package selinux

import "k8s.io/kubernetes/pkg/security/podsecuritypolicy/selinux"

Package selinux contains code for validating and defaulting the SELinux context of a pod according to a security policy.

Index ¶

• type SELinuxStrategy
• func NewMustRunAs(options *policy.SELinuxStrategyOptions) (SELinuxStrategy, error)
• func NewRunAsAny(options *policy.SELinuxStrategyOptions) (SELinuxStrategy, error)

Types ¶

type SELinuxStrategy ¶

type SELinuxStrategy interface {
	// Generate creates the SELinuxOptions based on constraint rules.
	Generate(pod *api.Pod, container *api.Container) (*api.SELinuxOptions, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(fldPath *field.Path, pod *api.Pod, container *api.Container, options *api.SELinuxOptions) field.ErrorList
}

SELinuxStrategy defines the interface for all SELinux constraint strategies.

func NewMustRunAs ¶

func NewMustRunAs(options *policy.SELinuxStrategyOptions) (SELinuxStrategy, error)

func NewRunAsAny ¶

func NewRunAsAny(options *policy.SELinuxStrategyOptions) (SELinuxStrategy, error)

NewRunAsAny provides a strategy that will return the configured se linux context or nil.

Source Files ¶

doc.go mustrunas.go runasany.go types.go