Package io.kubernetes.client.proto
Class V1beta1Extensions.PodSecurityPolicySpec
java.lang.Object
com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessage
com.google.protobuf.GeneratedMessageV3
io.kubernetes.client.proto.V1beta1Extensions.PodSecurityPolicySpec
- All Implemented Interfaces:
com.google.protobuf.Message
,com.google.protobuf.MessageLite
,com.google.protobuf.MessageLiteOrBuilder
,com.google.protobuf.MessageOrBuilder
,V1beta1Extensions.PodSecurityPolicySpecOrBuilder
,Serializable
- Enclosing class:
- V1beta1Extensions
public static final class V1beta1Extensions.PodSecurityPolicySpec
extends com.google.protobuf.GeneratedMessageV3
implements V1beta1Extensions.PodSecurityPolicySpecOrBuilder
PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.Protobuf type
k8s.io.api.extensions.v1beta1.PodSecurityPolicySpec
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final class
PodSecurityPolicySpec defines the policy enforced.Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3
com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,
BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType, BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite
com.google.protobuf.AbstractMessageLite.InternalOneOfEnum
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>
Deprecated.static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
static final int
Fields inherited from class com.google.protobuf.GeneratedMessageV3
alwaysUseFieldBuilders, unknownFields
Fields inherited from class com.google.protobuf.AbstractMessage
memoizedSize
Fields inherited from class com.google.protobuf.AbstractMessageLite
memoizedHashCode
-
Method Summary
Modifier and TypeMethodDescriptionboolean
getAllowedCapabilities
(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container.com.google.protobuf.ByteString
getAllowedCapabilitiesBytes
(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container.int
allowedCapabilities is a list of capabilities that can be requested to add to the container.com.google.protobuf.ProtocolStringList
allowedCapabilities is a list of capabilities that can be requested to add to the container.getAllowedCSIDrivers
(int index) AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.int
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.getAllowedCSIDriversOrBuilder
(int index) AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.List<? extends V1beta1Extensions.AllowedCSIDriverOrBuilder>
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.getAllowedFlexVolumes
(int index) allowedFlexVolumes is an allowlist of Flexvolumes.int
allowedFlexVolumes is an allowlist of Flexvolumes.allowedFlexVolumes is an allowlist of Flexvolumes.getAllowedFlexVolumesOrBuilder
(int index) allowedFlexVolumes is an allowlist of Flexvolumes.List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder>
allowedFlexVolumes is an allowlist of Flexvolumes.getAllowedHostPaths
(int index) allowedHostPaths is an allowlist of host paths.int
allowedHostPaths is an allowlist of host paths.allowedHostPaths is an allowlist of host paths.getAllowedHostPathsOrBuilder
(int index) allowedHostPaths is an allowlist of host paths.List<? extends V1beta1Extensions.AllowedHostPathOrBuilder>
allowedHostPaths is an allowlist of host paths.getAllowedProcMountTypes
(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.com.google.protobuf.ByteString
getAllowedProcMountTypesBytes
(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.int
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.com.google.protobuf.ProtocolStringList
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.getAllowedUnsafeSysctls
(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.com.google.protobuf.ByteString
getAllowedUnsafeSysctlsBytes
(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.int
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.com.google.protobuf.ProtocolStringList
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.boolean
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.getDefaultAddCapabilities
(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.com.google.protobuf.ByteString
getDefaultAddCapabilitiesBytes
(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.int
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.com.google.protobuf.ProtocolStringList
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.boolean
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.static final com.google.protobuf.Descriptors.Descriptor
getForbiddenSysctls
(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.com.google.protobuf.ByteString
getForbiddenSysctlsBytes
(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.int
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.com.google.protobuf.ProtocolStringList
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.boolean
hostIPC determines if the policy allows the use of HostIPC in the pod spec.boolean
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.boolean
hostPID determines if the policy allows the use of HostPID in the pod spec.getHostPorts
(int index) hostPorts determines which host port ranges are allowed to be exposed.int
hostPorts determines which host port ranges are allowed to be exposed.hostPorts determines which host port ranges are allowed to be exposed.getHostPortsOrBuilder
(int index) hostPorts determines which host port ranges are allowed to be exposed.List<? extends V1beta1Extensions.HostPortRangeOrBuilder>
hostPorts determines which host port ranges are allowed to be exposed.com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>
boolean
privileged determines if a pod can request to be run as privileged.boolean
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.getRequiredDropCapabilities
(int index) requiredDropCapabilities are the capabilities that will be dropped from the container.com.google.protobuf.ByteString
getRequiredDropCapabilitiesBytes
(int index) requiredDropCapabilities are the capabilities that will be dropped from the container.int
requiredDropCapabilities are the capabilities that will be dropped from the container.com.google.protobuf.ProtocolStringList
requiredDropCapabilities are the capabilities that will be dropped from the container.RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.seLinux is the strategy that will dictate the allowable labels that may be set.seLinux is the strategy that will dictate the allowable labels that may be set.int
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.final com.google.protobuf.UnknownFieldSet
getVolumes
(int index) volumes is an allowlist of volume plugins.com.google.protobuf.ByteString
getVolumesBytes
(int index) volumes is an allowlist of volume plugins.int
volumes is an allowlist of volume plugins.com.google.protobuf.ProtocolStringList
volumes is an allowlist of volume plugins.boolean
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.boolean
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.boolean
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.int
hashCode()
boolean
hostIPC determines if the policy allows the use of HostIPC in the pod spec.boolean
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.boolean
hostPID determines if the policy allows the use of HostPID in the pod spec.boolean
privileged determines if a pod can request to be run as privileged.boolean
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.boolean
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.boolean
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.boolean
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.boolean
seLinux is the strategy that will dictate the allowable labels that may be set.boolean
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
final boolean
newBuilderForType
(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) parseDelimitedFrom
(InputStream input) parseDelimitedFrom
(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom
(byte[] data) parseFrom
(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom
(com.google.protobuf.ByteString data) parseFrom
(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom
(com.google.protobuf.CodedInputStream input) parseFrom
(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom
(InputStream input) parseFrom
(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) parseFrom
(ByteBuffer data) parseFrom
(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) static com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec>
parser()
void
writeTo
(com.google.protobuf.CodedOutputStream output) Methods inherited from class com.google.protobuf.GeneratedMessageV3
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, isStringEmpty, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newInstance, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag
Methods inherited from class com.google.protobuf.AbstractMessage
findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toString
Methods inherited from class com.google.protobuf.AbstractMessageLite
addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo
Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait
Methods inherited from interface com.google.protobuf.MessageLite
toByteArray, toByteString, writeDelimitedTo, writeTo
Methods inherited from interface com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof
-
Field Details
-
PRIVILEGED_FIELD_NUMBER
public static final int PRIVILEGED_FIELD_NUMBER- See Also:
-
DEFAULTADDCAPABILITIES_FIELD_NUMBER
public static final int DEFAULTADDCAPABILITIES_FIELD_NUMBER- See Also:
-
REQUIREDDROPCAPABILITIES_FIELD_NUMBER
public static final int REQUIREDDROPCAPABILITIES_FIELD_NUMBER- See Also:
-
ALLOWEDCAPABILITIES_FIELD_NUMBER
public static final int ALLOWEDCAPABILITIES_FIELD_NUMBER- See Also:
-
VOLUMES_FIELD_NUMBER
public static final int VOLUMES_FIELD_NUMBER- See Also:
-
HOSTNETWORK_FIELD_NUMBER
public static final int HOSTNETWORK_FIELD_NUMBER- See Also:
-
HOSTPORTS_FIELD_NUMBER
public static final int HOSTPORTS_FIELD_NUMBER- See Also:
-
HOSTPID_FIELD_NUMBER
public static final int HOSTPID_FIELD_NUMBER- See Also:
-
HOSTIPC_FIELD_NUMBER
public static final int HOSTIPC_FIELD_NUMBER- See Also:
-
SELINUX_FIELD_NUMBER
public static final int SELINUX_FIELD_NUMBER- See Also:
-
RUNASUSER_FIELD_NUMBER
public static final int RUNASUSER_FIELD_NUMBER- See Also:
-
RUNASGROUP_FIELD_NUMBER
public static final int RUNASGROUP_FIELD_NUMBER- See Also:
-
SUPPLEMENTALGROUPS_FIELD_NUMBER
public static final int SUPPLEMENTALGROUPS_FIELD_NUMBER- See Also:
-
FSGROUP_FIELD_NUMBER
public static final int FSGROUP_FIELD_NUMBER- See Also:
-
READONLYROOTFILESYSTEM_FIELD_NUMBER
public static final int READONLYROOTFILESYSTEM_FIELD_NUMBER- See Also:
-
DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER
public static final int DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER- See Also:
-
ALLOWPRIVILEGEESCALATION_FIELD_NUMBER
public static final int ALLOWPRIVILEGEESCALATION_FIELD_NUMBER- See Also:
-
ALLOWEDHOSTPATHS_FIELD_NUMBER
public static final int ALLOWEDHOSTPATHS_FIELD_NUMBER- See Also:
-
ALLOWEDFLEXVOLUMES_FIELD_NUMBER
public static final int ALLOWEDFLEXVOLUMES_FIELD_NUMBER- See Also:
-
ALLOWEDCSIDRIVERS_FIELD_NUMBER
public static final int ALLOWEDCSIDRIVERS_FIELD_NUMBER- See Also:
-
ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER
public static final int ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER- See Also:
-
FORBIDDENSYSCTLS_FIELD_NUMBER
public static final int FORBIDDENSYSCTLS_FIELD_NUMBER- See Also:
-
ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER
public static final int ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER- See Also:
-
RUNTIMECLASS_FIELD_NUMBER
public static final int RUNTIMECLASS_FIELD_NUMBER- See Also:
-
PARSER
@Deprecated public static final com.google.protobuf.Parser<V1beta1Extensions.PodSecurityPolicySpec> PARSERDeprecated.
-
-
Method Details
-
getUnknownFields
public final com.google.protobuf.UnknownFieldSet getUnknownFields()- Specified by:
getUnknownFields
in interfacecom.google.protobuf.MessageOrBuilder
- Overrides:
getUnknownFields
in classcom.google.protobuf.GeneratedMessageV3
-
getDescriptor
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() -
internalGetFieldAccessorTable
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()- Specified by:
internalGetFieldAccessorTable
in classcom.google.protobuf.GeneratedMessageV3
-
hasPrivileged
public boolean hasPrivileged()privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;
- Specified by:
hasPrivileged
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getPrivileged
public boolean getPrivileged()privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;
- Specified by:
getPrivileged
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesList
public com.google.protobuf.ProtocolStringList getDefaultAddCapabilitiesList()defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;
- Specified by:
getDefaultAddCapabilitiesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesCount
public int getDefaultAddCapabilitiesCount()defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;
- Specified by:
getDefaultAddCapabilitiesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilities
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;
- Specified by:
getDefaultAddCapabilities
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAddCapabilitiesBytes
public com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index) defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;
- Specified by:
getDefaultAddCapabilitiesBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesList
public com.google.protobuf.ProtocolStringList getRequiredDropCapabilitiesList()requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;
- Specified by:
getRequiredDropCapabilitiesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesCount
public int getRequiredDropCapabilitiesCount()requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;
- Specified by:
getRequiredDropCapabilitiesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilities
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;
- Specified by:
getRequiredDropCapabilities
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRequiredDropCapabilitiesBytes
public com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index) requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;
- Specified by:
getRequiredDropCapabilitiesBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesList
public com.google.protobuf.ProtocolStringList getAllowedCapabilitiesList()allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;
- Specified by:
getAllowedCapabilitiesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesCount
public int getAllowedCapabilitiesCount()allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;
- Specified by:
getAllowedCapabilitiesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilities
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;
- Specified by:
getAllowedCapabilities
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCapabilitiesBytes
public com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index) allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;
- Specified by:
getAllowedCapabilitiesBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesList
public com.google.protobuf.ProtocolStringList getVolumesList()volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;
- Specified by:
getVolumesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesCount
public int getVolumesCount()volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;
- Specified by:
getVolumesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumes
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;
- Specified by:
getVolumes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getVolumesBytes
public com.google.protobuf.ByteString getVolumesBytes(int index) volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;
- Specified by:
getVolumesBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostNetwork
public boolean hasHostNetwork()hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;
- Specified by:
hasHostNetwork
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostNetwork
public boolean getHostNetwork()hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;
- Specified by:
getHostNetwork
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsList
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;
- Specified by:
getHostPortsList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsOrBuilderList
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;
- Specified by:
getHostPortsOrBuilderList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsCount
public int getHostPortsCount()hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;
- Specified by:
getHostPortsCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPorts
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;
- Specified by:
getHostPorts
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPortsOrBuilder
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.extensions.v1beta1.HostPortRange hostPorts = 7;
- Specified by:
getHostPortsOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostPID
public boolean hasHostPID()hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;
- Specified by:
hasHostPID
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostPID
public boolean getHostPID()hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;
- Specified by:
getHostPID
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasHostIPC
public boolean hasHostIPC()hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;
- Specified by:
hasHostIPC
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getHostIPC
public boolean getHostIPC()hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;
- Specified by:
getHostIPC
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasSeLinux
public boolean hasSeLinux()seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;
- Specified by:
hasSeLinux
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSeLinux
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;
- Specified by:
getSeLinux
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSeLinuxOrBuilder
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.extensions.v1beta1.SELinuxStrategyOptions seLinux = 10;
- Specified by:
getSeLinuxOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRunAsUser
public boolean hasRunAsUser()runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
- Specified by:
hasRunAsUser
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsUser
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
- Specified by:
getRunAsUser
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsUserOrBuilder
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.extensions.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
- Specified by:
getRunAsUserOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRunAsGroup
public boolean hasRunAsGroup()RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;
- Specified by:
hasRunAsGroup
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsGroup
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;
- Specified by:
getRunAsGroup
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRunAsGroupOrBuilder
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;
- Specified by:
getRunAsGroupOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasSupplementalGroups
public boolean hasSupplementalGroups()supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
- Specified by:
hasSupplementalGroups
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSupplementalGroups
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
- Specified by:
getSupplementalGroups
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getSupplementalGroupsOrBuilder
public V1beta1Extensions.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
- Specified by:
getSupplementalGroupsOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasFsGroup
public boolean hasFsGroup()fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;
- Specified by:
hasFsGroup
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getFsGroup
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;
- Specified by:
getFsGroup
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getFsGroupOrBuilder
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.extensions.v1beta1.FSGroupStrategyOptions fsGroup = 13;
- Specified by:
getFsGroupOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasReadOnlyRootFilesystem
public boolean hasReadOnlyRootFilesystem()readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;
- Specified by:
hasReadOnlyRootFilesystem
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getReadOnlyRootFilesystem
public boolean getReadOnlyRootFilesystem()readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;
- Specified by:
getReadOnlyRootFilesystem
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasDefaultAllowPrivilegeEscalation
public boolean hasDefaultAllowPrivilegeEscalation()defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;
- Specified by:
hasDefaultAllowPrivilegeEscalation
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getDefaultAllowPrivilegeEscalation
public boolean getDefaultAllowPrivilegeEscalation()defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;
- Specified by:
getDefaultAllowPrivilegeEscalation
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasAllowPrivilegeEscalation
public boolean hasAllowPrivilegeEscalation()allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;
- Specified by:
hasAllowPrivilegeEscalation
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowPrivilegeEscalation
public boolean getAllowPrivilegeEscalation()allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;
- Specified by:
getAllowPrivilegeEscalation
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsList
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;
- Specified by:
getAllowedHostPathsList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsOrBuilderList
public List<? extends V1beta1Extensions.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;
- Specified by:
getAllowedHostPathsOrBuilderList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsCount
public int getAllowedHostPathsCount()allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;
- Specified by:
getAllowedHostPathsCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPaths
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;
- Specified by:
getAllowedHostPaths
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedHostPathsOrBuilder
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedHostPath allowedHostPaths = 17;
- Specified by:
getAllowedHostPathsOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesList
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;
- Specified by:
getAllowedFlexVolumesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesOrBuilderList
public List<? extends V1beta1Extensions.AllowedFlexVolumeOrBuilder> getAllowedFlexVolumesOrBuilderList()allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;
- Specified by:
getAllowedFlexVolumesOrBuilderList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesCount
public int getAllowedFlexVolumesCount()allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;
- Specified by:
getAllowedFlexVolumesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumes
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;
- Specified by:
getAllowedFlexVolumes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedFlexVolumesOrBuilder
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;
- Specified by:
getAllowedFlexVolumesOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversList
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;
- Specified by:
getAllowedCSIDriversList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversOrBuilderList
public List<? extends V1beta1Extensions.AllowedCSIDriverOrBuilder> getAllowedCSIDriversOrBuilderList()AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;
- Specified by:
getAllowedCSIDriversOrBuilderList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversCount
public int getAllowedCSIDriversCount()AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;
- Specified by:
getAllowedCSIDriversCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDrivers
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;
- Specified by:
getAllowedCSIDrivers
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedCSIDriversOrBuilder
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. +optional
repeated .k8s.io.api.extensions.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;
- Specified by:
getAllowedCSIDriversOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsList
public com.google.protobuf.ProtocolStringList getAllowedUnsafeSysctlsList()allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;
- Specified by:
getAllowedUnsafeSysctlsList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsCount
public int getAllowedUnsafeSysctlsCount()allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;
- Specified by:
getAllowedUnsafeSysctlsCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctls
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;
- Specified by:
getAllowedUnsafeSysctls
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedUnsafeSysctlsBytes
public com.google.protobuf.ByteString getAllowedUnsafeSysctlsBytes(int index) allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;
- Specified by:
getAllowedUnsafeSysctlsBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsList
public com.google.protobuf.ProtocolStringList getForbiddenSysctlsList()forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;
- Specified by:
getForbiddenSysctlsList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsCount
public int getForbiddenSysctlsCount()forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;
- Specified by:
getForbiddenSysctlsCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctls
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;
- Specified by:
getForbiddenSysctls
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getForbiddenSysctlsBytes
public com.google.protobuf.ByteString getForbiddenSysctlsBytes(int index) forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;
- Specified by:
getForbiddenSysctlsBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesList
public com.google.protobuf.ProtocolStringList getAllowedProcMountTypesList()AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;
- Specified by:
getAllowedProcMountTypesList
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesCount
public int getAllowedProcMountTypesCount()AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;
- Specified by:
getAllowedProcMountTypesCount
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypes
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;
- Specified by:
getAllowedProcMountTypes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getAllowedProcMountTypesBytes
public com.google.protobuf.ByteString getAllowedProcMountTypesBytes(int index) AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;
- Specified by:
getAllowedProcMountTypesBytes
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
hasRuntimeClass
public boolean hasRuntimeClass()runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
- Specified by:
hasRuntimeClass
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRuntimeClass
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
- Specified by:
getRuntimeClass
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
getRuntimeClassOrBuilder
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.extensions.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
- Specified by:
getRuntimeClassOrBuilder
in interfaceV1beta1Extensions.PodSecurityPolicySpecOrBuilder
-
isInitialized
public final boolean isInitialized()- Specified by:
isInitialized
in interfacecom.google.protobuf.MessageLiteOrBuilder
- Overrides:
isInitialized
in classcom.google.protobuf.GeneratedMessageV3
-
writeTo
- Specified by:
writeTo
in interfacecom.google.protobuf.MessageLite
- Overrides:
writeTo
in classcom.google.protobuf.GeneratedMessageV3
- Throws:
IOException
-
getSerializedSize
public int getSerializedSize()- Specified by:
getSerializedSize
in interfacecom.google.protobuf.MessageLite
- Overrides:
getSerializedSize
in classcom.google.protobuf.GeneratedMessageV3
-
equals
- Specified by:
equals
in interfacecom.google.protobuf.Message
- Overrides:
equals
in classcom.google.protobuf.AbstractMessage
-
hashCode
public int hashCode()- Specified by:
hashCode
in interfacecom.google.protobuf.Message
- Overrides:
hashCode
in classcom.google.protobuf.AbstractMessage
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException - Throws:
com.google.protobuf.InvalidProtocolBufferException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(InputStream input) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
parseDelimitedFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseDelimitedFrom(InputStream input) throws IOException - Throws:
IOException
-
parseDelimitedFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input) throws IOException - Throws:
IOException
-
parseFrom
public static V1beta1Extensions.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Throws:
IOException
-
newBuilderForType
- Specified by:
newBuilderForType
in interfacecom.google.protobuf.Message
- Specified by:
newBuilderForType
in interfacecom.google.protobuf.MessageLite
-
newBuilder
-
newBuilder
public static V1beta1Extensions.PodSecurityPolicySpec.Builder newBuilder(V1beta1Extensions.PodSecurityPolicySpec prototype) -
toBuilder
- Specified by:
toBuilder
in interfacecom.google.protobuf.Message
- Specified by:
toBuilder
in interfacecom.google.protobuf.MessageLite
-
newBuilderForType
protected V1beta1Extensions.PodSecurityPolicySpec.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) - Specified by:
newBuilderForType
in classcom.google.protobuf.GeneratedMessageV3
-
getDefaultInstance
-
parser
-
getParserForType
- Specified by:
getParserForType
in interfacecom.google.protobuf.Message
- Specified by:
getParserForType
in interfacecom.google.protobuf.MessageLite
- Overrides:
getParserForType
in classcom.google.protobuf.GeneratedMessageV3
-
getDefaultInstanceForType
- Specified by:
getDefaultInstanceForType
in interfacecom.google.protobuf.MessageLiteOrBuilder
- Specified by:
getDefaultInstanceForType
in interfacecom.google.protobuf.MessageOrBuilder
-