package sysctl

import "k8s.io/kubernetes/pkg/kubelet/sysctl"

Index ¶

• Constants
• func NewRuntimeAdmitHandler(runtime container.Runtime) (*runtimeAdmitHandler, error)
• func NewWhitelist(patterns []string) (*patternWhitelist, error)
• type Namespace
• func NamespacedBy(val string) Namespace

Constants ¶

const (
	// the Linux IPC namespace
	IpcNamespace = Namespace("ipc")

	// the network namespace
	NetNamespace = Namespace("net")

	// the zero value if no namespace is known
	UnknownNamespace = Namespace("")
)

const (
	AnnotationInvalidReason = "InvalidSysctlAnnotation"
	ForbiddenReason         = "SysctlForbidden"
)

const (
	UnsupportedReason = "SysctlUnsupported"
)

Functions ¶

func NewRuntimeAdmitHandler ¶

func NewRuntimeAdmitHandler(runtime container.Runtime) (*runtimeAdmitHandler, error)

NewRuntimeAdmitHandler returns a sysctlRuntimeAdmitHandler which checks whether the given runtime support sysctls.

func NewWhitelist ¶

func NewWhitelist(patterns []string) (*patternWhitelist, error)

NewWhitelist creates a new Whitelist from a list of sysctls and sysctl pattern (ending in *).

Types ¶

type Namespace ¶

type Namespace string

Namespace represents a kernel namespace name.

func NamespacedBy ¶

func NamespacedBy(val string) Namespace

NamespacedBy returns the namespace of the Linux kernel for a sysctl, or UnknownNamespace if the sysctl is not known to be namespaced.

Source Files ¶

namespace.go runtime.go whitelist.go