- Sort Score
- Result 10 results
- Languages All
Results 51 - 60 of 88 for SELinux (0.16 sec)
-
pkg/features/kube_features.go
// owner: @jsafrane // kep: https://kep.k8s.io/1710 // alpha: v1.25 // beta: v1.27 // Speed up container startup by mounting volumes with the correct SELinux label // instead of changing each file on the volumes recursively. // Initial implementation focused on ReadWriteOncePod volumes. SELinuxMountReadWriteOncePod featuregate.Feature = "SELinuxMountReadWriteOncePod"
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 22:51:23 UTC 2024 - 45.2K bytes - Viewed (0) -
pkg/volume/csi/csi_mounter.go
if err != nil { // The volume is mounted. Return UncertainProgressError, so kubelet will unmount it when user deletes the pod. return volumetypes.NewUncertainProgressError(fmt.Sprintf("error checking for SELinux support: %s", err)) } } if !driverSupportsCSIVolumeMountGroup && c.supportsFSGroup(fsType, mounterArgs.FsGroup, fsGroupPolicy) { // Driver doesn't support applying FSGroup. Kubelet must apply it instead.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jan 30 10:47:59 UTC 2024 - 21K bytes - Viewed (1) -
pkg/volume/util/util_test.go
{ Name: "vol1", }, { Name: "vol2", }, }, }, { Name: "container2", // No SELinux context, will be inherited from PodSecurityContext VolumeMounts: []v1.VolumeMount{ { Name: "vol2", }, { Name: "vol3", }, }, },
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri May 31 12:32:15 UTC 2024 - 28.7K bytes - Viewed (0) -
api/openapi-spec/v3/apis__storage.k8s.io__v1_openapi.json
NodeStage / NodePublish with \"-o context=xyz\" mount option when mounting a ReadWriteOncePod volume used in Pod that has explicitly set SELinux context. In the future, it may be expanded to other volume AccessModes. In any case, Kubernetes will ensure that the volume is mounted only with a single SELinux context.\n\nWhen \"false\", Kubernetes won't pass any special SELinux mount options to the driver. This is typical for volumes that represent subdirectories of a bigger shared filesystem.\n\nDefault is...
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 08 04:18:56 UTC 2024 - 481.9K bytes - Viewed (0) -
api/openapi-spec/v3/apis__apps__v1_openapi.json
"level": { "description": "Level is SELinux level label that applies to the container.", "type": "string" }, "role": { "description": "Role is a SELinux role label that applies to the container.", "type": "string" }, "type": { "description": "Type is a SELinux type label that applies to the container.",
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 29 22:40:29 UTC 2024 - 810.7K bytes - Viewed (0) -
cmd/peer-rest-client.go
resp, err := getOSInfoRPC.Call(ctx, client.gridConn(), grid.NewMSS()) return resp.ValueOrZero(), err } // GetSELinuxInfo - fetch SELinux information for a remote node. func (client *peerRESTClient) GetSELinuxInfo(ctx context.Context) (info madmin.SysServices, err error) { resp, err := getSysServicesRPC.Call(ctx, client.gridConn(), grid.NewMSS())
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Fri May 24 23:05:23 UTC 2024 - 26.1K bytes - Viewed (0) -
pkg/volume/util/util.go
} return sets.List(result) } // GetPodVolumeNames returns names of volumes that are used in a pod, // either as filesystem mount or raw block device, together with list // of all SELinux contexts of all containers that use the volumes. func GetPodVolumeNames(pod *v1.Pod) (mounts sets.Set[string], devices sets.Set[string], seLinuxContainerContexts map[string][]*v1.SELinuxOptions) { mounts = sets.New[string]()
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri May 31 12:32:15 UTC 2024 - 28.8K bytes - Viewed (0) -
hack/lib/golang.sh
else # Not debugging - disable symbols and DWARF, trim embedded paths goldflags="${goldflags} -s -w" goflags+=("-trimpath") fi # Extract tags if any specified in GOFLAGS gotags="selinux,notest,$(echo "${GOFLAGS:-}" | sed -ne 's|.*-tags=\([^-]*\).*|\1|p')" local -a targets=() local arg for arg; do if [[ "${arg}" == -* ]]; then
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Jun 01 16:43:08 UTC 2024 - 32.8K bytes - Viewed (0) -
CHANGELOG/CHANGELOG-1.21.md
- github.com/opencontainers/runc: [v1.0.0-rc95 → v1.0.2](https://github.com/opencontainers/runc/compare/v1.0.0-rc95...v1.0.2) - github.com/opencontainers/selinux: [v1.8.0 → v1.8.2](https://github.com/opencontainers/selinux/compare/v1.8.0...v1.8.2) - github.com/sirupsen/logrus: [v1.7.0 → v1.8.1](https://github.com/sirupsen/logrus/compare/v1.7.0...v1.8.1) - google.golang.org/protobuf: v1.25.0 → v1.26.0
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 14 07:03:14 UTC 2022 - 367.3K bytes - Viewed (0) -
go.sum
github.com/opencontainers/runtime-spec v1.0.3-0.20220909204839-494a5a6aca78/go.mod h1:jwyrGlmzljRJv/Fgzds9SsS/C5hL+LL3ko9hs6T5lQ0= github.com/opencontainers/selinux v1.11.0 h1:+5Zbo97w3Lbmb3PeqQtpmTkMwsW5nRI3YaLpt7tQ7oU= github.com/opencontainers/selinux v1.11.0/go.mod h1:E5dMC3VPuVvVHDYmi78qvhJp8+M586T4DlDRYpFkyec= github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 21:47:11 UTC 2024 - 93.1K bytes - Viewed (0)