package apparmor

import "k8s.io/kubernetes/pkg/security/podsecuritypolicy/apparmor"

Index ¶

• type Strategy
• func NewStrategy(pspAnnotations map[string]string) Strategy

Types ¶

type Strategy ¶

type Strategy interface {
	// Generate updates the annotations based on constraint rules. The updates are applied to a copy
	// of the annotations, and returned.
	Generate(annotations map[string]string, container *api.Container) (map[string]string, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(pod *api.Pod, container *api.Container) field.ErrorList
}

Strategy defines the interface for all AppArmor constraint strategies.

func NewStrategy ¶

func NewStrategy(pspAnnotations map[string]string) Strategy

NewStrategy creates a new strategy that enforces AppArmor profile constraints.

Source Files ¶

strategy.go