selinux

Documentation

Overview

Package selinux contains security context constraints SELinux strategy implementations.

Index

• func ToInternalSELinuxOptions(external *corev1.SELinuxOptions) (*coreapi.SELinuxOptions, error)
• func ToInternalSELinuxOptionsOrDie(external *corev1.SELinuxOptions) *coreapi.SELinuxOptions
• type SELinuxSecurityContextConstraintsStrategy
  • func NewMustRunAs(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)
  • func NewRunAsAny(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

Functions

func ToInternalSELinuxOptions

func ToInternalSELinuxOptions(external *corev1.SELinuxOptions) (*coreapi.SELinuxOptions, error)

func ToInternalSELinuxOptionsOrDie

func ToInternalSELinuxOptionsOrDie(external *corev1.SELinuxOptions) *coreapi.SELinuxOptions

Types

type SELinuxSecurityContextConstraintsStrategy

type SELinuxSecurityContextConstraintsStrategy interface {
	// Generate creates the SELinuxOptions based on constraint rules.
	Generate(pod *coreapi.Pod, container *coreapi.Container) (*coreapi.SELinuxOptions, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(fldPath *field.Path, pod *coreapi.Pod, container *coreapi.Container, options *coreapi.SELinuxOptions) field.ErrorList
}

SELinuxSecurityContextConstraintsStrategy defines the interface for all SELinux constraint strategies.

func NewMustRunAs

func NewMustRunAs(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

func NewRunAsAny

func NewRunAsAny(options *securityv1.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

NewRunAsAny provides a strategy that will return the configured se linux context or nil.