ExtensionsV1beta1PodSecurityPolicySpec (client-java-api 7.0.0 API)

java.lang.Object
- io.kubernetes.client.openapi.models.ExtensionsV1beta1PodSecurityPolicySpec

@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen",
           date="2019-11-28T14:07:30.308Z[Etc/UTC]")
public class ExtensionsV1beta1PodSecurityPolicySpec
extends Object

PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.

Field Summary

Fields
Modifier and Type	Field and Description
`static String`	`SERIALIZED_NAME_ALLOW_PRIVILEGE_ESCALATION`
`static String`	`SERIALIZED_NAME_ALLOWED_C_S_I_DRIVERS`
`static String`	`SERIALIZED_NAME_ALLOWED_CAPABILITIES`
`static String`	`SERIALIZED_NAME_ALLOWED_FLEX_VOLUMES`
`static String`	`SERIALIZED_NAME_ALLOWED_HOST_PATHS`
`static String`	`SERIALIZED_NAME_ALLOWED_PROC_MOUNT_TYPES`
`static String`	`SERIALIZED_NAME_ALLOWED_UNSAFE_SYSCTLS`
`static String`	`SERIALIZED_NAME_DEFAULT_ADD_CAPABILITIES`
`static String`	`SERIALIZED_NAME_DEFAULT_ALLOW_PRIVILEGE_ESCALATION`
`static String`	`SERIALIZED_NAME_FORBIDDEN_SYSCTLS`
`static String`	`SERIALIZED_NAME_FS_GROUP`
`static String`	`SERIALIZED_NAME_HOST_I_P_C`
`static String`	`SERIALIZED_NAME_HOST_NETWORK`
`static String`	`SERIALIZED_NAME_HOST_P_I_D`
`static String`	`SERIALIZED_NAME_HOST_PORTS`
`static String`	`SERIALIZED_NAME_PRIVILEGED`
`static String`	`SERIALIZED_NAME_READ_ONLY_ROOT_FILESYSTEM`
`static String`	`SERIALIZED_NAME_REQUIRED_DROP_CAPABILITIES`
`static String`	`SERIALIZED_NAME_RUN_AS_GROUP`
`static String`	`SERIALIZED_NAME_RUN_AS_USER`
`static String`	`SERIALIZED_NAME_RUNTIME_CLASS`
`static String`	`SERIALIZED_NAME_SE_LINUX`
`static String`	`SERIALIZED_NAME_SUPPLEMENTAL_GROUPS`
`static String`	`SERIALIZED_NAME_VOLUMES`

Constructor Summary

Constructors
Constructor and Description

ExtensionsV1beta1PodSecurityPolicySpec()

Constructors
Constructor and Description
`ExtensionsV1beta1PodSecurityPolicySpec()`

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedCapabilitiesItem(String allowedCapabilitiesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedCSIDriversItem(ExtensionsV1beta1AllowedCSIDriver allowedCSIDriversItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedFlexVolumesItem(ExtensionsV1beta1AllowedFlexVolume allowedFlexVolumesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedHostPathsItem(ExtensionsV1beta1AllowedHostPath allowedHostPathsItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedProcMountTypesItem(String allowedProcMountTypesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addAllowedUnsafeSysctlsItem(String allowedUnsafeSysctlsItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addDefaultAddCapabilitiesItem(String defaultAddCapabilitiesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addForbiddenSysctlsItem(String forbiddenSysctlsItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addHostPortsItem(ExtensionsV1beta1HostPortRange hostPortsItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addRequiredDropCapabilitiesItem(String requiredDropCapabilitiesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`addVolumesItem(String volumesItem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedCapabilities(List<String> allowedCapabilities)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedCSIDrivers(List<ExtensionsV1beta1AllowedCSIDriver> allowedCSIDrivers)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedFlexVolumes(List<ExtensionsV1beta1AllowedFlexVolume> allowedFlexVolumes)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedHostPaths(List<ExtensionsV1beta1AllowedHostPath> allowedHostPaths)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedProcMountTypes(List<String> allowedProcMountTypes)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowedUnsafeSysctls(List<String> allowedUnsafeSysctls)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`allowPrivilegeEscalation(Boolean allowPrivilegeEscalation)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`defaultAddCapabilities(List<String> defaultAddCapabilities)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`defaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)`
`boolean`	`equals(Object o)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`forbiddenSysctls(List<String> forbiddenSysctls)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`fsGroup(ExtensionsV1beta1FSGroupStrategyOptions fsGroup)`
`List<String>`	`getAllowedCapabilities()` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`List<ExtensionsV1beta1AllowedCSIDriver>`	`getAllowedCSIDrivers()` AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
`List<ExtensionsV1beta1AllowedFlexVolume>`	`getAllowedFlexVolumes()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`List<ExtensionsV1beta1AllowedHostPath>`	`getAllowedHostPaths()` allowedHostPaths is a white list of allowed host paths.
`List<String>`	`getAllowedProcMountTypes()` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`List<String>`	`getAllowedUnsafeSysctls()` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`Boolean`	`getAllowPrivilegeEscalation()` allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
`List<String>`	`getDefaultAddCapabilities()` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`Boolean`	`getDefaultAllowPrivilegeEscalation()` defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
`List<String>`	`getForbiddenSysctls()` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`ExtensionsV1beta1FSGroupStrategyOptions`	`getFsGroup()` Get fsGroup
`Boolean`	`getHostIPC()` hostIPC determines if the policy allows the use of HostIPC in the pod spec.
`Boolean`	`getHostNetwork()` hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
`Boolean`	`getHostPID()` hostPID determines if the policy allows the use of HostPID in the pod spec.
`List<ExtensionsV1beta1HostPortRange>`	`getHostPorts()` hostPorts determines which host port ranges are allowed to be exposed.
`Boolean`	`getPrivileged()` privileged determines if a pod can request to be run as privileged.
`Boolean`	`getReadOnlyRootFilesystem()` readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
`List<String>`	`getRequiredDropCapabilities()` requiredDropCapabilities are the capabilities that will be dropped from the container.
`ExtensionsV1beta1RunAsGroupStrategyOptions`	`getRunAsGroup()` Get runAsGroup
`ExtensionsV1beta1RunAsUserStrategyOptions`	`getRunAsUser()` Get runAsUser
`ExtensionsV1beta1RuntimeClassStrategyOptions`	`getRuntimeClass()` Get runtimeClass
`ExtensionsV1beta1SELinuxStrategyOptions`	`getSeLinux()` Get seLinux
`ExtensionsV1beta1SupplementalGroupsStrategyOptions`	`getSupplementalGroups()` Get supplementalGroups
`List<String>`	`getVolumes()` volumes is a white list of allowed volume plugins.
`int`	`hashCode()`
`ExtensionsV1beta1PodSecurityPolicySpec`	`hostIPC(Boolean hostIPC)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`hostNetwork(Boolean hostNetwork)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`hostPID(Boolean hostPID)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`hostPorts(List<ExtensionsV1beta1HostPortRange> hostPorts)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`privileged(Boolean privileged)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`readOnlyRootFilesystem(Boolean readOnlyRootFilesystem)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`requiredDropCapabilities(List<String> requiredDropCapabilities)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`runAsGroup(ExtensionsV1beta1RunAsGroupStrategyOptions runAsGroup)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`runAsUser(ExtensionsV1beta1RunAsUserStrategyOptions runAsUser)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`runtimeClass(ExtensionsV1beta1RuntimeClassStrategyOptions runtimeClass)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`seLinux(ExtensionsV1beta1SELinuxStrategyOptions seLinux)`
`void`	`setAllowedCapabilities(List<String> allowedCapabilities)`
`void`	`setAllowedCSIDrivers(List<ExtensionsV1beta1AllowedCSIDriver> allowedCSIDrivers)`
`void`	`setAllowedFlexVolumes(List<ExtensionsV1beta1AllowedFlexVolume> allowedFlexVolumes)`
`void`	`setAllowedHostPaths(List<ExtensionsV1beta1AllowedHostPath> allowedHostPaths)`
`void`	`setAllowedProcMountTypes(List<String> allowedProcMountTypes)`
`void`	`setAllowedUnsafeSysctls(List<String> allowedUnsafeSysctls)`
`void`	`setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation)`
`void`	`setDefaultAddCapabilities(List<String> defaultAddCapabilities)`
`void`	`setDefaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)`
`void`	`setForbiddenSysctls(List<String> forbiddenSysctls)`
`void`	`setFsGroup(ExtensionsV1beta1FSGroupStrategyOptions fsGroup)`
`void`	`setHostIPC(Boolean hostIPC)`
`void`	`setHostNetwork(Boolean hostNetwork)`
`void`	`setHostPID(Boolean hostPID)`
`void`	`setHostPorts(List<ExtensionsV1beta1HostPortRange> hostPorts)`
`void`	`setPrivileged(Boolean privileged)`
`void`	`setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)`
`void`	`setRequiredDropCapabilities(List<String> requiredDropCapabilities)`
`void`	`setRunAsGroup(ExtensionsV1beta1RunAsGroupStrategyOptions runAsGroup)`
`void`	`setRunAsUser(ExtensionsV1beta1RunAsUserStrategyOptions runAsUser)`
`void`	`setRuntimeClass(ExtensionsV1beta1RuntimeClassStrategyOptions runtimeClass)`
`void`	`setSeLinux(ExtensionsV1beta1SELinuxStrategyOptions seLinux)`
`void`	`setSupplementalGroups(ExtensionsV1beta1SupplementalGroupsStrategyOptions supplementalGroups)`
`void`	`setVolumes(List<String> volumes)`
`ExtensionsV1beta1PodSecurityPolicySpec`	`supplementalGroups(ExtensionsV1beta1SupplementalGroupsStrategyOptions supplementalGroups)`
`String`	`toString()`
`ExtensionsV1beta1PodSecurityPolicySpec`	`volumes(List<String> volumes)`

Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

SERIALIZED_NAME_ALLOW_PRIVILEGE_ESCALATION

public static final String SERIALIZED_NAME_ALLOW_PRIVILEGE_ESCALATION

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_C_S_I_DRIVERS

public static final String SERIALIZED_NAME_ALLOWED_C_S_I_DRIVERS

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_CAPABILITIES

public static final String SERIALIZED_NAME_ALLOWED_CAPABILITIES

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_FLEX_VOLUMES

public static final String SERIALIZED_NAME_ALLOWED_FLEX_VOLUMES

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_HOST_PATHS

public static final String SERIALIZED_NAME_ALLOWED_HOST_PATHS

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_PROC_MOUNT_TYPES

public static final String SERIALIZED_NAME_ALLOWED_PROC_MOUNT_TYPES

See Also:: Constant Field Values

SERIALIZED_NAME_ALLOWED_UNSAFE_SYSCTLS

public static final String SERIALIZED_NAME_ALLOWED_UNSAFE_SYSCTLS

See Also:: Constant Field Values

SERIALIZED_NAME_DEFAULT_ADD_CAPABILITIES

public static final String SERIALIZED_NAME_DEFAULT_ADD_CAPABILITIES

See Also:: Constant Field Values

SERIALIZED_NAME_DEFAULT_ALLOW_PRIVILEGE_ESCALATION

public static final String SERIALIZED_NAME_DEFAULT_ALLOW_PRIVILEGE_ESCALATION

See Also:: Constant Field Values

SERIALIZED_NAME_FORBIDDEN_SYSCTLS

public static final String SERIALIZED_NAME_FORBIDDEN_SYSCTLS

See Also:: Constant Field Values

SERIALIZED_NAME_FS_GROUP

public static final String SERIALIZED_NAME_FS_GROUP

See Also:: Constant Field Values

SERIALIZED_NAME_HOST_I_P_C

public static final String SERIALIZED_NAME_HOST_I_P_C

See Also:: Constant Field Values

SERIALIZED_NAME_HOST_NETWORK

public static final String SERIALIZED_NAME_HOST_NETWORK

See Also:: Constant Field Values

SERIALIZED_NAME_HOST_P_I_D

public static final String SERIALIZED_NAME_HOST_P_I_D

See Also:: Constant Field Values

SERIALIZED_NAME_HOST_PORTS

public static final String SERIALIZED_NAME_HOST_PORTS

See Also:: Constant Field Values

SERIALIZED_NAME_PRIVILEGED

public static final String SERIALIZED_NAME_PRIVILEGED

See Also:: Constant Field Values

SERIALIZED_NAME_READ_ONLY_ROOT_FILESYSTEM

public static final String SERIALIZED_NAME_READ_ONLY_ROOT_FILESYSTEM

See Also:: Constant Field Values

SERIALIZED_NAME_REQUIRED_DROP_CAPABILITIES

public static final String SERIALIZED_NAME_REQUIRED_DROP_CAPABILITIES

See Also:: Constant Field Values

SERIALIZED_NAME_RUN_AS_GROUP

public static final String SERIALIZED_NAME_RUN_AS_GROUP

See Also:: Constant Field Values

SERIALIZED_NAME_RUN_AS_USER

public static final String SERIALIZED_NAME_RUN_AS_USER

See Also:: Constant Field Values

SERIALIZED_NAME_RUNTIME_CLASS

public static final String SERIALIZED_NAME_RUNTIME_CLASS

See Also:: Constant Field Values

SERIALIZED_NAME_SE_LINUX

public static final String SERIALIZED_NAME_SE_LINUX

See Also:: Constant Field Values

SERIALIZED_NAME_SUPPLEMENTAL_GROUPS

public static final String SERIALIZED_NAME_SUPPLEMENTAL_GROUPS

See Also:: Constant Field Values

SERIALIZED_NAME_VOLUMES

public static final String SERIALIZED_NAME_VOLUMES

See Also:: Constant Field Values

Constructor Detail
- ExtensionsV1beta1PodSecurityPolicySpec
```
public ExtensionsV1beta1PodSecurityPolicySpec()
```

Method Detail

allowPrivilegeEscalation

public ExtensionsV1beta1PodSecurityPolicySpec allowPrivilegeEscalation(Boolean allowPrivilegeEscalation)

getAllowPrivilegeEscalation
```
@Nullable
public Boolean getAllowPrivilegeEscalation()
```
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

Returns:

allowPrivilegeEscalation

setAllowPrivilegeEscalation

public void setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation)

allowedCSIDrivers

public ExtensionsV1beta1PodSecurityPolicySpec allowedCSIDrivers(List<ExtensionsV1beta1AllowedCSIDriver> allowedCSIDrivers)

addAllowedCSIDriversItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedCSIDriversItem(ExtensionsV1beta1AllowedCSIDriver allowedCSIDriversItem)

getAllowedCSIDrivers
```
@Nullable
public List<ExtensionsV1beta1AllowedCSIDriver> getAllowedCSIDrivers()
```
AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

Returns:

allowedCSIDrivers

setAllowedCSIDrivers

public void setAllowedCSIDrivers(List<ExtensionsV1beta1AllowedCSIDriver> allowedCSIDrivers)

allowedCapabilities

public ExtensionsV1beta1PodSecurityPolicySpec allowedCapabilities(List<String> allowedCapabilities)

addAllowedCapabilitiesItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedCapabilitiesItem(String allowedCapabilitiesItem)

getAllowedCapabilities
```
@Nullable
public List<String> getAllowedCapabilities()
```
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

Returns:

allowedCapabilities

setAllowedCapabilities

public void setAllowedCapabilities(List<String> allowedCapabilities)

allowedFlexVolumes

public ExtensionsV1beta1PodSecurityPolicySpec allowedFlexVolumes(List<ExtensionsV1beta1AllowedFlexVolume> allowedFlexVolumes)

addAllowedFlexVolumesItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedFlexVolumesItem(ExtensionsV1beta1AllowedFlexVolume allowedFlexVolumesItem)

getAllowedFlexVolumes
```
@Nullable
public List<ExtensionsV1beta1AllowedFlexVolume> getAllowedFlexVolumes()
```
allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"volumes\" field.

Returns:

allowedFlexVolumes

setAllowedFlexVolumes

public void setAllowedFlexVolumes(List<ExtensionsV1beta1AllowedFlexVolume> allowedFlexVolumes)

allowedHostPaths

public ExtensionsV1beta1PodSecurityPolicySpec allowedHostPaths(List<ExtensionsV1beta1AllowedHostPath> allowedHostPaths)

addAllowedHostPathsItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedHostPathsItem(ExtensionsV1beta1AllowedHostPath allowedHostPathsItem)

getAllowedHostPaths
```
@Nullable
public List<ExtensionsV1beta1AllowedHostPath> getAllowedHostPaths()
```
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

Returns:

allowedHostPaths

setAllowedHostPaths

public void setAllowedHostPaths(List<ExtensionsV1beta1AllowedHostPath> allowedHostPaths)

allowedProcMountTypes

public ExtensionsV1beta1PodSecurityPolicySpec allowedProcMountTypes(List<String> allowedProcMountTypes)

addAllowedProcMountTypesItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedProcMountTypesItem(String allowedProcMountTypesItem)

getAllowedProcMountTypes
```
@Nullable
public List<String> getAllowedProcMountTypes()
```
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

Returns:

allowedProcMountTypes

setAllowedProcMountTypes

public void setAllowedProcMountTypes(List<String> allowedProcMountTypes)

allowedUnsafeSysctls

public ExtensionsV1beta1PodSecurityPolicySpec allowedUnsafeSysctls(List<String> allowedUnsafeSysctls)

addAllowedUnsafeSysctlsItem

public ExtensionsV1beta1PodSecurityPolicySpec addAllowedUnsafeSysctlsItem(String allowedUnsafeSysctlsItem)

getAllowedUnsafeSysctls
```
@Nullable
public List<String> getAllowedUnsafeSysctls()
```
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. \"foo/_*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.

Returns:

allowedUnsafeSysctls

setAllowedUnsafeSysctls

public void setAllowedUnsafeSysctls(List<String> allowedUnsafeSysctls)

defaultAddCapabilities

public ExtensionsV1beta1PodSecurityPolicySpec defaultAddCapabilities(List<String> defaultAddCapabilities)

addDefaultAddCapabilitiesItem

public ExtensionsV1beta1PodSecurityPolicySpec addDefaultAddCapabilitiesItem(String defaultAddCapabilitiesItem)

getDefaultAddCapabilities
```
@Nullable
public List<String> getDefaultAddCapabilities()
```
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

Returns:

defaultAddCapabilities

setDefaultAddCapabilities

public void setDefaultAddCapabilities(List<String> defaultAddCapabilities)

defaultAllowPrivilegeEscalation

public ExtensionsV1beta1PodSecurityPolicySpec defaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)

getDefaultAllowPrivilegeEscalation
```
@Nullable
public Boolean getDefaultAllowPrivilegeEscalation()
```
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

Returns:

defaultAllowPrivilegeEscalation

setDefaultAllowPrivilegeEscalation

public void setDefaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)

forbiddenSysctls

public ExtensionsV1beta1PodSecurityPolicySpec forbiddenSysctls(List<String> forbiddenSysctls)

addForbiddenSysctlsItem

public ExtensionsV1beta1PodSecurityPolicySpec addForbiddenSysctlsItem(String forbiddenSysctlsItem)

getForbiddenSysctls
```
@Nullable
public List<String> getForbiddenSysctls()
```
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. \"foo/_*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.

Returns:

forbiddenSysctls

setForbiddenSysctls

public void setForbiddenSysctls(List<String> forbiddenSysctls)

fsGroup

public ExtensionsV1beta1PodSecurityPolicySpec fsGroup(ExtensionsV1beta1FSGroupStrategyOptions fsGroup)

getFsGroup

public ExtensionsV1beta1FSGroupStrategyOptions getFsGroup()

Get fsGroup

Returns:: fsGroup

setFsGroup

public void setFsGroup(ExtensionsV1beta1FSGroupStrategyOptions fsGroup)

hostIPC

public ExtensionsV1beta1PodSecurityPolicySpec hostIPC(Boolean hostIPC)

getHostIPC
```
@Nullable
public Boolean getHostIPC()
```
hostIPC determines if the policy allows the use of HostIPC in the pod spec.

Returns:

hostIPC

setHostIPC

public void setHostIPC(Boolean hostIPC)

hostNetwork

public ExtensionsV1beta1PodSecurityPolicySpec hostNetwork(Boolean hostNetwork)

getHostNetwork
```
@Nullable
public Boolean getHostNetwork()
```
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

Returns:

hostNetwork

setHostNetwork

public void setHostNetwork(Boolean hostNetwork)

hostPID

public ExtensionsV1beta1PodSecurityPolicySpec hostPID(Boolean hostPID)

getHostPID
```
@Nullable
public Boolean getHostPID()
```
hostPID determines if the policy allows the use of HostPID in the pod spec.

Returns:

hostPID

setHostPID

public void setHostPID(Boolean hostPID)

hostPorts

public ExtensionsV1beta1PodSecurityPolicySpec hostPorts(List<ExtensionsV1beta1HostPortRange> hostPorts)

addHostPortsItem

public ExtensionsV1beta1PodSecurityPolicySpec addHostPortsItem(ExtensionsV1beta1HostPortRange hostPortsItem)

getHostPorts
```
@Nullable
public List<ExtensionsV1beta1HostPortRange> getHostPorts()
```
hostPorts determines which host port ranges are allowed to be exposed.

Returns:

hostPorts

setHostPorts

public void setHostPorts(List<ExtensionsV1beta1HostPortRange> hostPorts)

privileged

public ExtensionsV1beta1PodSecurityPolicySpec privileged(Boolean privileged)

getPrivileged
```
@Nullable
public Boolean getPrivileged()
```
privileged determines if a pod can request to be run as privileged.

Returns:

privileged

setPrivileged

public void setPrivileged(Boolean privileged)

readOnlyRootFilesystem

public ExtensionsV1beta1PodSecurityPolicySpec readOnlyRootFilesystem(Boolean readOnlyRootFilesystem)

getReadOnlyRootFilesystem
```
@Nullable
public Boolean getReadOnlyRootFilesystem()
```
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

Returns:

readOnlyRootFilesystem

setReadOnlyRootFilesystem

public void setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)

requiredDropCapabilities

public ExtensionsV1beta1PodSecurityPolicySpec requiredDropCapabilities(List<String> requiredDropCapabilities)

addRequiredDropCapabilitiesItem

public ExtensionsV1beta1PodSecurityPolicySpec addRequiredDropCapabilitiesItem(String requiredDropCapabilitiesItem)

getRequiredDropCapabilities
```
@Nullable
public List<String> getRequiredDropCapabilities()
```
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

Returns:

requiredDropCapabilities

setRequiredDropCapabilities

public void setRequiredDropCapabilities(List<String> requiredDropCapabilities)

runAsGroup

public ExtensionsV1beta1PodSecurityPolicySpec runAsGroup(ExtensionsV1beta1RunAsGroupStrategyOptions runAsGroup)

getRunAsGroup

@Nullable
public ExtensionsV1beta1RunAsGroupStrategyOptions getRunAsGroup()

Get runAsGroup

Returns:: runAsGroup

setRunAsGroup

public void setRunAsGroup(ExtensionsV1beta1RunAsGroupStrategyOptions runAsGroup)

runAsUser

public ExtensionsV1beta1PodSecurityPolicySpec runAsUser(ExtensionsV1beta1RunAsUserStrategyOptions runAsUser)

getRunAsUser

public ExtensionsV1beta1RunAsUserStrategyOptions getRunAsUser()

Get runAsUser

Returns:: runAsUser

setRunAsUser

public void setRunAsUser(ExtensionsV1beta1RunAsUserStrategyOptions runAsUser)

runtimeClass

public ExtensionsV1beta1PodSecurityPolicySpec runtimeClass(ExtensionsV1beta1RuntimeClassStrategyOptions runtimeClass)

getRuntimeClass

@Nullable
public ExtensionsV1beta1RuntimeClassStrategyOptions getRuntimeClass()

Get runtimeClass

Returns:: runtimeClass

setRuntimeClass

public void setRuntimeClass(ExtensionsV1beta1RuntimeClassStrategyOptions runtimeClass)

seLinux

public ExtensionsV1beta1PodSecurityPolicySpec seLinux(ExtensionsV1beta1SELinuxStrategyOptions seLinux)

getSeLinux

public ExtensionsV1beta1SELinuxStrategyOptions getSeLinux()

Get seLinux

Returns:: seLinux

setSeLinux

public void setSeLinux(ExtensionsV1beta1SELinuxStrategyOptions seLinux)

supplementalGroups

public ExtensionsV1beta1PodSecurityPolicySpec supplementalGroups(ExtensionsV1beta1SupplementalGroupsStrategyOptions supplementalGroups)

getSupplementalGroups

public ExtensionsV1beta1SupplementalGroupsStrategyOptions getSupplementalGroups()

Get supplementalGroups

Returns:: supplementalGroups

setSupplementalGroups

public void setSupplementalGroups(ExtensionsV1beta1SupplementalGroupsStrategyOptions supplementalGroups)

volumes

public ExtensionsV1beta1PodSecurityPolicySpec volumes(List<String> volumes)

addVolumesItem

public ExtensionsV1beta1PodSecurityPolicySpec addVolumesItem(String volumesItem)

getVolumes
```
@Nullable
public List<String> getVolumes()
```
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

Returns:

volumes

setVolumes

public void setVolumes(List<String> volumes)

equals
```
public boolean equals(Object o)
```
Overrides:

equals in class Object

hashCode
```
public int hashCode()
```
Overrides:

hashCode in class Object

toString
```
public String toString()
```
Overrides:

toString in class Object

Class ExtensionsV1beta1PodSecurityPolicySpec