- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 203 for fsGroup (0.2 sec)
-
pkg/volume/csi/csi_mounter_test.go
fsType: "", }, { name: "default fstype with fsgroup (should not apply fsgroup)", accessModes: []corev1.PersistentVolumeAccessMode{ corev1.ReadWriteOnce, }, readOnly: false, fsType: "", setFsGroup: true, fsGroup: 3000, }, { name: "fstype, fsgroup, RWM, ROM provided (should not apply fsgroup)", accessModes: []corev1.PersistentVolumeAccessMode{
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 50.1K bytes - Viewed (0) -
pkg/volume/csi/csi_mounter.go
} if driverSupportsCSIVolumeMountGroup { klog.V(3).Infof("Driver %s supports applying FSGroup (has VOLUME_MOUNT_GROUP node capability). Delegating FSGroup application to the driver through NodePublishVolume.", c.driverName) nodePublishFSGroupArg = mounterArgs.FsGroup } var selinuxLabelMount bool if utilfeature.DefaultFeatureGate.Enabled(features.SELinuxMountReadWriteOncePod) {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jan 30 10:47:59 UTC 2024 - 21K bytes - Viewed (0) -
staging/src/k8s.io/client-go/applyconfigurations/core/v1/podsecuritycontext.go
return b } // WithFSGroup sets the FSGroup field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the FSGroup field is set to the value of the last call. func (b *PodSecurityContextApplyConfiguration) WithFSGroup(value int64) *PodSecurityContextApplyConfiguration { b.FSGroup = &value return b }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 8.1K bytes - Viewed (0) -
pkg/volume/csi/csi_client_test.go
} } else { mountVolume := &csipbv1.VolumeCapability_MountVolume{ FsType: fsType, MountFlags: mountOptions, } if fsGroup != nil { mountVolume.VolumeMountGroup = strconv.FormatInt(*fsGroup, 10 /* base */) } req.VolumeCapability.AccessType = &csipbv1.VolumeCapability_Mount{ Mount: mountVolume, } } _, err := c.nodeClient.NodePublishVolume(ctx, req)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 33.9K bytes - Viewed (0) -
tests/integration/pilot/testdata/external-forward-proxy-deployment.yaml
app: external-forward-proxy template: metadata: labels: app: external-forward-proxy spec: securityContext: runAsUser: 65534 runAsGroup: 65534 fsGroup: 65534 containers: - name: external-forward-proxy image: envoyproxy/envoy:v1.21.0 imagePullPolicy: IfNotPresent volumeMounts: - name: external-forward-proxy-config
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jul 11 08:07:45 UTC 2023 - 701 bytes - Viewed (0) -
pkg/volume/csi/csi_attacher_test.go
}, { testName: "fsgroup provided, driver supports volume mount group; expect fsgroup to be passed to NodeStageVolume", volName: "test-vol1", devicePath: "path1", deviceMountPath: "path2", fsGroup: &testFSGroup, driverSupportsVolumeMountGroup: true,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Apr 18 12:23:16 UTC 2024 - 58.1K bytes - Viewed (0) -
samples/security/psp/sidecar-psp.yaml
spec: # Allow the istio sidecar injector to work allowedCapabilities: - NET_ADMIN - NET_RAW seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny runAsUser: rule: RunAsAny fsGroup: rule: RunAsAny volumes: - '*' --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: istio-sidecar-psp rules: - apiGroups: - extensions resources:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Nov 27 17:55:37 UTC 2023 - 881 bytes - Viewed (0) -
pkg/kubelet/kuberuntime/security_context.go
if err != nil { return nil, err } synthesized.NamespaceOptions = namespaceOptions podSc := pod.Spec.SecurityContext if podSc != nil { if podSc.FSGroup != nil { synthesized.SupplementalGroups = append(synthesized.SupplementalGroups, int64(*podSc.FSGroup)) } if podSc.SupplementalGroups != nil { for _, sg := range podSc.SupplementalGroups {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 5.2K bytes - Viewed (0) -
pkg/volume/projected/projected.go
payload[k] = v } case source.ServiceAccountToken != nil: tp := source.ServiceAccountToken // When FsGroup is set, we depend on SetVolumeOwnership to // change from 0600 to 0640. mode := *s.source.DefaultMode if mounterArgs.FsUser != nil || mounterArgs.FsGroup != nil { mode = 0600 } var auds []string if len(tp.Audience) != 0 { auds = []string{tp.Audience} }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 14 06:17:25 UTC 2024 - 12.8K bytes - Viewed (0) -
helm/minio/templates/deployment.yaml
securityContext: runAsUser: {{ .Values.securityContext.runAsUser }} runAsGroup: {{ .Values.securityContext.runAsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }} {{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor "20") }} fsGroupChangePolicy: {{ .Values.securityContext.fsGroupChangePolicy }} {{- end }}
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Sun Mar 03 17:50:39 UTC 2024 - 8.7K bytes - Viewed (0)