V1PodSecurityContext (client-java-api 10.0.1 API)

java.lang.Object
- io.kubernetes.client.openapi.models.V1PodSecurityContext

```
@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen",
           date="2020-07-29T18:17:00.375Z[Etc/UTC]")
public class V1PodSecurityContext
extends Object
```
PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.

Field Summary

Fields
Modifier and Type	Field and Description
`static String`	`SERIALIZED_NAME_FS_GROUP`
`static String`	`SERIALIZED_NAME_FS_GROUP_CHANGE_POLICY`
`static String`	`SERIALIZED_NAME_RUN_AS_GROUP`
`static String`	`SERIALIZED_NAME_RUN_AS_NON_ROOT`
`static String`	`SERIALIZED_NAME_RUN_AS_USER`
`static String`	`SERIALIZED_NAME_SE_LINUX_OPTIONS`
`static String`	`SERIALIZED_NAME_SUPPLEMENTAL_GROUPS`
`static String`	`SERIALIZED_NAME_SYSCTLS`
`static String`	`SERIALIZED_NAME_WINDOWS_OPTIONS`

Constructor Summary

Constructors
Constructor and Description

V1PodSecurityContext()

Constructors
Constructor and Description
`V1PodSecurityContext()`

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`V1PodSecurityContext`	`addSupplementalGroupsItem(Long supplementalGroupsItem)`
`V1PodSecurityContext`	`addSysctlsItem(V1Sysctl sysctlsItem)`
`boolean`	`equals(Object o)`
`V1PodSecurityContext`	`fsGroup(Long fsGroup)`
`V1PodSecurityContext`	`fsGroupChangePolicy(String fsGroupChangePolicy)`
`Long`	`getFsGroup()` A special supplemental group that applies to all containers in a pod.
`String`	`getFsGroupChangePolicy()` fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod.
`Long`	`getRunAsGroup()` The GID to run the entrypoint of the container process.
`Boolean`	`getRunAsNonRoot()` Indicates that the container must run as a non-root user.
`Long`	`getRunAsUser()` The UID to run the entrypoint of the container process.
`V1SELinuxOptions`	`getSeLinuxOptions()` Get seLinuxOptions
`List<Long>`	`getSupplementalGroups()` A list of groups applied to the first process run in each container, in addition to the container's primary GID.
`List<V1Sysctl>`	`getSysctls()` Sysctls hold a list of namespaced sysctls used for the pod.
`V1WindowsSecurityContextOptions`	`getWindowsOptions()` Get windowsOptions
`int`	`hashCode()`
`V1PodSecurityContext`	`runAsGroup(Long runAsGroup)`
`V1PodSecurityContext`	`runAsNonRoot(Boolean runAsNonRoot)`
`V1PodSecurityContext`	`runAsUser(Long runAsUser)`
`V1PodSecurityContext`	`seLinuxOptions(V1SELinuxOptions seLinuxOptions)`
`void`	`setFsGroup(Long fsGroup)`
`void`	`setFsGroupChangePolicy(String fsGroupChangePolicy)`
`void`	`setRunAsGroup(Long runAsGroup)`
`void`	`setRunAsNonRoot(Boolean runAsNonRoot)`
`void`	`setRunAsUser(Long runAsUser)`
`void`	`setSeLinuxOptions(V1SELinuxOptions seLinuxOptions)`
`void`	`setSupplementalGroups(List<Long> supplementalGroups)`
`void`	`setSysctls(List<V1Sysctl> sysctls)`
`void`	`setWindowsOptions(V1WindowsSecurityContextOptions windowsOptions)`
`V1PodSecurityContext`	`supplementalGroups(List<Long> supplementalGroups)`
`V1PodSecurityContext`	`sysctls(List<V1Sysctl> sysctls)`
`String`	`toString()`
`V1PodSecurityContext`	`windowsOptions(V1WindowsSecurityContextOptions windowsOptions)`

Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait

- Field Detail
  - SERIALIZED_NAME_FS_GROUP
```
public static final String SERIALIZED_NAME_FS_GROUP
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_FS_GROUP_CHANGE_POLICY
```
public static final String SERIALIZED_NAME_FS_GROUP_CHANGE_POLICY
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_RUN_AS_GROUP
```
public static final String SERIALIZED_NAME_RUN_AS_GROUP
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_RUN_AS_NON_ROOT
```
public static final String SERIALIZED_NAME_RUN_AS_NON_ROOT
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_RUN_AS_USER
```
public static final String SERIALIZED_NAME_RUN_AS_USER
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_SE_LINUX_OPTIONS
```
public static final String SERIALIZED_NAME_SE_LINUX_OPTIONS
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_SUPPLEMENTAL_GROUPS
```
public static final String SERIALIZED_NAME_SUPPLEMENTAL_GROUPS
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_SYSCTLS
```
public static final String SERIALIZED_NAME_SYSCTLS
```
    See Also:
    
    Constant Field Values
  - SERIALIZED_NAME_WINDOWS_OPTIONS
```
public static final String SERIALIZED_NAME_WINDOWS_OPTIONS
```
    See Also:
    
    Constant Field Values
- Constructor Detail
  - V1PodSecurityContext
```
public V1PodSecurityContext()
```
- Method Detail
  - fsGroup
```
public V1PodSecurityContext fsGroup(Long fsGroup)
```
  - getFsGroup
```
@Nullable
public Long getFsGroup()
```
    A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod: 1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw---- If unset, the Kubelet will not modify the ownership and permissions of any volume.
    
    Returns:
    
    fsGroup
  - setFsGroup
```
public void setFsGroup(Long fsGroup)
```
  - fsGroupChangePolicy
```
public V1PodSecurityContext fsGroupChangePolicy(String fsGroupChangePolicy)
```
  - getFsGroupChangePolicy
```
@Nullable
public String getFsGroupChangePolicy()
```
    fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified defaults to \"Always\".
    
    Returns:
    
    fsGroupChangePolicy
  - setFsGroupChangePolicy
```
public void setFsGroupChangePolicy(String fsGroupChangePolicy)
```
  - runAsGroup
```
public V1PodSecurityContext runAsGroup(Long runAsGroup)
```
  - getRunAsGroup
```
@Nullable
public Long getRunAsGroup()
```
    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
    
    Returns:
    
    runAsGroup
  - setRunAsGroup
```
public void setRunAsGroup(Long runAsGroup)
```
  - runAsNonRoot
```
public V1PodSecurityContext runAsNonRoot(Boolean runAsNonRoot)
```
  - getRunAsNonRoot
```
@Nullable
public Boolean getRunAsNonRoot()
```
    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
    
    Returns:
    
    runAsNonRoot
  - setRunAsNonRoot
```
public void setRunAsNonRoot(Boolean runAsNonRoot)
```
  - runAsUser
```
public V1PodSecurityContext runAsUser(Long runAsUser)
```
  - getRunAsUser
```
@Nullable
public Long getRunAsUser()
```
    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
    
    Returns:
    
    runAsUser
  - setRunAsUser
```
public void setRunAsUser(Long runAsUser)
```
  - seLinuxOptions
```
public V1PodSecurityContext seLinuxOptions(V1SELinuxOptions seLinuxOptions)
```
  - getSeLinuxOptions
```
@Nullable
public V1SELinuxOptions getSeLinuxOptions()
```
    Get seLinuxOptions
    
    Returns:
    
    seLinuxOptions
  - setSeLinuxOptions
```
public void setSeLinuxOptions(V1SELinuxOptions seLinuxOptions)
```
  - supplementalGroups
```
public V1PodSecurityContext supplementalGroups(List<Long> supplementalGroups)
```
  - addSupplementalGroupsItem
```
public V1PodSecurityContext addSupplementalGroupsItem(Long supplementalGroupsItem)
```
  - getSupplementalGroups
```
@Nullable
public List<Long> getSupplementalGroups()
```
    A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container.
    
    Returns:
    
    supplementalGroups
  - setSupplementalGroups
```
public void setSupplementalGroups(List<Long> supplementalGroups)
```
  - sysctls
```
public V1PodSecurityContext sysctls(List<V1Sysctl> sysctls)
```
  - addSysctlsItem
```
public V1PodSecurityContext addSysctlsItem(V1Sysctl sysctlsItem)
```
  - getSysctls
```
@Nullable
public List<V1Sysctl> getSysctls()
```
    Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.
    
    Returns:
    
    sysctls
  - setSysctls
```
public void setSysctls(List<V1Sysctl> sysctls)
```
  - windowsOptions
```
public V1PodSecurityContext windowsOptions(V1WindowsSecurityContextOptions windowsOptions)
```
  - getWindowsOptions
```
@Nullable
public V1WindowsSecurityContextOptions getWindowsOptions()
```
    Get windowsOptions
    
    Returns:
    
    windowsOptions
  - setWindowsOptions
```
public void setWindowsOptions(V1WindowsSecurityContextOptions windowsOptions)
```
  - equals
```
public boolean equals(Object o)
```
    Overrides:
    
    equals in class Object
  - hashCode
```
public int hashCode()
```
    Overrides:
    
    hashCode in class Object
  - toString
```
public String toString()
```
    Overrides:
    
    toString in class Object

Class V1PodSecurityContext

Field Summary

Constructor Summary

Method Summary

Methods inherited from class java.lang.Object

Field Detail

SERIALIZED_NAME_FS_GROUP

SERIALIZED_NAME_FS_GROUP_CHANGE_POLICY

SERIALIZED_NAME_RUN_AS_GROUP

SERIALIZED_NAME_RUN_AS_NON_ROOT

SERIALIZED_NAME_RUN_AS_USER

SERIALIZED_NAME_SE_LINUX_OPTIONS

SERIALIZED_NAME_SUPPLEMENTAL_GROUPS

SERIALIZED_NAME_SYSCTLS

SERIALIZED_NAME_WINDOWS_OPTIONS

Constructor Detail

V1PodSecurityContext

Method Detail

fsGroup

getFsGroup

setFsGroup

fsGroupChangePolicy

getFsGroupChangePolicy

setFsGroupChangePolicy

runAsGroup

getRunAsGroup

setRunAsGroup

runAsNonRoot

getRunAsNonRoot

setRunAsNonRoot

runAsUser

getRunAsUser

setRunAsUser

seLinuxOptions

getSeLinuxOptions

setSeLinuxOptions

supplementalGroups

addSupplementalGroupsItem

getSupplementalGroups

setSupplementalGroups

sysctls

addSysctlsItem

getSysctls

setSysctls

windowsOptions

getWindowsOptions

setWindowsOptions

equals

hashCode

toString