secrets

Documentation

Index

• Variables
• func SecretMounts(mountLabel, containerWorkingDir, mountFile string, rootless, disableFips bool) []rspec.Mount
• func SecretMountsWithUIDGID(mountLabel, containerWorkingDir, mountFile, mountPoint string, uid, gid int, ...) []rspec.Mount

Variables

var (
	// DefaultMountsFile holds the default mount paths in the form
	// "host_path:container_path"
	DefaultMountsFile = subscriptions.DefaultMountsFile
	// OverrideMountsFile holds the default mount paths in the form
	// "host_path:container_path" overridden by the user
	OverrideMountsFile = subscriptions.OverrideMountsFile
	// UserOverrideMountsFile holds the default mount paths in the form
	// "host_path:container_path" overridden by the rootless user
	UserOverrideMountsFile = subscriptions.DefaultMountsFile
)

Functions

func SecretMounts

func SecretMounts(mountLabel, containerWorkingDir, mountFile string, rootless, disableFips bool) []rspec.Mount

SecretMounts copies, adds, and mounts the secrets to the container root filesystem Deprecated, Please use SecretMountWithUIDGID

func SecretMountsWithUIDGID

func SecretMountsWithUIDGID(mountLabel, containerWorkingDir, mountFile, mountPoint string, uid, gid int, rootless, disableFips bool) []rspec.Mount

SecretMountsWithUIDGID copies, adds, and mounts the secrets to the container root filesystem mountLabel: MAC/SELinux label for container content containerWorkingDir: Private data for storing secrets on the host mounted in container. mountFile: Additional mount points required for the container. mountPoint: Container image mountpoint uid: to assign to content created for secrets gid: to assign to content created for secrets rootless: indicates whether container is running in rootless mode disableFips: indicates whether system should ignore fips mode