Package org.cdk8s.plus23.k8s

Class PodSecurityContext.Jsii$Proxy

    • Constructor Detail

      • Jsii$Proxy

        protected Jsii$Proxy​(software.amazon.jsii.JsiiObjectRef objRef)
        Constructor that initializes the object based on values retrieved from the JsiiObject.
        Parameters:
        objRef - Reference to the JSII managed object.

    • Method Detail

      • getFsGroup

        public final Number getFsGroup()
        Description copied from interface: PodSecurityContext
        A special supplemental group that applies to all containers in a pod.

        Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:

        1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----

        If unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getFsGroup in interface PodSecurityContext

      • getFsGroupChangePolicy

        public final String getFsGroupChangePolicy()
        Description copied from interface: PodSecurityContext
        fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod.

        This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getFsGroupChangePolicy in interface PodSecurityContext

      • getRunAsGroup

        public final Number getRunAsGroup()
        Description copied from interface: PodSecurityContext
        The GID to run the entrypoint of the container process.

        Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getRunAsGroup in interface PodSecurityContext

      • getRunAsNonRoot

        public final Boolean getRunAsNonRoot()
        Description copied from interface: PodSecurityContext
        Indicates that the container must run as a non-root user.

        If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.

        Specified by:
        getRunAsNonRoot in interface PodSecurityContext

      • getRunAsUser

        public final Number getRunAsUser()
        Description copied from interface: PodSecurityContext
        The UID to run the entrypoint of the container process.

        Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.

        Default: user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getRunAsUser in interface PodSecurityContext

      • getSeLinuxOptions

        public final SeLinuxOptions getSeLinuxOptions()
        Description copied from interface: PodSecurityContext
        The SELinux context to be applied to all containers.

        If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getSeLinuxOptions in interface PodSecurityContext

      • getSupplementalGroups

        public final List<Number> getSupplementalGroups()
        Description copied from interface: PodSecurityContext
        A list of groups applied to the first process run in each container, in addition to the container's primary GID.

        If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getSupplementalGroups in interface PodSecurityContext

      • getSysctls

        public final List<Sysctl> getSysctls()
        Description copied from interface: PodSecurityContext
        Sysctls hold a list of namespaced sysctls used for the pod.

        Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows.

        Specified by:
        getSysctls in interface PodSecurityContext

      • getWindowsOptions

        public final WindowsSecurityContextOptions getWindowsOptions()
        Description copied from interface: PodSecurityContext
        The Windows specific settings applied to all containers.

        If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.

        Specified by:
        getWindowsOptions in interface PodSecurityContext

      • $jsii$toJson

        @Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
        Specified by:
        $jsii$toJson in interface software.amazon.jsii.JsiiSerializable

      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object