- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 247 for fsGroup (0.34 sec)
-
pkg/volume/csi/csi_test.go
} var fsGroup *int64 if pod.Spec.SecurityContext != nil && pod.Spec.SecurityContext.FSGroup != nil { fsGroup = pod.Spec.SecurityContext.FSGroup } csiMounter := mounter.(*csiMountMgr) csiMounter.csiClient = csiClient var mounterArgs volume.MounterArgs mounterArgs.FsGroup = fsGroup err = csiMounter.SetUp(mounterArgs)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Nov 03 15:55:13 UTC 2022 - 21.1K bytes - Viewed (0) -
tests/integration/pilot/testdata/external-forward-proxy-deployment.yaml
app: external-forward-proxy template: metadata: labels: app: external-forward-proxy spec: securityContext: runAsUser: 65534 runAsGroup: 65534 fsGroup: 65534 containers: - name: external-forward-proxy image: envoyproxy/envoy:v1.21.0 imagePullPolicy: IfNotPresent volumeMounts: - name: external-forward-proxy-config
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jul 11 08:07:45 UTC 2023 - 701 bytes - Viewed (0) -
pkg/volume/csi/csi_attacher_test.go
}, { testName: "fsgroup provided, driver supports volume mount group; expect fsgroup to be passed to NodeStageVolume", volName: "test-vol1", devicePath: "path1", deviceMountPath: "path2", fsGroup: &testFSGroup, driverSupportsVolumeMountGroup: true,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Apr 18 12:23:16 UTC 2024 - 58.1K bytes - Viewed (0) -
helm-releases/minio-5.0.2.tgz
false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Sun Dec 18 07:57:10 UTC 2022 - 20.4K bytes - Viewed (0) -
pkg/volume/fc/disk_manager.go
DetachBlockFCDisk(disk fcDiskUnmapper, mntPath, devicePath string) error } // utility to mount a disk based filesystem func diskSetUp(manager diskManager, b fcDiskMounter, volPath string, mounter mount.Interface, fsGroup *int64, fsGroupChangePolicy *v1.PodFSGroupChangePolicy) error { globalPDPath := manager.MakeGlobalPDName(*b.fcDisk) noMnt, err := mounter.IsLikelyNotMountPoint(volPath) if err != nil && !os.IsNotExist(err) {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Apr 03 19:34:37 UTC 2023 - 3K bytes - Viewed (0) -
pkg/volume/iscsi/disk_manager.go
// volPath: pod volume dir path like, /var/lib/kubelet/pods/{podUID}/volumes/kubernetes.io~iscsi/{volumeName} func diskSetUp(manager diskManager, b iscsiDiskMounter, volPath string, mounter mount.Interface, fsGroup *int64, fsGroupChangePolicy *v1.PodFSGroupChangePolicy) error { notMnt, err := mounter.IsLikelyNotMountPoint(volPath) if err != nil && !os.IsNotExist(err) { klog.Errorf("cannot validate mountpoint: %s", volPath) return err
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Apr 03 19:34:37 UTC 2023 - 3.4K bytes - Viewed (0) -
samples/security/psp/sidecar-psp.yaml
spec: # Allow the istio sidecar injector to work allowedCapabilities: - NET_ADMIN - NET_RAW seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny runAsUser: rule: RunAsAny fsGroup: rule: RunAsAny volumes: - '*' --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: istio-sidecar-psp rules: - apiGroups: - extensions resources:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Nov 27 17:55:37 UTC 2023 - 881 bytes - Viewed (0) -
helm-releases/minio-5.0.3.tgz
false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Mon Dec 19 08:53:02 UTC 2022 - 20.3K bytes - Viewed (0) -
helm-releases/minio-5.0.4.tgz
false allowPrivilegeEscala: true allowPrivilegedConta: false allowedCapabilities: [] readOnlyRootFilesyst: false defaultAddCapabiliti: [] requiredDropCapabili: - KILL - MKNOD - SETUID - SETGID fsGroup: type: MustRunAs ranges: - max: {{ .Values.securityContext.fsGroup }} min: {{ .Values.securityContext.fsGroup }} runAsUser: type: MustRunAs uid: {{ .Values.securityContext.runAsUser }} seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClai...
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Fri Dec 23 20:29:40 UTC 2022 - 20.3K bytes - Viewed (0) -
pkg/volume/volume_unsupported.go
limitations under the License. */ package volume import ( v1 "k8s.io/api/core/v1" "k8s.io/kubernetes/pkg/volume/util/types" ) func SetVolumeOwnership(mounter Mounter, dir string, fsGroup *int64, fsGroupChangePolicy *v1.PodFSGroupChangePolicy, completeFunc func(types.CompleteFuncParam)) error { return nil
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Apr 03 19:34:37 UTC 2023 - 886 bytes - Viewed (0)