceLinks: true securityContext: fsGroup: 10001 runAsGroup: 10001 runAsNonRoot: true runAsUser: 10001 terminationGracePeriodSeconds: 30 containers: - name: loki
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 18:57:35 UTC 2024 - 7.8K bytes - Viewed (0) -
pkg/kubelet/config/config_test.go
DNSPolicy: v1.DNSClusterFirst, Containers: []v1.Container{ { Name: "ctr", Image: "image", ImagePullPolicy: "IfNotPresent", SecurityContext: securitycontext.ValidSecurityContextWithContainerDefaults(), TerminationMessagePolicy: v1.TerminationMessageReadFile, }, }, }, } }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 04 06:25:43 UTC 2024 - 17.1K bytes - Viewed (0) -
manifests/charts/ztunnel/templates/daemonset.yaml
resources: {{- if .Values.resources }} {{ toYaml .Values.resources | trim | indent 10 }} {{- end }} {{- with .Values.imagePullPolicy }} imagePullPolicy: {{ . }} {{- end }} securityContext: allowPrivilegeEscalation: false privileged: false capabilities: drop: - ALL add: # See https://man7.org/linux/man-pages/man7/capabilities.7.html
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jun 11 01:33:52 UTC 2024 - 5.6K bytes - Viewed (0) -
manifests/charts/gateway/values.yaml
# If unset, this will be automatically set to the minimum privileges required to bind to port 80 and 443. # On Kubernetes 1.22+, this only requires the `net.ipv4.ip_unprivileged_port_start` sysctl. securityContext: {} containerSecurityContext: {} service: # Type of service. Set to "None" to disable the service entirely type: LoadBalancer ports: - name: status-port port: 15021
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jun 07 16:51:35 UTC 2024 - 4.4K bytes - Viewed (0) -
pkg/kubelet/volumemanager/volume_manager_test.go
} defer os.RemoveAll(tmpDir) podManager := kubepod.NewBasicPodManager() node, pod, _, claim := createObjects(v1.PersistentVolumeFilesystem, v1.PersistentVolumeFilesystem) existingGid := pod.Spec.SecurityContext.SupplementalGroups[0] cases := []struct { gidAnnotation string expected []int64 }{ { gidAnnotation: "777", expected: []int64{777}, }, {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 04 06:25:43 UTC 2024 - 14.1K bytes - Viewed (0) -
api/openapi-spec/v3/apis__batch__v1_openapi.json
- spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation...
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 05 18:37:07 UTC 2024 - 485.4K bytes - Viewed (0)