seccompociartifact

Documentation

Index

• Constants
• type Impl
• type SeccompOCIArtifact
  • func New() *SeccompOCIArtifact
  • func (s *SeccompOCIArtifact) TryPull(ctx context.Context, sys *types.SystemContext, containerName string, ...) (profile []byte, err error)

Constants

const (
	// SeccompProfilePodAnnotation is the annotation used for matching a whole pod
	// rather than a specific container.
	SeccompProfilePodAnnotation = annotations.SeccompProfileAnnotation + "/POD"
)

Types

type Impl

type Impl interface {
	Pull(context.Context, string, *ociartifact.PullOptions) (*ociartifact.Artifact, error)
}

Impl is the main implementation interface of this package.

type SeccompOCIArtifact

type SeccompOCIArtifact struct {
	// contains filtered or unexported fields
}

SeccompOCIArtifact is the main structure for handling seccomp related OCI artifacts.

func New

func New() *SeccompOCIArtifact

New creates a new seccomp OCI artifact handler.

func (*SeccompOCIArtifact) TryPull

func (s *SeccompOCIArtifact) TryPull(
	ctx context.Context,
	sys *types.SystemContext,
	containerName string,
	podAnnotations, imageAnnotations map[string]string,
) (profile []byte, err error)

TryPull tries to pull the OCI artifact seccomp profile while evaluating the provided annotations.