capabilities

Documentation

Overview

package capbabilities manages system level capabilities

Index

• func Initialize(c Capabilities)
• func SetForTests(c Capabilities)
• func Setup(allowPrivileged bool, hostNetworkSources []string, ...)
• type Capabilities
  • func Get() Capabilities

Functions

func Initialize

func Initialize(c Capabilities)

Initialize the capability set. This can only be done once per binary, subsequent calls are ignored.

func SetForTests

func SetForTests(c Capabilities)

SetCapabilitiesForTests. Convenience method for testing. This should only be called from tests.

func Setup

func Setup(allowPrivileged bool, hostNetworkSources []string, perConnectionBytesPerSec int64)

Setup the capability set. It wraps Initialize for improving usibility.

Types

type Capabilities

type Capabilities struct {
	AllowPrivileged bool

	// List of pod sources for which using host network is allowed.
	HostNetworkSources []string

	// PerConnectionBandwidthLimitBytesPerSec limits the throughput of each connection (currently only used for proxy, exec, attach)
	PerConnectionBandwidthLimitBytesPerSec int64
}

Capabilities defines the set of capabilities available within the system. For now these are global. Eventually they may be per-user

func Get

func Get() Capabilities

Returns a read-only copy of the system capabilities.