public static interface V1beta1Extensions.PodSecurityPolicySpecOrBuilder
extends com.google.protobuf.MessageOrBuilder
| Modifier and Type | Method and Description |
|---|---|
String |
getAllowedCapabilities(int index)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
com.google.protobuf.ByteString |
getAllowedCapabilitiesBytes(int index)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
int |
getAllowedCapabilitiesCount()
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
List<String> |
getAllowedCapabilitiesList()
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.AllowedHostPath |
getAllowedHostPaths(int index)
is a white list of allowed host paths.
|
int |
getAllowedHostPathsCount()
is a white list of allowed host paths.
|
List<V1beta1Extensions.AllowedHostPath> |
getAllowedHostPathsList()
is a white list of allowed host paths.
|
V1beta1Extensions.AllowedHostPathOrBuilder |
getAllowedHostPathsOrBuilder(int index)
is a white list of allowed host paths.
|
List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> |
getAllowedHostPathsOrBuilderList()
is a white list of allowed host paths.
|
boolean |
getAllowPrivilegeEscalation()
AllowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
String |
getDefaultAddCapabilities(int index)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
com.google.protobuf.ByteString |
getDefaultAddCapabilitiesBytes(int index)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
int |
getDefaultAddCapabilitiesCount()
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
List<String> |
getDefaultAddCapabilitiesList()
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
boolean |
getDefaultAllowPrivilegeEscalation()
DefaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.FSGroupStrategyOptions |
getFsGroup()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.FSGroupStrategyOptionsOrBuilder |
getFsGroupOrBuilder()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.HostPortRange |
getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
int |
getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed.
|
List<V1beta1Extensions.HostPortRange> |
getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.HostPortRangeOrBuilder |
getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
List<? extends V1beta1Extensions.HostPortRangeOrBuilder> |
getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed.
|
boolean |
getPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
getReadOnlyRootFilesystem()
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
String |
getRequiredDropCapabilities(int index)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
com.google.protobuf.ByteString |
getRequiredDropCapabilitiesBytes(int index)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
int |
getRequiredDropCapabilitiesCount()
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
List<String> |
getRequiredDropCapabilitiesList()
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.RunAsUserStrategyOptions |
getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.RunAsUserStrategyOptionsOrBuilder |
getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.SELinuxStrategyOptions |
getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.SELinuxStrategyOptionsOrBuilder |
getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.SupplementalGroupsStrategyOptions |
getSupplementalGroups()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder |
getSupplementalGroupsOrBuilder()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
String |
getVolumes(int index)
volumes is a white list of allowed volume plugins.
|
com.google.protobuf.ByteString |
getVolumesBytes(int index)
volumes is a white list of allowed volume plugins.
|
int |
getVolumesCount()
volumes is a white list of allowed volume plugins.
|
List<String> |
getVolumesList()
volumes is a white list of allowed volume plugins.
|
boolean |
hasAllowPrivilegeEscalation()
AllowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
boolean |
hasDefaultAllowPrivilegeEscalation()
DefaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
boolean |
hasFsGroup()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
boolean |
hasPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
hasReadOnlyRootFilesystem()
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
boolean |
hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
boolean |
hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
boolean |
hasSupplementalGroups()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofboolean hasPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;boolean getPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;List<String> getDefaultAddCapabilitiesList()
DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities. +optional
repeated string defaultAddCapabilities = 2;int getDefaultAddCapabilitiesCount()
DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities. +optional
repeated string defaultAddCapabilities = 2;String getDefaultAddCapabilities(int index)
DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities. +optional
repeated string defaultAddCapabilities = 2;com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index)
DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities. +optional
repeated string defaultAddCapabilities = 2;List<String> getRequiredDropCapabilitiesList()
RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;int getRequiredDropCapabilitiesCount()
RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;String getRequiredDropCapabilities(int index)
RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index)
RequiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;List<String> getAllowedCapabilitiesList()
AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;int getAllowedCapabilitiesCount()
AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;String getAllowedCapabilities(int index)
AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index)
AllowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;List<String> getVolumesList()
volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used. +optional
repeated string volumes = 5;int getVolumesCount()
volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used. +optional
repeated string volumes = 5;String getVolumes(int index)
volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used. +optional
repeated string volumes = 5;com.google.protobuf.ByteString getVolumesBytes(int index)
volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used. +optional
repeated string volumes = 5;boolean hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;boolean getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;List<V1beta1Extensions.HostPortRange> getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;V1beta1Extensions.HostPortRange getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;int getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;List<? extends V1beta1Extensions.HostPortRangeOrBuilder> getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;V1beta1Extensions.HostPortRangeOrBuilder getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;boolean hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;boolean getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;boolean hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;boolean getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;boolean hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;V1beta1Extensions.SELinuxStrategyOptions getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;V1beta1Extensions.SELinuxStrategyOptionsOrBuilder getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;boolean hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;V1beta1Extensions.RunAsUserStrategyOptions getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;V1beta1Extensions.RunAsUserStrategyOptionsOrBuilder getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;boolean hasSupplementalGroups()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;V1beta1Extensions.SupplementalGroupsStrategyOptions getSupplementalGroups()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;boolean hasFsGroup()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;V1beta1Extensions.FSGroupStrategyOptions getFsGroup()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;V1beta1Extensions.FSGroupStrategyOptionsOrBuilder getFsGroupOrBuilder()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;boolean hasReadOnlyRootFilesystem()
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;boolean getReadOnlyRootFilesystem()
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;boolean hasDefaultAllowPrivilegeEscalation()
DefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;boolean getDefaultAllowPrivilegeEscalation()
DefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;boolean hasAllowPrivilegeEscalation()
AllowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;boolean getAllowPrivilegeEscalation()
AllowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;List<V1beta1Extensions.AllowedHostPath> getAllowedHostPathsList()
is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;V1beta1Extensions.AllowedHostPath getAllowedHostPaths(int index)
is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;int getAllowedHostPathsCount()
is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()
is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;V1beta1Extensions.AllowedHostPathOrBuilder getAllowedHostPathsOrBuilder(int index)
is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;Copyright © 2018. All rights reserved.