privilege - Code Search

.devcontainer/devcontainer.json

{
  "name": "istio build-tools",
  "image": "gcr.io/istio-testing/build-tools:master-89ff97db972e1ec7d61a7831bf9408f509e17d73",
  "privileged": true,
  "remoteEnv": {
    "USE_GKE_GCLOUD_AUTH_PLUGIN": "True",
    "BUILD_WITH_CONTAINER": "0",
    "CARGO_HOME": "/home/.cargo",
    "RUSTUP_HOME": "/home/.rustup"
  },
  "features": {
    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {},
    "ghcr.io/mpriscella/features/kind:1": {}
  },

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jun 12 14:37:27 UTC 2024

- 879 bytes

- Viewed (0)

github.com/kubernetes/kubernetes

pkg/capabilities/capabilities.go

// Capabilities defines the set of capabilities available within the system.
// For now these are global.  Eventually they may be per-user
type Capabilities struct {
	AllowPrivileged bool

	// Pod sources from which to allow privileged capabilities like host networking, sharing the host
	// IPC namespace, and sharing the host PID namespace.
	PrivilegedSources PrivilegedSources

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Tue May 21 12:51:16 UTC 2019

- 3K bytes

- Viewed (0)

github.com/golang/go

src/internal/cpu/cpu_ppc64x_other.go

// license that can be found in the LICENSE file.

//go:build (ppc64 || ppc64le) && !aix && !linux

package cpu

func osinit() {
	// Other operating systems do not support reading HWCap from auxiliary vector,
	// reading privileged system registers or sysctl in user space to detect CPU
	// features at runtime.

Registered: Wed Jun 12 16:32:35 UTC 2024

- Last Modified: Sat Mar 18 06:24:06 UTC 2023

- 423 bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/list.yaml.injected

              cpu: 100m
              memory: 128Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
            runAsGroup: 1337
            runAsNonRoot: true
            runAsUser: 1337
          startupProbe:
            failureThreshold: 600

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 14.2K bytes

- Viewed (0)

github.com/golang/go

src/internal/cpu/cpu_arm64_other.go

//go:build arm64 && !linux && !freebsd && !android && (!darwin || ios) && !openbsd

package cpu

func osInit() {
	// Other operating systems do not support reading HWCap from auxiliary vector,
	// reading privileged aarch64 system registers or sysctl in user space to detect
	// CPU features at runtime.

Registered: Wed Jun 12 16:32:35 UTC 2024

- Last Modified: Mon Aug 08 15:07:46 UTC 2022

- 466 bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/explicit-security-context.yaml.injected

          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:
          failureThreshold: 600
          httpGet:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/prometheus-scrape2.yaml.injected

        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    startupProbe:
      failureThreshold: 600
      httpGet:
        path: /healthz/ready

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/replicationcontroller.yaml.injected

          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:
          failureThreshold: 600
          httpGet:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/prometheus-scrape.yaml.injected

        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    startupProbe:
      failureThreshold: 600
      httpGet:
        path: /healthz/ready

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/proxy-override-args.yaml.injected

          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:
          failureThreshold: 600
          httpGet:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.4K bytes

- Viewed (0)

Search Options