| Modifier and Type | Method and Description |
|---|---|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllAllowedCapabilities(Iterable<String> values)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllAllowedHostPaths(Iterable<? extends V1beta1Extensions.AllowedHostPath> values)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllDefaultAddCapabilities(Iterable<String> values)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllHostPorts(Iterable<? extends V1beta1Extensions.HostPortRange> values)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedCapabilities(String value)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedCapabilitiesBytes(com.google.protobuf.ByteString value)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath.Builder builderForValue)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath value)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedHostPaths(V1beta1Extensions.AllowedHostPath.Builder builderForValue)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllowedHostPaths(V1beta1Extensions.AllowedHostPath value)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllRequiredDropCapabilities(Iterable<String> values)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addAllVolumes(Iterable<String> values)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addDefaultAddCapabilities(String value)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addDefaultAddCapabilitiesBytes(com.google.protobuf.ByteString value)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addHostPorts(int index,
V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addHostPorts(int index,
V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addHostPorts(V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addHostPorts(V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addRequiredDropCapabilities(String value)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addRequiredDropCapabilitiesBytes(com.google.protobuf.ByteString value)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addVolumes(String value)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.addVolumesBytes(com.google.protobuf.ByteString value)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clear() |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearAllowedCapabilities()
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearAllowedHostPaths()
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearAllowPrivilegeEscalation()
AllowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearDefaultAddCapabilities()
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearDefaultAllowPrivilegeEscalation()
DefaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearFsGroup()
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearHostPorts()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearPrivileged()
privileged determines if a pod can request to be run as privileged.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearReadOnlyRootFilesystem()
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearRequiredDropCapabilities()
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearSupplementalGroups()
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clearVolumes()
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.clone() |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicy.Builder.getSpecBuilder()
spec defines the policy enforced.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeFrom(com.google.protobuf.Message other) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeFrom(V1beta1Extensions.PodSecurityPolicySpec other) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
static V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.newBuilder() |
static V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.newBuilder(V1beta1Extensions.PodSecurityPolicySpec prototype) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.newBuilderForType() |
protected V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.removeAllowedHostPaths(int index)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.removeHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setAllowedCapabilities(int index,
String value)
AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath.Builder builderForValue)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath value)
is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setAllowPrivilegeEscalation(boolean value)
AllowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setDefaultAddCapabilities(int index,
String value)
DefaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setDefaultAllowPrivilegeEscalation(boolean value)
DefaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setFsGroup(V1beta1Extensions.FSGroupStrategyOptions.Builder builderForValue)
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setHostIPC(boolean value)
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setHostNetwork(boolean value)
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setHostPID(boolean value)
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setHostPorts(int index,
V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setHostPorts(int index,
V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setPrivileged(boolean value)
privileged determines if a pod can request to be run as privileged.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setReadOnlyRootFilesystem(boolean value)
ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setRequiredDropCapabilities(int index,
String value)
RequiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions.Builder builderForValue)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setSeLinux(V1beta1Extensions.SELinuxStrategyOptions.Builder builderForValue)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions.Builder builderForValue)
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.Builder.setVolumes(int index,
String value)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
V1beta1Extensions.PodSecurityPolicySpec.toBuilder() |
| Modifier and Type | Method and Description |
|---|---|
V1beta1Extensions.PodSecurityPolicy.Builder |
V1beta1Extensions.PodSecurityPolicy.Builder.setSpec(V1beta1Extensions.PodSecurityPolicySpec.Builder builderForValue)
spec defines the policy enforced.
|
Copyright © 2018. All rights reserved.