- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 152 for hostIPC (0.1 sec)
-
pkg/kubelet/sysctl/allowlist_test.go
} } for _, test := range invalid { if err := w.validateSysctl(test.sysctl, test.hostNet, test.hostIPC); err == nil { t.Errorf("expected to be rejected: %+v", test) } pod.Spec.HostNetwork = test.hostNet pod.Spec.HostIPC = test.hostIPC pod.Spec.SecurityContext.Sysctls = []v1.Sysctl{{Name: test.sysctl, Value: test.sysctl}} status := w.Admit(attrs) if status.Admit {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 27 22:58:54 UTC 2023 - 3.6K bytes - Viewed (0) -
pkg/api/testing/backward_compatibility_test.go
"spec.hostNetwork", }, }, { name: "hostIPC = true", input: ` { "kind":"Pod", "apiVersion":"v1", "metadata":{"name":"my-pod-name", "namespace":"my-pod-namespace"}, "spec": { "hostIPC": true, "containers":[{ "name":"a", "image":"my-container-image" }] } } `, expectedKeys: map[string]string{ "spec.hostIPC": "true", }, }, { name: "hostIPC = false",
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Mar 01 18:45:58 UTC 2021 - 3.5K bytes - Viewed (0) -
pkg/kubelet/sysctl/allowlist.go
// // The parameters hostNet and hostIPC are used to forbid sysctls for pod sharing the // respective namespaces with the host. This check is only possible for sysctls on // the static default allowlist, not those on the custom allowlist provided by the admin. func (w *patternAllowlist) validateSysctl(sysctl string, hostNet, hostIPC bool) error { sysctl = utilsysctl.NormalizeName(sysctl)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 27 22:58:54 UTC 2023 - 4K bytes - Viewed (0) -
pkg/securitycontext/accessors_test.go
continue } } // HostIPC { modifiedSC := nonNilSC(tc.newSC()) m := NewPodSecurityContextMutator(tc.newSC()) modifiedSC.HostIPC = !modifiedSC.HostIPC m.SetHostIPC(!m.HostIPC()) if !reflect.DeepEqual(m.PodSecurityContext(), modifiedSC) {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 22 16:15:27 UTC 2023 - 27.8K bytes - Viewed (0) -
pkg/securitycontext/accessors.go
return } w.ensurePodSC() w.podSC.HostPID = v } func (w *podSecurityContextWrapper) HostIPC() bool { if w.podSC == nil { return false } return w.podSC.HostIPC } func (w *podSecurityContextWrapper) SetHostIPC(v bool) { if w.podSC == nil && v == false { return } w.ensurePodSC() w.podSC.HostIPC = v } func (w *podSecurityContextWrapper) SELinuxOptions() *api.SELinuxOptions {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 22 16:15:27 UTC 2023 - 14.4K bytes - Viewed (0) -
staging/src/k8s.io/apimachinery/pkg/apis/testapigroup/v1/types.go
// Use the host's ipc namespace. // Optional: Default to false. // +k8s:conversion-gen=false // +optional HostIPC bool `json:"hostIPC,omitempty" protobuf:"varint,13,opt,name=hostIPC"` // Specifies the hostname of the Carp // If not specified, the carp's hostname will be set to a system-defined value. // +optional
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Feb 20 15:45:02 UTC 2024 - 9.2K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/apis/example/v1/types.go
// Use the host's ipc namespace. // Optional: Default to false. // +k8s:conversion-gen=false // +optional HostIPC bool `json:"hostIPC,omitempty" protobuf:"varint,13,opt,name=hostIPC"` // Specifies the hostname of the Pod // If not specified, the pod's hostname will be set to a system-defined value. // +optional
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Feb 20 15:45:02 UTC 2024 - 9.1K bytes - Viewed (0) -
staging/src/k8s.io/client-go/applyconfigurations/core/v1/podspec.go
return b } // WithHostIPC sets the HostIPC field in the declarative configuration to the given value // and returns the receiver, so that objects can be built by chaining "With" function invocations. // If called multiple times, the HostIPC field is set to the value of the last call. func (b *PodSpecApplyConfiguration) WithHostIPC(value bool) *PodSpecApplyConfiguration { b.HostIPC = &value return b }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Nov 10 19:22:42 UTC 2022 - 23.9K bytes - Viewed (0) -
pkg/apis/core/v1/conversion.go
// the host namespace fields have to be handled here for backward compatibility // with v1.0.0 out.HostPID = in.SecurityContext.HostPID out.HostNetwork = in.SecurityContext.HostNetwork out.HostIPC = in.SecurityContext.HostIPC out.ShareProcessNamespace = in.SecurityContext.ShareProcessNamespace out.HostUsers = in.SecurityContext.HostUsers } return nil }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Apr 19 22:30:55 UTC 2024 - 19K bytes - Viewed (0) -
pkg/kubelet/kuberuntime/util/util_test.go
Network: runtimeapi.NamespaceMode_POD, Pid: runtimeapi.NamespaceMode_CONTAINER, }, }, "Host Namespaces": { input: &v1.Pod{ Spec: v1.PodSpec{ HostIPC: true, HostNetwork: true, HostPID: true, }, }, expected: &runtimeapi.NamespaceOption{ Ipc: runtimeapi.NamespaceMode_NODE, Network: runtimeapi.NamespaceMode_NODE,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 13 23:14:48 UTC 2024 - 6.3K bytes - Viewed (0)