package security

import "k8s.io/kubernetes/test/e2e/framework/security"

Index ¶

• func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod
• func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface)
• func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, podClient *e2epod.PodClient, runOnce bool) *v1.Pod

Functions ¶

func AppArmorTestPod ¶

func AppArmorTestPod(nsName string, unconfined bool, runOnce bool) *v1.Pod

CreateAppArmorTestPod creates a pod that tests apparmor profile enforcement. The pod exits with an error code if the profile is incorrectly enforced. If runOnce is true the pod will exit after a single test, otherwise it will repeat the test every 1 second until failure.

func LoadAppArmorProfiles ¶

func LoadAppArmorProfiles(ctx context.Context, nsName string, clientset clientset.Interface)

LoadAppArmorProfiles creates apparmor-profiles ConfigMap and apparmor-loader ReplicationController.

func RunAppArmorTestPod ¶

func RunAppArmorTestPod(ctx context.Context, pod *v1.Pod, clientset clientset.Interface, podClient *e2epod.PodClient, runOnce bool) *v1.Pod

Source Files ¶

apparmor.go