userns

Documentation

Index

• func EnabledUserNamespacesSupport() bool
• type UsernsManager
  • func MakeUserNsManager(kl userNsPodsManager) (*UsernsManager, error)
  • func (m *UsernsManager) CleanupOrphanedPodUsernsAllocations(pods []*v1.Pod, runningPods []*kubecontainer.Pod) error
  • func (m *UsernsManager) GetOrCreateUserNamespaceMappings(pod *v1.Pod, runtimeHandler string) (*runtimeapi.UserNamespace, error)
  • func (m *UsernsManager) Release(podUID types.UID)

Functions

func EnabledUserNamespacesSupport

func EnabledUserNamespacesSupport() bool

Types

type UsernsManager

type UsernsManager struct {
	// contains filtered or unexported fields
}

func MakeUserNsManager

func MakeUserNsManager(kl userNsPodsManager) (*UsernsManager, error)

func (*UsernsManager) CleanupOrphanedPodUsernsAllocations

func (m *UsernsManager) CleanupOrphanedPodUsernsAllocations(pods []*v1.Pod, runningPods []*kubecontainer.Pod) error

CleanupOrphanedPodUsernsAllocations reconciliates the state of user namespace allocations with the pods actually running. It frees any user namespace allocation for orphaned pods.

func (*UsernsManager) GetOrCreateUserNamespaceMappings

func (m *UsernsManager) GetOrCreateUserNamespaceMappings(pod *v1.Pod, runtimeHandler string) (*runtimeapi.UserNamespace, error)

GetOrCreateUserNamespaceMappings returns the configuration for the sandbox user namespace

func (*UsernsManager) Release

func (m *UsernsManager) Release(podUID types.UID)

Release releases the user namespace allocated to the specified pod.