fsGroup - Code Search

cluster/addons/dns/kube-dns/kube-dns.yaml.in

    spec:
      priorityClassName: system-cluster-critical
      securityContext:
        seccompProfile:
          type: RuntimeDefault
        supplementalGroups: [ 65534 ]
        fsGroup: 65534
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Mon Jun 03 03:19:02 UTC 2024

- 7K bytes

- Viewed (0)

github.com/minio/minio

helm-releases/minio-5.0.13.tgz

false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...

Registered: Sun Jun 16 00:44:34 UTC 2024

- Last Modified: Sun Jul 09 07:13:05 UTC 2023

- 20.3K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/policy/v1beta1/generated.proto

  optional SupplementalGroupsStrategyOptions supplementalGroups = 12;

  // fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
  optional FSGroupStrategyOptions fsGroup = 13;

  // readOnlyRootFilesystem when set to true will force containers to run with a read only root file

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon Mar 11 18:43:24 UTC 2024

- 19.6K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

cluster/addons/dns/kube-dns/kube-dns.yaml.base

    spec:
      priorityClassName: system-cluster-critical
      securityContext:
        seccompProfile:
          type: RuntimeDefault
        supplementalGroups: [ 65534 ]
        fsGroup: 65534
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Mon Jun 03 03:19:02 UTC 2024

- 7K bytes

- Viewed (0)

github.com/minio/minio

helm-releases/minio-5.1.0.tgz

false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...

Registered: Sun Jun 16 00:44:34 UTC 2024

- Last Modified: Sun Mar 03 18:49:37 UTC 2024

- 21.3K bytes

- Viewed (0)

github.com/minio/minio

helm-releases/minio-5.2.0.tgz

false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...

Registered: Sun Jun 16 00:44:34 UTC 2024

- Last Modified: Sun Apr 28 10:14:37 UTC 2024

- 21.7K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

pkg/kubelet/kuberuntime/kuberuntime_sandbox.go

		if err != nil {
			return nil, err
		}
		lc.SecurityContext.NamespaceOptions = namespaceOptions

		if sc.FSGroup != nil && runtime.GOOS != "windows" {
			lc.SecurityContext.SupplementalGroups = append(lc.SecurityContext.SupplementalGroups, int64(*sc.FSGroup))
		}
		if groups := m.runtimeHelper.GetExtraSupplementalGroupsForPod(pod); len(groups) > 0 {

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Wed May 29 22:40:29 UTC 2024

- 13.6K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

cluster/addons/dns/kube-dns/kube-dns.yaml.sed

    spec:
      priorityClassName: system-cluster-critical
      securityContext:
        seccompProfile:
          type: RuntimeDefault
        supplementalGroups: [ 65534 ]
        fsGroup: 65534
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Mon Jun 03 03:19:02 UTC 2024

- 7.1K bytes

- Viewed (0)

github.com/istio/istio

samples/addons/loki.yaml

        app.kubernetes.io/part-of: memberlist
    spec:
      serviceAccountName: loki
      automountServiceAccountToken: true
      enableServiceLinks: true
      
      securityContext:
        fsGroup: 10001
        runAsGroup: 10001
        runAsNonRoot: true
        runAsUser: 10001
      terminationGracePeriodSeconds: 30
      containers:
        - name: loki
          image: docker.io/grafana/loki:3.0.0

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jun 12 18:57:35 UTC 2024

- 7.8K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

staging/src/k8s.io/api/storage/v1beta1/types.go

	// contains ReadWriteOnce, then the defined fsGroup will be applied.
	// This is the default behavior if no other FSGroupPolicy is defined.
	ReadWriteOnceWithFSTypeFSGroupPolicy FSGroupPolicy = "ReadWriteOnceWithFSType"

	// FileFSGroupPolicy indicates that CSI driver supports volume ownership
	// and permission change via fsGroup, and Kubernetes will change the permissions

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Mon Nov 27 20:06:32 UTC 2023

- 33.1K bytes

- Viewed (0)

Search Options