- Sort Score
- Result 10 results
- Languages All
Results 21 - 30 of 590 for SecurityContext (0.18 sec)
-
pkg/kubelet/kuberuntime/kuberuntime_sandbox.go
}, } sysctls := make(map[string]string) if pod.Spec.SecurityContext != nil { for _, c := range pod.Spec.SecurityContext.Sysctls { sysctls[c.Name] = c.Value } } lc.Sysctls = sysctls if pod.Spec.SecurityContext != nil { sc := pod.Spec.SecurityContext if sc.RunAsUser != nil && runtime.GOOS != "windows" { lc.SecurityContext.RunAsUser = &runtimeapi.Int64Value{Value: int64(*sc.RunAsUser)} }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 13.6K bytes - Viewed (0) -
pkg/registry/core/pod/strategy_test.go
assert.Equal(t, api.AppArmorProfileTypeLocalhost, pod.Spec.Containers[0].SecurityContext.AppArmorProfile.Type) assert.Equal(t, testProfile, *pod.Spec.Containers[0].SecurityContext.AppArmorProfile.LocalhostProfile) assert.Nil(t, pod.Spec.Containers[1].SecurityContext) assert.Nil(t, pod.Spec.Containers[2].SecurityContext)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 76.2K bytes - Viewed (0) -
pkg/kubelet/config/common_test.go
ImagePullPolicy: "IfNotPresent", TerminationMessagePath: "/dev/termination-log", TerminationMessagePolicy: v1.TerminationMessageReadFile, SecurityContext: securitycontext.ValidSecurityContextWithContainerDefaults(), }}, SecurityContext: &v1.PodSecurityContext{}, SchedulerName: v1.DefaultSchedulerName, EnableServiceLinks: &enableServiceLinks, }, Status: v1.PodStatus{
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Nov 03 18:40:48 UTC 2023 - 8.7K bytes - Viewed (0) -
helm/minio/templates/securitycontextconstraints.yaml
defaultAddCapabilities: [] requiredDropCapabilities: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Fri Aug 20 22:30:54 UTC 2021 - 1.1K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/helpers_linux_test.go
containerSc: &v1.SecurityContext{SeccompProfile: &v1.SeccompProfile{Type: v1.SeccompProfileTypeLocalhost}}, expectedError: "localhostProfile must be set if seccompProfile type is Localhost.", }, { description: "container seccomp profile set to SeccompProfileTypeLocalhost returns 'localhost/' + LocalhostProfile",
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 16.6K bytes - Viewed (0) -
samples/bookinfo/platform/kube/bookinfo-psa.yaml
################################################################################################## # This file defines the same services, service accounts, and deployments as bookinfo.yaml with # added securityContext fields to allow the bookinfo demo to run on a PodSecurityAdmission # enabled cluster that enforces the baseline policy. ##################################################################################################
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Jun 03 19:54:05 UTC 2024 - 8.1K bytes - Viewed (0) -
pkg/kubelet/sysctl/util_test.go
{ Name: "net.ipv4.ip_local_port_range", Value: "1024 65535", }, } securityContext := &v1.PodSecurityContext{ Sysctls: sysctls, } ConvertPodSysctlsVariableToDotsSeparator(securityContext) assert.Equalf(t, exceptSysctls, securityContext.Sysctls, "The sysctls name was not converted correctly. got: %s, want: %s", securityContext.Sysctls, exceptSysctls)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 27 22:58:28 UTC 2023 - 1.7K bytes - Viewed (0) -
helm/minio/templates/statefulset.yaml
runtimeClassName: "{{ .Values.runtimeClassName }}" {{- end }} {{- if and .Values.securityContext.enabled .Values.persistence.enabled }} securityContext: runAsUser: {{ .Values.securityContext.runAsUser }} runAsGroup: {{ .Values.securityContext.runAsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }} {{- if and (ge .Capabilities.KubeVersion.Major "1") (ge .Capabilities.KubeVersion.Minor "20") }}
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Fri Apr 26 07:50:24 UTC 2024 - 10.7K bytes - Viewed (0) -
hack/testdata/pod-restricted-runtime-default.yaml
apiVersion: v1 kind: Pod metadata: labels: run: target name: target spec: securityContext: seccompProfile: type: RuntimeDefault containers: - image: busybox name: target command: ["/bin/sh", "-c", "sleep 100"] securityContext: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true allowPrivilegeEscalation: false capabilities: drop:
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 24 11:16:49 UTC 2023 - 437 bytes - Viewed (0) -
pkg/securitycontext/doc.go
See the License for the specific language governing permissions and limitations under the License. */ // Package securitycontext contains security context api implementations
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Jul 16 17:48:21 UTC 2016 - 718 bytes - Viewed (0)