public static final class V1beta1Extensions.PodSecurityPolicySpec.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder> implements V1beta1Extensions.PodSecurityPolicySpecOrBuilder
PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.Protobuf type
k8s.io.api.extensions.v1beta1.PodSecurityPolicySpec| Modifier and Type | Method and Description |
|---|---|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllAllowedCapabilities(Iterable<String> values)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllAllowedFlexVolumes(Iterable<? extends V1beta1Extensions.AllowedFlexVolume> values)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllAllowedHostPaths(Iterable<? extends V1beta1Extensions.AllowedHostPath> values)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllAllowedProcMountTypes(Iterable<String> values)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllAllowedUnsafeSysctls(Iterable<String> values)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllDefaultAddCapabilities(Iterable<String> values)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllForbiddenSysctls(Iterable<String> values)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllHostPorts(Iterable<? extends V1beta1Extensions.HostPortRange> values)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedCapabilities(String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedCapabilitiesBytes(com.google.protobuf.ByteString value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(int index,
V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(int index,
V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.AllowedFlexVolume.Builder |
addAllowedFlexVolumesBuilder()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.AllowedFlexVolume.Builder |
addAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.AllowedHostPath.Builder |
addAllowedHostPathsBuilder()
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.AllowedHostPath.Builder |
addAllowedHostPathsBuilder(int index)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedProcMountTypes(String value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedProcMountTypesBytes(com.google.protobuf.ByteString value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedUnsafeSysctls(String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllowedUnsafeSysctlsBytes(com.google.protobuf.ByteString value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllRequiredDropCapabilities(Iterable<String> values)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addAllVolumes(Iterable<String> values)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addDefaultAddCapabilities(String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addDefaultAddCapabilitiesBytes(com.google.protobuf.ByteString value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addForbiddenSysctls(String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addForbiddenSysctlsBytes(com.google.protobuf.ByteString value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addHostPorts(int index,
V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addHostPorts(int index,
V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addHostPorts(V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addHostPorts(V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.HostPortRange.Builder |
addHostPortsBuilder()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.HostPortRange.Builder |
addHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addRequiredDropCapabilities(String value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addRequiredDropCapabilitiesBytes(com.google.protobuf.ByteString value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addVolumes(String value)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
addVolumesBytes(com.google.protobuf.ByteString value)
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec |
build() |
V1beta1Extensions.PodSecurityPolicySpec |
buildPartial() |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clear() |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowedCapabilities()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowedFlexVolumes()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowedHostPaths()
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowedProcMountTypes()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowedUnsafeSysctls()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearDefaultAddCapabilities()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearForbiddenSysctls()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearHostPorts()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearPrivileged()
privileged determines if a pod can request to be run as privileged.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearRequiredDropCapabilities()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clearVolumes()
volumes is a white list of allowed volume plugins.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
clone() |
String |
getAllowedCapabilities(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
com.google.protobuf.ByteString |
getAllowedCapabilitiesBytes(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
int |
getAllowedCapabilitiesCount()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
com.google.protobuf.ProtocolStringList |
getAllowedCapabilitiesList()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.AllowedFlexVolume |
getAllowedFlexVolumes(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.AllowedFlexVolume.Builder |
getAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
List<V1beta1Extensions.AllowedFlexVolume.Builder> |
getAllowedFlexVolumesBuilderList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
int |
getAllowedFlexVolumesCount()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
List<V1beta1Extensions.AllowedFlexVolume> |
getAllowedFlexVolumesList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.AllowedFlexVolumeOrBuilder |
getAllowedFlexVolumesOrBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder> |
getAllowedFlexVolumesOrBuilderList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.AllowedHostPath |
getAllowedHostPaths(int index)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.AllowedHostPath.Builder |
getAllowedHostPathsBuilder(int index)
allowedHostPaths is a white list of allowed host paths.
|
List<V1beta1Extensions.AllowedHostPath.Builder> |
getAllowedHostPathsBuilderList()
allowedHostPaths is a white list of allowed host paths.
|
int |
getAllowedHostPathsCount()
allowedHostPaths is a white list of allowed host paths.
|
List<V1beta1Extensions.AllowedHostPath> |
getAllowedHostPathsList()
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.AllowedHostPathOrBuilder |
getAllowedHostPathsOrBuilder(int index)
allowedHostPaths is a white list of allowed host paths.
|
List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> |
getAllowedHostPathsOrBuilderList()
allowedHostPaths is a white list of allowed host paths.
|
String |
getAllowedProcMountTypes(int index)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
com.google.protobuf.ByteString |
getAllowedProcMountTypesBytes(int index)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
int |
getAllowedProcMountTypesCount()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
com.google.protobuf.ProtocolStringList |
getAllowedProcMountTypesList()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
String |
getAllowedUnsafeSysctls(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
com.google.protobuf.ByteString |
getAllowedUnsafeSysctlsBytes(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
int |
getAllowedUnsafeSysctlsCount()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
com.google.protobuf.ProtocolStringList |
getAllowedUnsafeSysctlsList()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
boolean |
getAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
String |
getDefaultAddCapabilities(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
com.google.protobuf.ByteString |
getDefaultAddCapabilitiesBytes(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
int |
getDefaultAddCapabilitiesCount()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
com.google.protobuf.ProtocolStringList |
getDefaultAddCapabilitiesList()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
boolean |
getDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.PodSecurityPolicySpec |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getForbiddenSysctls(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
com.google.protobuf.ByteString |
getForbiddenSysctlsBytes(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
int |
getForbiddenSysctlsCount()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
com.google.protobuf.ProtocolStringList |
getForbiddenSysctlsList()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.FSGroupStrategyOptions |
getFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.FSGroupStrategyOptions.Builder |
getFsGroupBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.FSGroupStrategyOptionsOrBuilder |
getFsGroupOrBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.HostPortRange |
getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.HostPortRange.Builder |
getHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
List<V1beta1Extensions.HostPortRange.Builder> |
getHostPortsBuilderList()
hostPorts determines which host port ranges are allowed to be exposed.
|
int |
getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed.
|
List<V1beta1Extensions.HostPortRange> |
getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.HostPortRangeOrBuilder |
getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
List<? extends V1beta1Extensions.HostPortRangeOrBuilder> |
getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed.
|
boolean |
getPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
getReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
String |
getRequiredDropCapabilities(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
com.google.protobuf.ByteString |
getRequiredDropCapabilitiesBytes(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
int |
getRequiredDropCapabilitiesCount()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
com.google.protobuf.ProtocolStringList |
getRequiredDropCapabilitiesList()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.RunAsGroupStrategyOptions |
getRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.RunAsGroupStrategyOptions.Builder |
getRunAsGroupBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.RunAsGroupStrategyOptionsOrBuilder |
getRunAsGroupOrBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.RunAsUserStrategyOptions |
getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.RunAsUserStrategyOptions.Builder |
getRunAsUserBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.RunAsUserStrategyOptionsOrBuilder |
getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.SELinuxStrategyOptions |
getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.SELinuxStrategyOptions.Builder |
getSeLinuxBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.SELinuxStrategyOptionsOrBuilder |
getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.SupplementalGroupsStrategyOptions |
getSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.SupplementalGroupsStrategyOptions.Builder |
getSupplementalGroupsBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder |
getSupplementalGroupsOrBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
String |
getVolumes(int index)
volumes is a white list of allowed volume plugins.
|
com.google.protobuf.ByteString |
getVolumesBytes(int index)
volumes is a white list of allowed volume plugins.
|
int |
getVolumesCount()
volumes is a white list of allowed volume plugins.
|
com.google.protobuf.ProtocolStringList |
getVolumesList()
volumes is a white list of allowed volume plugins.
|
boolean |
hasAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
boolean |
hasDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
boolean |
hasFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
boolean |
hasPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
hasReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
boolean |
hasRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
boolean |
hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
boolean |
hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
boolean |
hasSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeFrom(com.google.protobuf.Message other) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeFrom(V1beta1Extensions.PodSecurityPolicySpec other) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
removeAllowedFlexVolumes(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
removeAllowedHostPaths(int index)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
removeHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedCapabilities(int index,
String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedFlexVolumes(int index,
V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedFlexVolumes(int index,
V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedHostPaths(int index,
V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedProcMountTypes(int index,
String value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowedUnsafeSysctls(int index,
String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setAllowPrivilegeEscalation(boolean value)
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setDefaultAddCapabilities(int index,
String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setDefaultAllowPrivilegeEscalation(boolean value)
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setForbiddenSysctls(int index,
String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setFsGroup(V1beta1Extensions.FSGroupStrategyOptions.Builder builderForValue)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setHostIPC(boolean value)
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setHostNetwork(boolean value)
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setHostPID(boolean value)
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setHostPorts(int index,
V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setHostPorts(int index,
V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setPrivileged(boolean value)
privileged determines if a pod can request to be run as privileged.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setReadOnlyRootFilesystem(boolean value)
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRequiredDropCapabilities(int index,
String value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions.Builder builderForValue)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions.Builder builderForValue)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setSeLinux(V1beta1Extensions.SELinuxStrategyOptions.Builder builderForValue)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions.Builder builderForValue)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
V1beta1Extensions.PodSecurityPolicySpec.Builder |
setVolumes(int index,
String value)
volumes is a white list of allowed volume plugins.
|
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, newBuilderForField, onBuilt, onChanged, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic V1beta1Extensions.PodSecurityPolicySpec buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeFrom(V1beta1Extensions.PodSecurityPolicySpec other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>IOExceptionpublic boolean hasPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;hasPrivileged in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;getPrivileged in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setPrivileged(boolean value)
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;public com.google.protobuf.ProtocolStringList getDefaultAddCapabilitiesList()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getDefaultAddCapabilitiesCount()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getDefaultAddCapabilities(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilities in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setDefaultAddCapabilities(int index, String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Extensions.PodSecurityPolicySpec.Builder addDefaultAddCapabilities(String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllDefaultAddCapabilities(Iterable<String> values)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearDefaultAddCapabilities()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Extensions.PodSecurityPolicySpec.Builder addDefaultAddCapabilitiesBytes(com.google.protobuf.ByteString value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public com.google.protobuf.ProtocolStringList getRequiredDropCapabilitiesList()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getRequiredDropCapabilitiesCount()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getRequiredDropCapabilities(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilities in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setRequiredDropCapabilities(int index, String value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Extensions.PodSecurityPolicySpec.Builder addRequiredDropCapabilities(String value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllRequiredDropCapabilities(Iterable<String> values)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearRequiredDropCapabilities()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Extensions.PodSecurityPolicySpec.Builder addRequiredDropCapabilitiesBytes(com.google.protobuf.ByteString value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public com.google.protobuf.ProtocolStringList getAllowedCapabilitiesList()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getAllowedCapabilitiesCount()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getAllowedCapabilities(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilities in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedCapabilities(int index, String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedCapabilities(String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllAllowedCapabilities(Iterable<String> values)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowedCapabilities()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedCapabilitiesBytes(com.google.protobuf.ByteString value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public com.google.protobuf.ProtocolStringList getVolumesList()
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getVolumesCount()
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getVolumes(int index)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getVolumesBytes(int index)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setVolumes(int index, String value)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Extensions.PodSecurityPolicySpec.Builder addVolumes(String value)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllVolumes(Iterable<String> values)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearVolumes()
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Extensions.PodSecurityPolicySpec.Builder addVolumesBytes(com.google.protobuf.ByteString value)
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public boolean hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;hasHostNetwork in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;getHostNetwork in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setHostNetwork(boolean value)
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;public List<V1beta1Extensions.HostPortRange> getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;getHostPortsList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;getHostPortsCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.HostPortRange getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;getHostPorts in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setHostPorts(int index, V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder setHostPorts(int index, V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder addHostPorts(V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder addHostPorts(int index, V1beta1Extensions.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder addHostPorts(V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder addHostPorts(int index, V1beta1Extensions.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllHostPorts(Iterable<? extends V1beta1Extensions.HostPortRange> values)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearHostPorts()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.PodSecurityPolicySpec.Builder removeHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.HostPortRange.Builder getHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.HostPortRangeOrBuilder getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;getHostPortsOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Extensions.HostPortRangeOrBuilder> getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;getHostPortsOrBuilderList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.HostPortRange.Builder addHostPortsBuilder()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public V1beta1Extensions.HostPortRange.Builder addHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public List<V1beta1Extensions.HostPortRange.Builder> getHostPortsBuilderList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;public boolean hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;hasHostPID in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;getHostPID in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setHostPID(boolean value)
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;public boolean hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;hasHostIPC in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;getHostIPC in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setHostIPC(boolean value)
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;public boolean hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;hasSeLinux in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.SELinuxStrategyOptions getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;getSeLinux in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Extensions.PodSecurityPolicySpec.Builder setSeLinux(V1beta1Extensions.SELinuxStrategyOptions.Builder builderForValue)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeSeLinux(V1beta1Extensions.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Extensions.SELinuxStrategyOptions.Builder getSeLinuxBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Extensions.SELinuxStrategyOptionsOrBuilder getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;getSeLinuxOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;hasRunAsUser in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.RunAsUserStrategyOptions getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;getRunAsUser in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Extensions.PodSecurityPolicySpec.Builder setRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions.Builder builderForValue)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeRunAsUser(V1beta1Extensions.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Extensions.RunAsUserStrategyOptions.Builder getRunAsUserBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Extensions.RunAsUserStrategyOptionsOrBuilder getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;getRunAsUserOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean hasRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;hasRunAsGroup in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.RunAsGroupStrategyOptions getRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;getRunAsGroup in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Extensions.PodSecurityPolicySpec.Builder setRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions.Builder builderForValue)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeRunAsGroup(V1beta1Extensions.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Extensions.RunAsGroupStrategyOptions.Builder getRunAsGroupBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Extensions.RunAsGroupStrategyOptionsOrBuilder getRunAsGroupOrBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;getRunAsGroupOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean hasSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;hasSupplementalGroups in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.SupplementalGroupsStrategyOptions getSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;getSupplementalGroups in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;public V1beta1Extensions.PodSecurityPolicySpec.Builder setSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions.Builder builderForValue)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeSupplementalGroups(V1beta1Extensions.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;public V1beta1Extensions.SupplementalGroupsStrategyOptions.Builder getSupplementalGroupsBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;public V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;getSupplementalGroupsOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean hasFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;hasFsGroup in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.FSGroupStrategyOptions getFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;getFsGroup in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Extensions.PodSecurityPolicySpec.Builder setFsGroup(V1beta1Extensions.FSGroupStrategyOptions.Builder builderForValue)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Extensions.PodSecurityPolicySpec.Builder mergeFsGroup(V1beta1Extensions.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Extensions.FSGroupStrategyOptions.Builder getFsGroupBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Extensions.FSGroupStrategyOptionsOrBuilder getFsGroupOrBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;getFsGroupOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean hasReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;hasReadOnlyRootFilesystem in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;getReadOnlyRootFilesystem in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setReadOnlyRootFilesystem(boolean value)
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;public boolean hasDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;hasDefaultAllowPrivilegeEscalation in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;getDefaultAllowPrivilegeEscalation in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setDefaultAllowPrivilegeEscalation(boolean value)
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;public boolean hasAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;hasAllowPrivilegeEscalation in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic boolean getAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;getAllowPrivilegeEscalation in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowPrivilegeEscalation(boolean value)
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;public List<V1beta1Extensions.AllowedHostPath> getAllowedHostPathsList()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getAllowedHostPathsCount()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.AllowedHostPath getAllowedHostPaths(int index)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPaths in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedHostPaths(int index, V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedHostPaths(int index, V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedHostPaths(V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedHostPaths(int index, V1beta1Extensions.AllowedHostPath value)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedHostPaths(V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedHostPaths(int index, V1beta1Extensions.AllowedHostPath.Builder builderForValue)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllAllowedHostPaths(Iterable<? extends V1beta1Extensions.AllowedHostPath> values)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowedHostPaths()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.PodSecurityPolicySpec.Builder removeAllowedHostPaths(int index)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.AllowedHostPath.Builder getAllowedHostPathsBuilder(int index)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.AllowedHostPathOrBuilder getAllowedHostPathsOrBuilder(int index)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsOrBuilderList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.AllowedHostPath.Builder addAllowedHostPathsBuilder()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Extensions.AllowedHostPath.Builder addAllowedHostPathsBuilder(int index)
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public List<V1beta1Extensions.AllowedHostPath.Builder> getAllowedHostPathsBuilderList()
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;public List<V1beta1Extensions.AllowedFlexVolume> getAllowedFlexVolumesList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getAllowedFlexVolumesCount()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.AllowedFlexVolume getAllowedFlexVolumes(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedFlexVolumes(int index, V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedFlexVolumes(int index, V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(int index, V1beta1Extensions.AllowedFlexVolume value)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(int index, V1beta1Extensions.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllAllowedFlexVolumes(Iterable<? extends V1beta1Extensions.AllowedFlexVolume> values)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowedFlexVolumes()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.PodSecurityPolicySpec.Builder removeAllowedFlexVolumes(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.AllowedFlexVolume.Builder getAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.AllowedFlexVolumeOrBuilder getAllowedFlexVolumesOrBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesOrBuilder in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder> getAllowedFlexVolumesOrBuilderList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesOrBuilderList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.AllowedFlexVolume.Builder addAllowedFlexVolumesBuilder()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Extensions.AllowedFlexVolume.Builder addAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public List<V1beta1Extensions.AllowedFlexVolume.Builder> getAllowedFlexVolumesBuilderList()
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public com.google.protobuf.ProtocolStringList getAllowedUnsafeSysctlsList()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getAllowedUnsafeSysctlsCount()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getAllowedUnsafeSysctls(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctls in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedUnsafeSysctlsBytes(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedUnsafeSysctls(int index, String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedUnsafeSysctls(String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllAllowedUnsafeSysctls(Iterable<String> values)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowedUnsafeSysctls()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedUnsafeSysctlsBytes(com.google.protobuf.ByteString value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public com.google.protobuf.ProtocolStringList getForbiddenSysctlsList()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getForbiddenSysctlsCount()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getForbiddenSysctls(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctls in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getForbiddenSysctlsBytes(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setForbiddenSysctls(int index, String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Extensions.PodSecurityPolicySpec.Builder addForbiddenSysctls(String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllForbiddenSysctls(Iterable<String> values)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearForbiddenSysctls()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Extensions.PodSecurityPolicySpec.Builder addForbiddenSysctlsBytes(com.google.protobuf.ByteString value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public com.google.protobuf.ProtocolStringList getAllowedProcMountTypesList()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesList in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic int getAllowedProcMountTypesCount()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesCount in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic String getAllowedProcMountTypes(int index)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedProcMountTypesBytes(int index)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesBytes in interface V1beta1Extensions.PodSecurityPolicySpecOrBuilderpublic V1beta1Extensions.PodSecurityPolicySpec.Builder setAllowedProcMountTypes(int index, String value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedProcMountTypes(String value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllAllowedProcMountTypes(Iterable<String> values)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Extensions.PodSecurityPolicySpec.Builder clearAllowedProcMountTypes()
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Extensions.PodSecurityPolicySpec.Builder addAllowedProcMountTypesBytes(com.google.protobuf.ByteString value)
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public final V1beta1Extensions.PodSecurityPolicySpec.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>public final V1beta1Extensions.PodSecurityPolicySpec.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Extensions.PodSecurityPolicySpec.Builder>Copyright © 2019. All rights reserved.