security

Documentation

Index

• type AllowedImages
  • func (allowedImages AllowedImages) ImageAllowed(name string) bool
• type AllowedIsolations
• type AllowedVolumeTart
• type IsolationPolicyContainer
• type IsolationPolicyNone
• type IsolationPolicyParallels
• type IsolationPolicyTart
  • func (tart IsolationPolicyTart) VolumeAllowed(volume *api.Isolation_Tart_Volume) bool
• type IsolationPolicyVetu
• type Security
  • func NoSecurity() *Security
  • func NoSecurityAllowAllVolumes() *Security
  • func (security *Security) ContainerPolicy() *IsolationPolicyContainer
  • func (security *Security) NonePolicy() *IsolationPolicyNone
  • func (security *Security) ParallelsPolicy() *IsolationPolicyParallels
  • func (security *Security) TartPolicy() *IsolationPolicyTart
  • func (security *Security) VetuPolicy() *IsolationPolicyVetu

Types

type AllowedImages

type AllowedImages []string

func (AllowedImages) ImageAllowed

func (allowedImages AllowedImages) ImageAllowed(name string) bool

type AllowedIsolations

type AllowedIsolations struct {
	None      *IsolationPolicyNone      `yaml:"none"`
	Container *IsolationPolicyContainer `yaml:"container"`
	Parallels *IsolationPolicyParallels `yaml:"parallels"`
	Tart      *IsolationPolicyTart      `yaml:"tart"`
	Vetu      *IsolationPolicyVetu      `yaml:"vetu"`
}

type AllowedVolumeTart

type AllowedVolumeTart struct {
	Source        string `yaml:"source"`
	ForceReadOnly bool   `yaml:"force-readonly"`
}

type IsolationPolicyContainer

type IsolationPolicyContainer struct {
}

type IsolationPolicyNone

type IsolationPolicyNone struct {
}

type IsolationPolicyParallels

type IsolationPolicyParallels struct {
}

type IsolationPolicyTart

type IsolationPolicyTart struct {
	AllowedImages  AllowedImages       `yaml:"allowed-images"`
	AllowedVolumes []AllowedVolumeTart `yaml:"allowed-volumes"`
	ForceSoftnet   bool                `yaml:"force-softnet"`
}

func (IsolationPolicyTart) VolumeAllowed

func (tart IsolationPolicyTart) VolumeAllowed(volume *api.Isolation_Tart_Volume) bool

type IsolationPolicyVetu

type IsolationPolicyVetu struct {
	AllowedImages AllowedImages `yaml:"allowed-images"`
}

type Security

type Security struct {
	AllowedIsolations *AllowedIsolations `yaml:"allowed-isolations"`
}

func NoSecurity

func NoSecurity() *Security

func NoSecurityAllowAllVolumes

func NoSecurityAllowAllVolumes() *Security

func (*Security) ContainerPolicy

func (security *Security) ContainerPolicy() *IsolationPolicyContainer

func (*Security) NonePolicy

func (security *Security) NonePolicy() *IsolationPolicyNone

func (*Security) ParallelsPolicy

func (security *Security) ParallelsPolicy() *IsolationPolicyParallels

func (*Security) TartPolicy

func (security *Security) TartPolicy() *IsolationPolicyTart

func (*Security) VetuPolicy

func (security *Security) VetuPolicy() *IsolationPolicyVetu