user

Documentation

Overview

Package user contains security context constraints user strategy implementations.

Index

• func AnnotationToIntPtr(sUID string) (*int64, error)
• func GetAllocatedID(kClient client.Interface, pod *api.Pod, annotation string) (*int64, error)
• type RunAsUserSecurityContextConstraintsStrategy
  • func NewMustRunAs(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)
  • func NewMustRunAsRange(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)
  • func NewRunAsAny(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)
  • func NewRunAsNonRoot(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)

Functions

func AnnotationToIntPtr

func AnnotationToIntPtr(sUID string) (*int64, error)

func GetAllocatedID

func GetAllocatedID(kClient client.Interface, pod *api.Pod, annotation string) (*int64, error)

Types

type RunAsUserSecurityContextConstraintsStrategy

type RunAsUserSecurityContextConstraintsStrategy interface {
	// Generate creates the uid based on policy rules.
	Generate(pod *api.Pod, container *api.Container) (*int64, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(pod *api.Pod, container *api.Container) field.ErrorList
}

RunAsUserSecurityContextConstraintsStrategy defines the interface for all uid constraint strategies.

func NewMustRunAs

func NewMustRunAs(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)

NewMustRunAs provides a strategy that requires the container to run as a specific UID.

func NewMustRunAsRange

func NewMustRunAsRange(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)

NewMustRunAs provides a strategy that requires the container to run as a specific UID in a range.

func NewRunAsAny

func NewRunAsAny(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)

NewRunAsAny provides a strategy that will return nil.

func NewRunAsNonRoot

func NewRunAsNonRoot(options *api.RunAsUserStrategyOptions) (RunAsUserSecurityContextConstraintsStrategy, error)