Package io.kubernetes.client.proto
Class V1beta1Extensions.PodSecurityPolicySpec
java.lang.Object
com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessage
com.google.protobuf.GeneratedMessageV3
io.kubernetes.client.proto.V1beta1Extensions.PodSecurityPolicySpec
- All Implemented Interfaces:
com.google.protobuf.Message,com.google.protobuf.MessageLite,com.google.protobuf.MessageLiteOrBuilder,com.google.protobuf.MessageOrBuilder,V1beta1Extensions.PodSecurityPolicySpecOrBuilder,Serializable
- Enclosing class:
- V1beta1Extensions
public static final class V1beta1Extensions.PodSecurityPolicySpec
extends com.google.protobuf.GeneratedMessageV3
implements V1beta1Extensions.PodSecurityPolicySpecOrBuilder
PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.Protobuf type
k8s.io.api.extensions.v1beta1.PodSecurityPolicySpec- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final classPodSecurityPolicySpec defines the policy enforced.Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3
com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType, BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessageLite.InternalOneOfEnum -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>Deprecated.static final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intstatic final intFields inherited from class com.google.protobuf.GeneratedMessageV3
alwaysUseFieldBuilders, unknownFieldsFields inherited from class com.google.protobuf.AbstractMessage
memoizedSizeFields inherited from class com.google.protobuf.AbstractMessageLite
memoizedHashCode -
Method Summary
Modifier and TypeMethodDescriptionbooleangetAllowedCapabilities(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container.com.google.protobuf.ByteStringgetAllowedCapabilitiesBytes(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container.intallowedCapabilities is a list of capabilities that can be requested to add to the container.com.google.protobuf.ProtocolStringListallowedCapabilities is a list of capabilities that can be requested to add to the container.getAllowedCSIDrivers(int index) AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.intAllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.getAllowedCSIDriversOrBuilder(int index) AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.List<? extends V1beta1Extensions.AllowedCSIDriverOrBuilder>AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.getAllowedFlexVolumes(int index) allowedFlexVolumes is an allowlist of Flexvolumes.intallowedFlexVolumes is an allowlist of Flexvolumes.allowedFlexVolumes is an allowlist of Flexvolumes.getAllowedFlexVolumesOrBuilder(int index) allowedFlexVolumes is an allowlist of Flexvolumes.List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder>allowedFlexVolumes is an allowlist of Flexvolumes.getAllowedHostPaths(int index) allowedHostPaths is an allowlist of host paths.intallowedHostPaths is an allowlist of host paths.allowedHostPaths is an allowlist of host paths.getAllowedHostPathsOrBuilder(int index) allowedHostPaths is an allowlist of host paths.List<? extends V1beta1Extensions.AllowedHostPathOrBuilder>allowedHostPaths is an allowlist of host paths.getAllowedProcMountTypes(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.com.google.protobuf.ByteStringgetAllowedProcMountTypesBytes(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.intAllowedProcMountTypes is an allowlist of allowed ProcMountTypes.com.google.protobuf.ProtocolStringListAllowedProcMountTypes is an allowlist of allowed ProcMountTypes.getAllowedUnsafeSysctls(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.com.google.protobuf.ByteStringgetAllowedUnsafeSysctlsBytes(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.intallowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.com.google.protobuf.ProtocolStringListallowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.booleanallowPrivilegeEscalation determines if a pod can request to allow privilege escalation.getDefaultAddCapabilities(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.com.google.protobuf.ByteStringgetDefaultAddCapabilitiesBytes(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.intdefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.com.google.protobuf.ProtocolStringListdefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.booleandefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.static final com.google.protobuf.Descriptors.DescriptorgetForbiddenSysctls(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.com.google.protobuf.ByteStringgetForbiddenSysctlsBytes(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.intforbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.com.google.protobuf.ProtocolStringListforbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.booleanhostIPC determines if the policy allows the use of HostIPC in the pod spec.booleanhostNetwork determines if the policy allows the use of HostNetwork in the pod spec.booleanhostPID determines if the policy allows the use of HostPID in the pod spec.getHostPorts(int index) hostPorts determines which host port ranges are allowed to be exposed.inthostPorts determines which host port ranges are allowed to be exposed.hostPorts determines which host port ranges are allowed to be exposed.getHostPortsOrBuilder(int index) hostPorts determines which host port ranges are allowed to be exposed.List<? extends V1beta1Extensions.HostPortRangeOrBuilder>hostPorts determines which host port ranges are allowed to be exposed.com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>booleanprivileged determines if a pod can request to be run as privileged.booleanreadOnlyRootFilesystem when set to true will force containers to run with a read only root file system.getRequiredDropCapabilities(int index) requiredDropCapabilities are the capabilities that will be dropped from the container.com.google.protobuf.ByteStringgetRequiredDropCapabilitiesBytes(int index) requiredDropCapabilities are the capabilities that will be dropped from the container.intrequiredDropCapabilities are the capabilities that will be dropped from the container.com.google.protobuf.ProtocolStringListrequiredDropCapabilities are the capabilities that will be dropped from the container.RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.seLinux is the strategy that will dictate the allowable labels that may be set.seLinux is the strategy that will dictate the allowable labels that may be set.intsupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.final com.google.protobuf.UnknownFieldSetgetVolumes(int index) volumes is an allowlist of volume plugins.com.google.protobuf.ByteStringgetVolumesBytes(int index) volumes is an allowlist of volume plugins.intvolumes is an allowlist of volume plugins.com.google.protobuf.ProtocolStringListvolumes is an allowlist of volume plugins.booleanallowPrivilegeEscalation determines if a pod can request to allow privilege escalation.booleandefaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.booleanfsGroup is the strategy that will dictate what fs group is used by the SecurityContext.inthashCode()booleanhostIPC determines if the policy allows the use of HostIPC in the pod spec.booleanhostNetwork determines if the policy allows the use of HostNetwork in the pod spec.booleanhostPID determines if the policy allows the use of HostPID in the pod spec.booleanprivileged determines if a pod can request to be run as privileged.booleanreadOnlyRootFilesystem when set to true will force containers to run with a read only root file system.booleanRunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.booleanrunAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.booleanruntimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.booleanseLinux is the strategy that will dictate the allowable labels that may be set.booleansupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTablefinal booleannewBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) parseDelimitedFrom(InputStream input) parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom(byte[] data) parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom(com.google.protobuf.ByteString data) parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom(com.google.protobuf.CodedInputStream input) parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom(InputStream input) parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom(ByteBuffer data) parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) static com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>parser()voidwriteTo(com.google.protobuf.CodedOutputStream output) Methods inherited from class com.google.protobuf.GeneratedMessageV3
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, isStringEmpty, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newInstance, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTagMethods inherited from class com.google.protobuf.AbstractMessage
findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toStringMethods inherited from class com.google.protobuf.AbstractMessageLite
addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeToMethods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, waitMethods inherited from interface com.google.protobuf.MessageLite
toByteArray, toByteString, writeDelimitedTo, writeToMethods inherited from interface com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof
-
Field Details
-
PRIVILEGED_FIELD_NUMBER
public static final int PRIVILEGED_FIELD_NUMBER- See Also:
-
DEFAULTADDCAPABILITIES_FIELD_NUMBER
public static final int DEFAULTADDCAPABILITIES_FIELD_NUMBER- See Also:
-
REQUIREDDROPCAPABILITIES_FIELD_NUMBER
public static final int REQUIREDDROPCAPABILITIES_FIELD_NUMBER- See Also:
-
ALLOWEDCAPABILITIES_FIELD_NUMBER
public static final int ALLOWEDCAPABILITIES_FIELD_NUMBER- See Also:
-
VOLUMES_FIELD_NUMBER
public static final int VOLUMES_FIELD_NUMBER- See Also:
-
HOSTNETWORK_FIELD_NUMBER
public static final int HOSTNETWORK_FIELD_NUMBER- See Also:
-
HOSTPORTS_FIELD_NUMBER
public static final int HOSTPORTS_FIELD_NUMBER- See Also:
-
HOSTPID_FIELD_NUMBER
public static final int HOSTPID_FIELD_NUMBER- See Also:
-
HOSTIPC_FIELD_NUMBER
public static final int HOSTIPC_FIELD_NUMBER- See Also:
-
SELINUX_FIELD_NUMBER
public static final int SELINUX_FIELD_NUMBER- See Also:
-
RUNASUSER_FIELD_NUMBER
public static final int RUNASUSER_FIELD_NUMBER- See Also:
-
RUNASGROUP_FIELD_NUMBER
public static final int RUNASGROUP_FIELD_NUMBER- See Also:
-
SUPPLEMENTALGROUPS_FIELD_NUMBER
public static final int SUPPLEMENTALGROUPS_FIELD_NUMBER- See Also:
-
FSGROUP_FIELD_NUMBER
public static final int FSGROUP_FIELD_NUMBER- See Also:
-
READONLYROOTFILESYSTEM_FIELD_NUMBER
public static final int READONLYROOTFILESYSTEM_FIELD_NUMBER- See Also:
-
DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER
public static final int DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER- See Also:
-
ALLOWPRIVILEGEESCALATION_FIELD_NUMBER
public static final int ALLOWPRIVILEGEESCALATION_FIELD_NUMBER- See Also:
-
ALLOWEDHOSTPATHS_FIELD_NUMBER
public static final int ALLOWEDHOSTPATHS_FIELD_NUMBER- See Also:
-
ALLOWEDFLEXVOLUMES_FIELD_NUMBER
public static final int ALLOWEDFLEXVOLUMES_FIELD_NUMBER- See Also:
-
ALLOWEDCSIDRIVERS_FIELD_NUMBER
public static final int ALLOWEDCSIDRIVERS_FIELD_NUMBER- See Also:
-
ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER
public static final int ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER- See Also:
-
FORBIDDENSYSCTLS_FIELD_NUMBER
public static final int FORBIDDENSYSCTLS_FIELD_NUMBER- See Also:
-
ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER
public static final int ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER- See Also:
-
RUNTIMECLASS_FIELD_NUMBER
public static final int RUNTIMECLASS_FIELD_NUMBER- See Also:
-
PARSER
@Deprecated public static final com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec> PARSERDeprecated.
-
-
Method Details
-
getUnknownFields
public final com.google.protobuf.UnknownFieldSet getUnknownFields()- Specified by:
getUnknownFieldsin interfacecom.google.protobuf.MessageOrBuilder- Overrides:
getUnknownFieldsin classcom.google.protobuf.GeneratedMessageV3
-
getDescriptor
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() -
internalGetFieldAccessorTable
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()- Specified by:
internalGetFieldAccessorTablein classcom.google.protobuf.GeneratedMessageV3
-
hasPrivileged
public boolean hasPrivileged()privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;- Specified by:
hasPrivilegedin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getPrivileged
public boolean getPrivileged()privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;- Specified by:
getPrivilegedin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesList
public com.google.protobuf.ProtocolStringList getDefaultAddCapabilitiesList()defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;- Specified by:
getDefaultAddCapabilitiesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesCount
public int getDefaultAddCapabilitiesCount()defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;- Specified by:
getDefaultAddCapabilitiesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilities
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;- Specified by:
getDefaultAddCapabilitiesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesBytes
public com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;- Specified by:
getDefaultAddCapabilitiesBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesList
public com.google.protobuf.ProtocolStringList getRequiredDropCapabilitiesList()requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;- Specified by:
getRequiredDropCapabilitiesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesCount
public int getRequiredDropCapabilitiesCount()requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;- Specified by:
getRequiredDropCapabilitiesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilities
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;- Specified by:
getRequiredDropCapabilitiesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesBytes
public com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index) requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;- Specified by:
getRequiredDropCapabilitiesBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesList
public com.google.protobuf.ProtocolStringList getAllowedCapabilitiesList()allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;- Specified by:
getAllowedCapabilitiesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesCount
public int getAllowedCapabilitiesCount()allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;- Specified by:
getAllowedCapabilitiesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilities
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;- Specified by:
getAllowedCapabilitiesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesBytes
public com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;- Specified by:
getAllowedCapabilitiesBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesList
public com.google.protobuf.ProtocolStringList getVolumesList()volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;- Specified by:
getVolumesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesCount
public int getVolumesCount()volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;- Specified by:
getVolumesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumes
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;- Specified by:
getVolumesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesBytes
public com.google.protobuf.ByteString getVolumesBytes(int index) volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;- Specified by:
getVolumesBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostNetwork
public boolean hasHostNetwork()hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;- Specified by:
hasHostNetworkin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostNetwork
public boolean getHostNetwork()hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;- Specified by:
getHostNetworkin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsList
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;- Specified by:
getHostPortsListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsOrBuilderList
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;- Specified by:
getHostPortsOrBuilderListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsCount
public int getHostPortsCount()hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;- Specified by:
getHostPortsCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPorts
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;- Specified by:
getHostPortsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsOrBuilder
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;- Specified by:
getHostPortsOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostPID
public boolean hasHostPID()hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;- Specified by:
hasHostPIDin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPID
public boolean getHostPID()hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;- Specified by:
getHostPIDin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostIPC
public boolean hasHostIPC()hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;- Specified by:
hasHostIPCin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostIPC
public boolean getHostIPC()hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;- Specified by:
getHostIPCin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasSeLinux
public boolean hasSeLinux()seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;- Specified by:
hasSeLinuxin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSeLinux
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;- Specified by:
getSeLinuxin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSeLinuxOrBuilder
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;- Specified by:
getSeLinuxOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRunAsUser
public boolean hasRunAsUser()runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;- Specified by:
hasRunAsUserin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsUser
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;- Specified by:
getRunAsUserin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsUserOrBuilder
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;- Specified by:
getRunAsUserOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRunAsGroup
public boolean hasRunAsGroup()RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;- Specified by:
hasRunAsGroupin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsGroup
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;- Specified by:
getRunAsGroupin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsGroupOrBuilder
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;- Specified by:
getRunAsGroupOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasSupplementalGroups
public boolean hasSupplementalGroups()supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;- Specified by:
hasSupplementalGroupsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSupplementalGroups
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;- Specified by:
getSupplementalGroupsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSupplementalGroupsOrBuilder
public V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;- Specified by:
getSupplementalGroupsOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasFsGroup
public boolean hasFsGroup()fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;- Specified by:
hasFsGroupin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getFsGroup
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;- Specified by:
getFsGroupin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getFsGroupOrBuilder
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;- Specified by:
getFsGroupOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasReadOnlyRootFilesystem
public boolean hasReadOnlyRootFilesystem()readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;- Specified by:
hasReadOnlyRootFilesystemin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getReadOnlyRootFilesystem
public boolean getReadOnlyRootFilesystem()readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;- Specified by:
getReadOnlyRootFilesystemin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasDefaultAllowPrivilegeEscalation
public boolean hasDefaultAllowPrivilegeEscalation()defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;- Specified by:
hasDefaultAllowPrivilegeEscalationin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAllowPrivilegeEscalation
public boolean getDefaultAllowPrivilegeEscalation()defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;- Specified by:
getDefaultAllowPrivilegeEscalationin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasAllowPrivilegeEscalation
public boolean hasAllowPrivilegeEscalation()allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;- Specified by:
hasAllowPrivilegeEscalationin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowPrivilegeEscalation
public boolean getAllowPrivilegeEscalation()allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;- Specified by:
getAllowPrivilegeEscalationin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsList
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;- Specified by:
getAllowedHostPathsListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsOrBuilderList
public List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;- Specified by:
getAllowedHostPathsOrBuilderListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsCount
public int getAllowedHostPathsCount()allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;- Specified by:
getAllowedHostPathsCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPaths
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;- Specified by:
getAllowedHostPathsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsOrBuilder
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;- Specified by:
getAllowedHostPathsOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesList
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;- Specified by:
getAllowedFlexVolumesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesOrBuilderList
public List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder> getAllowedFlexVolumesOrBuilderList()allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;- Specified by:
getAllowedFlexVolumesOrBuilderListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesCount
public int getAllowedFlexVolumesCount()allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;- Specified by:
getAllowedFlexVolumesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumes
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;- Specified by:
getAllowedFlexVolumesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesOrBuilder
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;- Specified by:
getAllowedFlexVolumesOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversList
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;- Specified by:
getAllowedCSIDriversListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversOrBuilderList
public List<? extends V1beta1Extensions.AllowedCSIDriverOrBuilder> getAllowedCSIDriversOrBuilderList()AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;- Specified by:
getAllowedCSIDriversOrBuilderListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversCount
public int getAllowedCSIDriversCount()AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;- Specified by:
getAllowedCSIDriversCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDrivers
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;- Specified by:
getAllowedCSIDriversin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversOrBuilder
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;- Specified by:
getAllowedCSIDriversOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsList
public com.google.protobuf.ProtocolStringList getAllowedUnsafeSysctlsList()allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;- Specified by:
getAllowedUnsafeSysctlsListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsCount
public int getAllowedUnsafeSysctlsCount()allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;- Specified by:
getAllowedUnsafeSysctlsCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctls
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;- Specified by:
getAllowedUnsafeSysctlsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsBytes
public com.google.protobuf.ByteString getAllowedUnsafeSysctlsBytes(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;- Specified by:
getAllowedUnsafeSysctlsBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsList
public com.google.protobuf.ProtocolStringList getForbiddenSysctlsList()forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;- Specified by:
getForbiddenSysctlsListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsCount
public int getForbiddenSysctlsCount()forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;- Specified by:
getForbiddenSysctlsCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctls
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;- Specified by:
getForbiddenSysctlsin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsBytes
public com.google.protobuf.ByteString getForbiddenSysctlsBytes(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;- Specified by:
getForbiddenSysctlsBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesList
public com.google.protobuf.ProtocolStringList getAllowedProcMountTypesList()AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;- Specified by:
getAllowedProcMountTypesListin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesCount
public int getAllowedProcMountTypesCount()AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;- Specified by:
getAllowedProcMountTypesCountin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypes
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;- Specified by:
getAllowedProcMountTypesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesBytes
public com.google.protobuf.ByteString getAllowedProcMountTypesBytes(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;- Specified by:
getAllowedProcMountTypesBytesin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRuntimeClass
public boolean hasRuntimeClass()runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;- Specified by:
hasRuntimeClassin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRuntimeClass
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;- Specified by:
getRuntimeClassin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRuntimeClassOrBuilder
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;- Specified by:
getRuntimeClassOrBuilderin interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
isInitialized
public final boolean isInitialized()- Specified by:
isInitializedin interfacecom.google.protobuf.MessageLiteOrBuilder- Overrides:
isInitializedin classcom.google.protobuf.GeneratedMessageV3
-
writeTo
- Specified by:
writeToin interfacecom.google.protobuf.MessageLite- Overrides:
writeToin classcom.google.protobuf.GeneratedMessageV3- Throws:
IOException
-
getSerializedSize
public int getSerializedSize()- Specified by:
getSerializedSizein interfacecom.google.protobuf.MessageLite- Overrides:
getSerializedSizein classcom.google.protobuf.GeneratedMessageV3
-
equals
- Specified by:
equalsin interfacecom.google.protobuf.Message- Overrides:
equalsin classcom.google.protobuf.AbstractMessage
-
hashCode
public int hashCode()- Specified by:
hashCodein interfacecom.google.protobuf.Message- Overrides:
hashCodein classcom.google.protobuf.AbstractMessage
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(InputStream input) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
parseDelimitedFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseDelimitedFrom(InputStream input) throws IOException - Throws:
IOException
-
parseDelimitedFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
newBuilderForType
- Specified by:
newBuilderForTypein interfacecom.google.protobuf.Message- Specified by:
newBuilderForTypein interfacecom.google.protobuf.MessageLite
-
newBuilder
-
newBuilder
public static V1beta1Extensions.PodSecurityPolicySpec.Builder newBuilder(V1beta1Extensions.PodSecurityPolicySpec prototype) -
toBuilder
- Specified by:
toBuilderin interfacecom.google.protobuf.Message- Specified by:
toBuilderin interfacecom.google.protobuf.MessageLite
-
newBuilderForType
protected V1beta1Extensions.PodSecurityPolicySpec.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) - Specified by:
newBuilderForTypein classcom.google.protobuf.GeneratedMessageV3
-
getDefaultInstance
-
parser
-
getParserForType
- Specified by:
getParserForTypein interfacecom.google.protobuf.Message- Specified by:
getParserForTypein interfacecom.google.protobuf.MessageLite- Overrides:
getParserForTypein classcom.google.protobuf.GeneratedMessageV3
-
getDefaultInstanceForType
- Specified by:
getDefaultInstanceForTypein interfacecom.google.protobuf.MessageLiteOrBuilder- Specified by:
getDefaultInstanceForTypein interfacecom.google.protobuf.MessageOrBuilder
-