securitycontextconstraints

Documentation

Overview

Package securitycontextconstraints contains security context constraints api implementations.

Index

• type SecurityContextConstraintsProvider
  • func NewSimpleProvider(scc *api.SecurityContextConstraints) (SecurityContextConstraintsProvider, error)

Types

type SecurityContextConstraintsProvider

type SecurityContextConstraintsProvider interface {
	// Create a SecurityContext based on the given constraints
	CreateSecurityContext(pod *api.Pod, container *api.Container) (*api.SecurityContext, error)
	// Ensure a container's SecurityContext is in compliance with the given constraints
	ValidateSecurityContext(pod *api.Pod, container *api.Container) fielderrors.ValidationErrorList
	// Get the name of the SCC that this provider was initialized with.
	GetSCCName() string
}

SecurityContextConstraintsProvider provides the implementation to generate a new security context based on constraints or validate an existing security context against constraints.

func NewSimpleProvider

func NewSimpleProvider(scc *api.SecurityContextConstraints) (SecurityContextConstraintsProvider, error)

NewSimpleProvider creates a new SecurityContextConstraintsProvider instance.