package capabilities

import "k8s.io/kubernetes/pkg/security/podsecuritypolicy/capabilities"

Index ¶

• type CapabilitiesStrategy
• func NewDefaultCapabilities(defaultAddCapabilities, requiredDropCapabilities, allowedCaps []api.Capability) (CapabilitiesStrategy, error)

Types ¶

type CapabilitiesStrategy ¶

type CapabilitiesStrategy interface {
	// Generate creates the capabilities based on policy rules.
	Generate(pod *api.Pod, container *api.Container) (*api.Capabilities, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(pod *api.Pod, container *api.Container) field.ErrorList
}

CapabilitiesStrategy defines the interface for all cap constraint strategies.

func NewDefaultCapabilities ¶

func NewDefaultCapabilities(defaultAddCapabilities, requiredDropCapabilities, allowedCaps []api.Capability) (CapabilitiesStrategy, error)

NewDefaultCapabilities creates a new defaultCapabilities strategy that will provide defaults and validation based on the configured initial caps and allowed caps.

Source Files ¶

mustrunas.go types.go