/// <summary>
/// Initializes a new instance of the Iok8sapicorev1PodSecurityContext
/// class.
/// </summary>
/// <param name="fsGroup">A special supplemental group that applies to
/// all containers in a pod. Some volume types allow the Kubelet to
/// change the ownership of that volume to be owned by the pod:
///
/// 1. The owning GID will be the FSGroup 2. The setgid bit is set (new
/// files created in the volume will be owned by FSGroup) 3. The
/// permission bits are OR'd with rw-rw----
///
/// If unset, the Kubelet will not modify the ownership and permissions
/// of any volume.</param>
/// <param name="runAsGroup">The GID to run the entrypoint of the
/// container process. Uses runtime default if unset. May also be set
/// in SecurityContext. If set in both SecurityContext and
/// PodSecurityContext, the value specified in SecurityContext takes
/// precedence for that container.</param>
/// <param name="runAsNonRoot">Indicates that the container must run as
/// a non-root user. If true, the Kubelet will validate the image at
/// runtime to ensure that it does not run as UID 0 (root) and fail to
/// start the container if it does. If unset or false, no such
/// validation will be performed. May also be set in SecurityContext.
/// If set in both SecurityContext and PodSecurityContext, the value
/// specified in SecurityContext takes precedence.</param>
/// <param name="runAsUser">The UID to run the entrypoint of the
/// container process. Defaults to user specified in image metadata if
/// unspecified. May also be set in SecurityContext. If set in both
/// SecurityContext and PodSecurityContext, the value specified in
/// SecurityContext takes precedence for that container.</param>
/// <param name="seLinuxOptions">The SELinux context to be applied to
/// all containers. If unspecified, the container runtime will allocate
/// a random SELinux context for each container. May also be set in
/// SecurityContext. If set in both SecurityContext and
/// PodSecurityContext, the value specified in SecurityContext takes
/// precedence for that container.</param>
/// <param name="supplementalGroups">A list of groups applied to the
/// first process run in each container, in addition to the container's
/// primary GID. If unspecified, no groups will be added to any
/// container.</param>
public Iok8sapicorev1PodSecurityContext(long?fsGroup = default(long?), long?runAsGroup = default(long?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions), IList <long?> supplementalGroups = default(IList <long?>))
{
FsGroup = fsGroup;
RunAsGroup = runAsGroup;
RunAsNonRoot = runAsNonRoot;
RunAsUser = runAsUser;
SeLinuxOptions = seLinuxOptions;
SupplementalGroups = supplementalGroups;
CustomInit();
}
/// <summary>
/// Initializes a new instance of the Iok8sapicorev1SecurityContext
/// class.
/// </summary>
/// <param name="allowPrivilegeEscalation">AllowPrivilegeEscalation
/// controls whether a process can gain more privileges than its parent
/// process. This bool directly controls if the no_new_privs flag will
/// be set on the container process. AllowPrivilegeEscalation is true
/// always when the container is: 1) run as Privileged 2) has
/// CAP_SYS_ADMIN</param>
/// <param name="capabilities">The capabilities to add/drop when
/// running containers. Defaults to the default set of capabilities
/// granted by the container runtime.</param>
/// <param name="privileged">Run container in privileged mode.
/// Processes in privileged containers are essentially equivalent to
/// root on the host. Defaults to false.</param>
/// <param name="readOnlyRootFilesystem">Whether this container has a
/// read-only root filesystem. Default is false.</param>
/// <param name="runAsGroup">The GID to run the entrypoint of the
/// container process. Uses runtime default if unset. May also be set
/// in PodSecurityContext. If set in both SecurityContext and
/// PodSecurityContext, the value specified in SecurityContext takes
/// precedence.</param>
/// <param name="runAsNonRoot">Indicates that the container must run as
/// a non-root user. If true, the Kubelet will validate the image at
/// runtime to ensure that it does not run as UID 0 (root) and fail to
/// start the container if it does. If unset or false, no such
/// validation will be performed. May also be set in
/// PodSecurityContext. If set in both SecurityContext and
/// PodSecurityContext, the value specified in SecurityContext takes
/// precedence.</param>
/// <param name="runAsUser">The UID to run the entrypoint of the
/// container process. Defaults to user specified in image metadata if
/// unspecified. May also be set in PodSecurityContext. If set in both
/// SecurityContext and PodSecurityContext, the value specified in
/// SecurityContext takes precedence.</param>
/// <param name="seLinuxOptions">The SELinux context to be applied to
/// the container. If unspecified, the container runtime will allocate
/// a random SELinux context for each container. May also be set in
/// PodSecurityContext. If set in both SecurityContext and
/// PodSecurityContext, the value specified in SecurityContext takes
/// precedence.</param>
public Iok8sapicorev1SecurityContext(bool?allowPrivilegeEscalation = default(bool?), Iok8sapicorev1Capabilities capabilities = default(Iok8sapicorev1Capabilities), bool?privileged = default(bool?), bool?readOnlyRootFilesystem = default(bool?), long?runAsGroup = default(long?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions))
{
AllowPrivilegeEscalation = allowPrivilegeEscalation;
Capabilities = capabilities;
Privileged = privileged;
ReadOnlyRootFilesystem = readOnlyRootFilesystem;
RunAsGroup = runAsGroup;
RunAsNonRoot = runAsNonRoot;
RunAsUser = runAsUser;
SeLinuxOptions = seLinuxOptions;
CustomInit();
}
/// <summary>
/// Initializes a new instance of the
/// Iok8sapiextensionsv1beta1SELinuxStrategyOptions class.
/// </summary>
/// <param name="rule">type is the strategy that will dictate the
/// allowable labels that may be set.</param>
/// <param name="seLinuxOptions">seLinuxOptions required to run as;
/// required for MustRunAs More info:
/// https://kubernetes.io/docs/tasks/configure-pod-container/security-context/</param>
public Iok8sapiextensionsv1beta1SELinuxStrategyOptions(string rule, Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions))
{
Rule = rule;
SeLinuxOptions = seLinuxOptions;
CustomInit();
}
