예제 #1
0
 /// <summary>
 /// Initializes a new instance of the V1SecurityContext class.
 /// </summary>
 /// <param name="allowPrivilegeEscalation">AllowPrivilegeEscalation
 /// controls whether a process can gain more privileges than its parent
 /// process. This bool directly controls if the no_new_privs flag will
 /// be set on the container process. AllowPrivilegeEscalation is true
 /// always when the container is: 1) run as Privileged 2) has
 /// CAP_SYS_ADMIN</param>
 /// <param name="capabilities">The capabilities to add/drop when
 /// running containers. Defaults to the default set of capabilities
 /// granted by the container runtime.</param>
 /// <param name="privileged">Run container in privileged mode.
 /// Processes in privileged containers are essentially equivalent to
 /// root on the host. Defaults to false.</param>
 /// <param name="readOnlyRootFilesystem">Whether this container has a
 /// read-only root filesystem. Default is false.</param>
 /// <param name="runAsNonRoot">Indicates that the container must run as
 /// a non-root user. If true, the Kubelet will validate the image at
 /// runtime to ensure that it does not run as UID 0 (root) and fail to
 /// start the container if it does. If unset or false, no such
 /// validation will be performed. May also be set in
 /// PodSecurityContext.  If set in both SecurityContext and
 /// PodSecurityContext, the value specified in SecurityContext takes
 /// precedence.</param>
 /// <param name="runAsUser">The UID to run the entrypoint of the
 /// container process. Defaults to user specified in image metadata if
 /// unspecified. May also be set in PodSecurityContext.  If set in both
 /// SecurityContext and PodSecurityContext, the value specified in
 /// SecurityContext takes precedence.</param>
 /// <param name="seLinuxOptions">The SELinux context to be applied to
 /// the container. If unspecified, the container runtime will allocate
 /// a random SELinux context for each container.  May also be set in
 /// PodSecurityContext.  If set in both SecurityContext and
 /// PodSecurityContext, the value specified in SecurityContext takes
 /// precedence.</param>
 public V1SecurityContext(bool?allowPrivilegeEscalation = default(bool?), V1Capabilities capabilities = default(V1Capabilities), bool?privileged = default(bool?), bool?readOnlyRootFilesystem = default(bool?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), V1SELinuxOptions seLinuxOptions = default(V1SELinuxOptions))
 {
     AllowPrivilegeEscalation = allowPrivilegeEscalation;
     Capabilities             = capabilities;
     Privileged             = privileged;
     ReadOnlyRootFilesystem = readOnlyRootFilesystem;
     RunAsNonRoot           = runAsNonRoot;
     RunAsUser      = runAsUser;
     SeLinuxOptions = seLinuxOptions;
     CustomInit();
 }
예제 #2
0
 /// <summary>
 /// Initializes a new instance of the V1SecurityContext class.
 /// </summary>
 /// <param name="allowPrivilegeEscalation">AllowPrivilegeEscalation
 /// controls whether a process can gain more privileges than its parent
 /// process. This bool directly controls if the no_new_privs flag will
 /// be set on the container process. AllowPrivilegeEscalation is true
 /// always when the container is: 1) run as Privileged 2) has
 /// CAP_SYS_ADMIN</param>
 /// <param name="capabilities">The capabilities to add/drop when
 /// running containers. Defaults to the default set of capabilities
 /// granted by the container runtime.</param>
 /// <param name="privileged">Run container in privileged mode.
 /// Processes in privileged containers are essentially equivalent to
 /// root on the host. Defaults to false.</param>
 /// <param name="procMount">procMount denotes the type of proc mount to
 /// use for the containers. The default is DefaultProcMount which uses
 /// the container runtime defaults for readonly paths and masked paths.
 /// This requires the ProcMountType feature flag to be enabled.</param>
 /// <param name="readOnlyRootFilesystem">Whether this container has a
 /// read-only root filesystem. Default is false.</param>
 /// <param name="runAsGroup">The GID to run the entrypoint of the
 /// container process. Uses runtime default if unset. May also be set
 /// in PodSecurityContext.  If set in both SecurityContext and
 /// PodSecurityContext, the value specified in SecurityContext takes
 /// precedence.</param>
 /// <param name="runAsNonRoot">Indicates that the container must run as
 /// a non-root user. If true, the Kubelet will validate the image at
 /// runtime to ensure that it does not run as UID 0 (root) and fail to
 /// start the container if it does. If unset or false, no such
 /// validation will be performed. May also be set in
 /// PodSecurityContext.  If set in both SecurityContext and
 /// PodSecurityContext, the value specified in SecurityContext takes
 /// precedence.</param>
 /// <param name="runAsUser">The UID to run the entrypoint of the
 /// container process. Defaults to user specified in image metadata if
 /// unspecified. May also be set in PodSecurityContext.  If set in both
 /// SecurityContext and PodSecurityContext, the value specified in
 /// SecurityContext takes precedence.</param>
 /// <param name="seLinuxOptions">The SELinux context to be applied to
 /// the container. If unspecified, the container runtime will allocate
 /// a random SELinux context for each container.  May also be set in
 /// PodSecurityContext.  If set in both SecurityContext and
 /// PodSecurityContext, the value specified in SecurityContext takes
 /// precedence.</param>
 /// <param name="windowsOptions">Windows security options.</param>
 public V1SecurityContext(bool?allowPrivilegeEscalation = default(bool?), V1Capabilities capabilities = default(V1Capabilities), bool?privileged = default(bool?), string procMount = default(string), bool?readOnlyRootFilesystem = default(bool?), long?runAsGroup = default(long?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), V1SELinuxOptions seLinuxOptions = default(V1SELinuxOptions), V1WindowsSecurityContextOptions windowsOptions = default(V1WindowsSecurityContextOptions))
 {
     AllowPrivilegeEscalation = allowPrivilegeEscalation;
     Capabilities             = capabilities;
     Privileged             = privileged;
     ProcMount              = procMount;
     ReadOnlyRootFilesystem = readOnlyRootFilesystem;
     RunAsGroup             = runAsGroup;
     RunAsNonRoot           = runAsNonRoot;
     RunAsUser              = runAsUser;
     SeLinuxOptions         = seLinuxOptions;
     WindowsOptions         = windowsOptions;
     CustomInit();
 }