util

Documentation

Overview

Package util contains utility code shared amongst different parts of the pod security policy apparatus.

Index

• Constants
• func FSTypeToStringSet(fsTypes []extensions.FSType) sets.String
• func FallsInRange(id int64, rng extensions.IDRange) bool
• func GetAllFSTypesAsSet() sets.String
• func GetAllFSTypesExcept(exceptions ...string) sets.String
• func GetVolumeFSType(v api.Volume) (extensions.FSType, error)
• func PSPAllowsAllVolumes(psp *extensions.PodSecurityPolicy) bool
• func PSPAllowsFSType(psp *extensions.PodSecurityPolicy, fsType extensions.FSType) bool

Constants

const (
	ValidatedPSPAnnotation = "kubernetes.io/psp"
)

Functions

func FSTypeToStringSet

func FSTypeToStringSet(fsTypes []extensions.FSType) sets.String

fsTypeToStringSet converts an FSType slice to a string set.

func FallsInRange

func FallsInRange(id int64, rng extensions.IDRange) bool

FallsInRange is a utility to determine it the id falls in the valid range.

func GetAllFSTypesAsSet

func GetAllFSTypesAsSet() sets.String

func GetAllFSTypesExcept

func GetAllFSTypesExcept(exceptions ...string) sets.String

func GetVolumeFSType

func GetVolumeFSType(v api.Volume) (extensions.FSType, error)

getVolumeFSType gets the FSType for a volume.

func PSPAllowsAllVolumes

func PSPAllowsAllVolumes(psp *extensions.PodSecurityPolicy) bool

PSPAllowsAllVolumes checks for FSTypeAll in the psp's allowed volumes.

func PSPAllowsFSType

func PSPAllowsFSType(psp *extensions.PodSecurityPolicy, fsType extensions.FSType) bool

PSPAllowsFSType is a utility for checking if a PSP allows a particular FSType. If all volumes are allowed then this will return true for any FSType passed.