utils

Documentation

Index

• type PodSecurityStandardProfile
  • func (profile PodSecurityStandardProfile) LessRestrictive(argumentProfile PodSecurityStandardProfile) bool
  • func (profile PodSecurityStandardProfile) Level() int

Types

type PodSecurityStandardProfile

type PodSecurityStandardProfile string

PodSecurityStandardProfile defines the different restriction levels that can be applied to the default operations of a PodSecurity admission plugin.

const (
	// PSSProfilePrivileged indicates an unrestricted policy, which allows for known privilege escalations.
	PSSProfilePrivileged PodSecurityStandardProfile = "privileged"
	// PSSProfileBaseline indicates a minimally restrictive policy, which bars from privilege escalations.
	PSSProfileBaseline PodSecurityStandardProfile = "baseline"
	// PSSProfileRestricted indicates a heavily restrictive policy.
	PSSProfileRestricted PodSecurityStandardProfile = "restricted"
)

func (PodSecurityStandardProfile) LessRestrictive

func (profile PodSecurityStandardProfile) LessRestrictive(argumentProfile PodSecurityStandardProfile) bool

LessRestrictive is a comparator that checks if the calling profile is less restrictive than the argument profile that is evaluated.

func (PodSecurityStandardProfile) Level

func (profile PodSecurityStandardProfile) Level() int

Level defines the order of restrictiveness of the different PodSecurityStandardProfile values. Higher number indicates more restrictions.