Documentation
¶
Overview ¶
Package selinux contains security context constraints SELinux strategy implementations.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ToInternalSELinuxOptions ¶
func ToInternalSELinuxOptions(external *corev1.SELinuxOptions) (*coreapi.SELinuxOptions, error)
func ToInternalSELinuxOptionsOrDie ¶
func ToInternalSELinuxOptionsOrDie(external *corev1.SELinuxOptions) *coreapi.SELinuxOptions
Types ¶
type SELinuxSecurityContextConstraintsStrategy ¶
type SELinuxSecurityContextConstraintsStrategy interface {
// Generate creates the SELinuxOptions based on constraint rules.
Generate(pod *coreapi.Pod, container *coreapi.Container) (*coreapi.SELinuxOptions, error)
// Validate ensures that the specified values fall within the range of the strategy.
Validate(fldPath *field.Path, pod *coreapi.Pod, container *coreapi.Container, options *coreapi.SELinuxOptions) field.ErrorList
}
SELinuxSecurityContextConstraintsStrategy defines the interface for all SELinux constraint strategies.
func NewMustRunAs ¶
func NewMustRunAs(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)
func NewRunAsAny ¶
func NewRunAsAny(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)
NewRunAsAny provides a strategy that will return the configured se linux context or nil.
Click to show internal directories.
Click to hide internal directories.