Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 5 of 5 for selinuxRelabel (0.42 sec)

  1. pkg/kubelet/kuberuntime/kuberuntime_container.go

    	volumeMounts := []*runtimeapi.Mount{}
    
    	for idx := range opts.Mounts {
    		v := opts.Mounts[idx]
    		selinuxRelabel := v.SELinuxRelabel && selinux.GetEnabled()
    		mount := &runtimeapi.Mount{
    			HostPath:          v.HostPath,
    			ContainerPath:     v.ContainerPath,
    			Readonly:          v.ReadOnly,
    			SelinuxRelabel:    selinuxRelabel,
    			Propagation:       v.Propagation,
    			RecursiveReadOnly: v.RecursiveReadOnly,
    		}
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Tue Jun 04 06:25:43 UTC 2024
    - 54.7K bytes
    - Viewed (0)
  2. pkg/kubelet/container/runtime.go

    	// Whether the mount is read-only.
    	ReadOnly bool
    	// Whether the mount is recursive read-only.
    	// Must not be true if ReadOnly is false.
    	RecursiveReadOnly bool
    	// Whether the mount needs SELinux relabeling
    	SELinuxRelabel bool
    	// Requested propagation mode
    	Propagation runtimeapi.MountPropagation
    }
    
    // PortMapping contains information about the port mapping.
    type PortMapping struct {
    	// Protocol of the port mapping.
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Fri Jun 07 00:05:23 UTC 2024
    - 27.8K bytes
    - Viewed (0)
  3. pkg/kubelet/kubelet_pods.go

    		// If the volume supports SELinux and it has not been
    		// relabeled already and it is not a read-only volume,
    		// relabel it and mark it as labeled
    		if vol.Mounter.GetAttributes().Managed && vol.Mounter.GetAttributes().SELinuxRelabel && !vol.SELinuxLabeled {
    			vol.SELinuxLabeled = true
    			relabelVolume = true
    		}
    		hostPath, err := volumeutil.GetPath(vol.Mounter)
    		if err != nil {
    			return nil, cleanupAction, err
    		}
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Fri Jun 14 16:09:17 UTC 2024
    - 101.2K bytes
    - Viewed (0)
  4. pkg/volume/testing/testing.go

    		volumeName = spec.Name()
    	}
    	return volumeName, nil
    }
    
    func (_ *FakeVolume) GetAttributes() volume.Attributes {
    	return volume.Attributes{
    		ReadOnly:       false,
    		Managed:        true,
    		SELinuxRelabel: true,
    	}
    }
    
    func (fv *FakeVolume) SetUp(mounterArgs volume.MounterArgs) error {
    	fv.Lock()
    	defer fv.Unlock()
    	err := fv.setupInternal(mounterArgs)
    	fv.SetUpCallCount++
    	return err
    }
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Fri May 31 12:32:15 UTC 2024
    - 53.3K bytes
    - Viewed (0)
  5. pkg/kubelet/volumemanager/cache/desired_state_of_world.go

    					ReportedInUse:           volumeObj.reportedInUse,
    					MountRequestTime:        podObj.mountRequestTime,
    					DesiredSizeLimit:        volumeObj.desiredSizeLimit,
    					SELinuxLabel:            volumeObj.effectiveSELinuxMountFileLabel,
    				},
    			}
    			if volumeObj.persistentVolumeSize != nil {
    				vmt.DesiredPersistentVolumeSize = volumeObj.persistentVolumeSize.DeepCopy()
    			}
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Tue Jun 04 06:25:43 UTC 2024
    - 27.1K bytes
    - Viewed (0)
Back to top