security

Documentation

Index

• func CreateAppArmorTestPod(nsName string, clientset clientset.Interface, podClient *framework.PodClient, ...) *v1.Pod
• func LoadAppArmorProfiles(nsName string, clientset clientset.Interface)

Functions

func CreateAppArmorTestPod

func CreateAppArmorTestPod(nsName string, clientset clientset.Interface, podClient *framework.PodClient, unconfined bool, runOnce bool) *v1.Pod

CreateAppArmorTestPod creates a pod that tests apparmor profile enforcement. The pod exits with an error code if the profile is incorrectly enforced. If runOnce is true the pod will exit after a single test, otherwise it will repeat the test every 1 second until failure.

func LoadAppArmorProfiles

func LoadAppArmorProfiles(nsName string, clientset clientset.Interface)

LoadAppArmorProfiles creates apparmor-profiles ConfigMap and apparmor-loader ReplicationController.