Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 7 of 7 for AppArmorFields (0.84 sec)

  1. pkg/security/apparmor/helpers.go

    	return false
    }
    
    // GetProfileName returns the name of the profile to use with the container.
    func GetProfile(pod *v1.Pod, container *v1.Container) *v1.AppArmorProfile {
    	if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) {
    		return getProfileFromPodAnnotations(pod.Annotations, container.Name)
    	}
    
    	if container.SecurityContext != nil && container.SecurityContext.AppArmorProfile != nil {
    		return container.SecurityContext.AppArmorProfile
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed Mar 06 18:46:32 UTC 2024
    - 3.5K bytes
    - Viewed (0)
  2. pkg/features/kube_features.go

    	AnyVolumeDataSource featuregate.Feature = "AnyVolumeDataSource"
    
    	// owner: @tallclair
    	// beta: v1.4
    	AppArmor featuregate.Feature = "AppArmor"
    
    	// owner: @tallclair
    	// beta: v1.30
    	AppArmorFields featuregate.Feature = "AppArmorFields"
    
    	// owner: @danwinship
    	// alpha: v1.27
    	// beta: v1.29
    	// GA: v1.30
    	//
    	// Enables dual-stack --node-ip in kubelet with external cloud providers
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed Jun 12 22:51:23 UTC 2024
    - 45.2K bytes
    - Viewed (0)
  3. pkg/api/pod/warnings.go

    			}
    		}
    
    		// use of container AppArmor annotation without accompanying field
    		if utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) {
    			isPodTemplate := fieldPath != nil // Pod warnings are emitted through applyAppArmorVersionSkew instead.
    			hasAppArmorField := hasPodAppArmorProfile || (c.SecurityContext != nil && c.SecurityContext.AppArmorProfile != nil)
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Thu Mar 07 17:51:48 UTC 2024
    - 16.6K bytes
    - Viewed (0)
  4. pkg/registry/core/pod/strategy.go

    // https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/24-apparmor#version-skew-strategy
    func applyAppArmorVersionSkew(ctx context.Context, pod *api.Pod) {
    	if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) {
    		return
    	}
    
    	if pod.Spec.OS != nil && pod.Spec.OS.Name == api.Windows {
    		return
    	}
    
    	var podProfile *api.AppArmorProfile
    	if pod.Spec.SecurityContext != nil {
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Thu Mar 07 17:51:48 UTC 2024
    - 29.8K bytes
    - Viewed (0)
  5. pkg/api/pod/util.go

    				delete(podAnnotations, k)
    			}
    		}
    	}
    	if (!utilfeature.DefaultFeatureGate.Enabled(features.AppArmor) || !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields)) && !appArmorFieldsInUse(oldPodSpec) {
    		if podSpec.SecurityContext != nil {
    			podSpec.SecurityContext.AppArmorProfile = nil
    		}
    		VisitContainers(podSpec, AllContainers, func(c *api.Container, _ ContainerType) bool {
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed May 29 22:40:29 UTC 2024
    - 41.3K bytes
    - Viewed (0)
  6. pkg/api/pod/util_test.go

    					featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, features.AppArmor, enabled)
    					featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, features.AppArmorFields, fieldsEnabled)
    
    					newPod := test.pod.DeepCopy()
    
    					if hasAnnotations := appArmorAnnotationsInUse(newPod.Annotations); hasAnnotations != test.hasAnnotations {
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed May 29 22:40:29 UTC 2024
    - 108.8K bytes
    - Viewed (0)
  7. pkg/apis/core/validation/validation.go

    func validateAppArmorAnnotationsAndFieldsMatchOnCreate(objectMeta metav1.ObjectMeta, podSpec *core.PodSpec, specPath *field.Path) field.ErrorList {
    	if !utilfeature.DefaultFeatureGate.Enabled(features.AppArmorFields) {
    		return nil
    	}
    	if podSpec.OS != nil && podSpec.OS.Name == core.Windows {
    		// Skip consistency check for windows pods.
    		return nil
    	}
    
    	allErrs := field.ErrorList{}
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed May 29 22:40:29 UTC 2024
    - 349.5K bytes
    - Viewed (0)
Back to top