security

Documentation

Index

• func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod
• func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface)
• func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, ...) *v1.Pod

Functions

func AppArmorTestPod

func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod

CreateAppArmorTestPod creates a pod that tests apparmor profile enforcement. The pod exits with an error code if the profile is incorrectly enforced. If runOnce is true the pod will exit after a single test, otherwise it will repeat the test every 1 second until failure.

func LoadAppArmorProfiles

func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface)

LoadAppArmorProfiles creates apparmor-profiles ConfigMap and apparmor-loader ReplicationController.

func RunAppArmorTestPod

func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, podClient *e2epod.PodClient, runOnce bool) *v1.Pod