Package io.quarkus.kubernetes.deployment

Interface SecurityContextConfig

public interface SecurityContextConfig

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static enum	SecurityContextConfig.PodFSGroupChangePolicy
static interface	SecurityContextConfig.SeLinuxOptions
static interface	SecurityContextConfig.WindowsOptions

Method Summary

Modifier and Type	Method	Description
Optional<Long>	fsGroup()	A special supplemental group that applies to all containers in a pod.
Optional<SecurityContextConfig.PodFSGroupChangePolicy>	fsGroupChangePolicy()	It holds policies that will be used for applying fsGroup to a volume when volume is mounted.
default boolean	isAnyPropertySet()
Optional<Long>	runAsGroup()	The GID to run the entrypoint of the container process.
Optional<Boolean>	runAsNonRoot()	Indicates that the container must run as a non-root user.
Optional<Long>	runAsUser()	The UID to run the entrypoint of the container process.
SecurityContextConfig.SeLinuxOptions	seLinuxOptions()	SELinuxOptions to be applied to the container.
Optional<List<Long>>	supplementalGroups()	A list of groups applied to the first process run in each container, in addition to the container's primary GID.
Map<String,String>	sysctls()	Sysctls hold a list of namespaced sysctls used for the pod.
SecurityContextConfig.WindowsOptions	windowsOptions()	The Windows specific settings applied to all containers.

Method Details

seLinuxOptions

SecurityContextConfig.SeLinuxOptions seLinuxOptions()

SELinuxOptions to be applied to the container.

windowsOptions

SecurityContextConfig.WindowsOptions windowsOptions()

The Windows specific settings applied to all containers.

runAsUser

Optional<Long> runAsUser()

The UID to run the entrypoint of the container process.

runAsGroup

Optional<Long> runAsGroup()

The GID to run the entrypoint of the container process.

runAsNonRoot

Optional<Boolean> runAsNonRoot()

Indicates that the container must run as a non-root user.

supplementalGroups

Optional<List<Long>> supplementalGroups()

A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container.

fsGroup

Optional<Long> fsGroup()

A special supplemental group that applies to all containers in a pod.

sysctls

@ConfigDocMapKey("sysctl-name")
Map<String,String> sysctls()

Sysctls hold a list of namespaced sysctls used for the pod.

fsGroupChangePolicy

Optional<SecurityContextConfig.PodFSGroupChangePolicy> fsGroupChangePolicy()

It holds policies that will be used for applying fsGroup to a volume when volume is mounted. Values: OnRootMismatch, Always

isAnyPropertySet

default boolean isAnyPropertySet()