package apparmor

import "k8s.io/kubernetes/pkg/security/apparmor"

Index ¶

• func GetProfileName(pod *v1.Pod, containerName string) string
• func GetProfileNameFromPodAnnotations(annotations map[string]string, containerName string) string
• func SetProfileName(pod *v1.Pod, containerName, profileName string) error
• func SetProfileNameFromPodAnnotations(annotations map[string]string, containerName, profileName string) error
• func ValidateProfileFormat(profile string) error
• type Validator
• func NewValidator(runtime string) Validator

Functions ¶

func GetProfileName ¶

func GetProfileName(pod *v1.Pod, containerName string) string

GetProfileName returns the name of the profile to use with the container.

func GetProfileNameFromPodAnnotations ¶

func GetProfileNameFromPodAnnotations(annotations map[string]string, containerName string) string

GetProfileNameFromPodAnnotations gets the name of the profile to use with container from pod annotations

func SetProfileName ¶

func SetProfileName(pod *v1.Pod, containerName, profileName string) error

SetProfileName sets the name of the profile to use with the container.

func SetProfileNameFromPodAnnotations ¶

func SetProfileNameFromPodAnnotations(annotations map[string]string, containerName, profileName string) error

SetProfileNameFromPodAnnotations sets the name of the profile to use with the container.

func ValidateProfileFormat ¶

func ValidateProfileFormat(profile string) error

ValidateProfileFormat checks the format of the profile.

Types ¶

type Validator ¶

type Validator interface {
	Validate(pod *v1.Pod) error
	ValidateHost() error
}

Validator is a interface for validating that a pod with an AppArmor profile can be run by a Node.

func NewValidator ¶

func NewValidator(runtime string) Validator

NewValidator is in order to find AppArmor FS

Source Files ¶

helpers.go validate.go validate_disabled.go