- Sort Score
- Result 10 results
- Languages All
Results 71 - 80 of 573 for Mounts (0.12 sec)
-
common-protos/k8s.io/api/policy/v1beta1/generated.proto
// `/foo` would allow `/foo`, `/foo/` and `/foo/bar` // `/foo` would not allow `/food` or `/etc/foo` optional string pathPrefix = 1; // when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly. // +optional optional bool readOnly = 2; } // Eviction evicts a pod from its node subject to certain policies and safety constraints.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Mar 11 18:43:24 UTC 2024 - 19.6K bytes - Viewed (0) -
src/syscall/exec_linux.go
goto childerror } if _, _, err1 = RawSyscall(SYS_CLOSE, fd1, 0, 0); err1 != 0 { goto childerror } } // The unshare system call in Linux doesn't unshare mount points // mounted with --shared. Systemd mounts / with --shared. For a // long discussion of the pros and cons of this see debian bug 739593. // The Go model of unsharing is more like Plan 9, where you ask
Registered: Wed Jun 12 16:32:35 UTC 2024 - Last Modified: Wed May 15 07:45:37 UTC 2024 - 23K bytes - Viewed (0) -
pkg/volume/emptydir/empty_dir_test.go
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 21 10:18:16 UTC 2024 - 30.7K bytes - Viewed (0) -
pkg/apis/core/validation/validation.go
return true } } return false } func deviceNameAlreadyExists(name string, mounts map[string]string) bool { if _, ok := mounts[name]; ok { return true } return false } func devicePathAlreadyExists(devicePath string, mounts map[string]string) bool { for _, mountPath := range mounts { if mountPath == devicePath { return true } } return false }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 349.5K bytes - Viewed (0) -
samples/security/spire/spire-quickstart.yaml
- mountPath: /spiffe-csi name: spiffe-csi-socket-dir # The volume containing mount points for containers. - mountPath: /var/lib/kubelet/pods mountPropagation: Bidirectional name: mountpoint-dir securityContext: privileged: true
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Oct 12 16:12:42 UTC 2023 - 32.2K bytes - Viewed (0) -
staging/src/k8s.io/api/core/v1/types.go
// MountPropagationBidirectional means that the volume in a container will // receive new mounts from the host or other containers, and its own mounts // will be propagated from the container to the host or other containers. // Note that this mode is recursively applied to all mounts in the volume // ("rshared" in Linux terminology). MountPropagationBidirectional MountPropagationMode = "Bidirectional" )
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 390.8K bytes - Viewed (0) -
security/pkg/nodeagent/cache/secretcache.go
totalTimeout = time.Second * 10 ) const ( // firstRetryBackOffDuration is the initial backoff time interval when hitting // non-retryable error in CSR request or while there is an error in reading file mounts. firstRetryBackOffDuration = 50 * time.Millisecond ) // SecretManagerClient a SecretManager that signs CSRs using a provided security.Client. The primary
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Mar 04 08:29:46 UTC 2024 - 28.2K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/kuberuntime_container_linux_test.go
WorkingDir: container.WorkingDir, Labels: newContainerLabels(container, pod), Annotations: newContainerAnnotations(container, pod, restartCount, opts), Devices: makeDevices(opts), Mounts: m.makeMounts(opts, container), LogPath: containerLogsPath, Stdin: container.Stdin, StdinOnce: container.StdinOnce, Tty: container.TTY, Linux: l, Envs: envs,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 41K bytes - Viewed (0) -
pkg/apis/apps/validation/validation.go
} } // TODO: Add validation for PodSpec, currently this will check volumes, which we know will // fail. We should really check that the union of the given volumes and volumeClaims match // volume mounts in the containers. // allErrs = append(allErrs, apivalidation.ValidatePodTemplateSpec(template, fldPath)...) allErrs = append(allErrs, unversionedvalidation.ValidateLabels(template.Labels, fldPath.Child("labels"))...)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Apr 06 22:11:20 UTC 2024 - 41.4K bytes - Viewed (0) -
pkg/istio-agent/agent_test.go
a.Security.CARootPath = cafile.CACertFilePath return a }).Check(t, cfg.GetRootResourceName(), cfg.GetResourceName()) }) t.Run("Implicit file mounted certs", func(t *testing.T) { // User mounts certificates in /etc/certs (hardcoded path). CA communication is disabled. // mTLS is always used for authentication with Istiod, never JWT. copyCerts(t, "./etc/certs") t.Cleanup(func() {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 16 22:12:28 UTC 2024 - 33.4K bytes - Viewed (0)