com.baidubce.services.bci.model.securitycontext

Class ContainerSecurityContext

java.lang.Object

com.baidubce.services.bci.model.securitycontext.ContainerSecurityContext

public class ContainerSecurityContext
extends Object

The security context of container

Constructor Summary

Constructors

Constructor and Description
ContainerSecurityContext() The constructor of ContainerSecurityContext
ContainerSecurityContext(Capabilities capabilities, Long runAsUser, Long runAsGroup, Boolean runAsNonRoot, Boolean readOnlyRootFilesystem) The constructor of ContainerSecurityContext

Method Summary

Modifier and Type	Method and Description
Capabilities	getCapabilities()
Boolean	getReadOnlyRootFilesystem()
Long	getRunAsGroup()
Boolean	getRunAsNonRoot()
Long	getRunAsUser()
ContainerSecurityContext	setCapabilities(Capabilities capabilities)
ContainerSecurityContext	setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)
ContainerSecurityContext	setRunAsGroup(Long runAsGroup)
ContainerSecurityContext	setRunAsNonRoot(Boolean runAsNonRoot)
ContainerSecurityContext	setRunAsUser(Long runAsUser)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ContainerSecurityContext

public ContainerSecurityContext()

The constructor of ContainerSecurityContext

ContainerSecurityContext

public ContainerSecurityContext(Capabilities capabilities,
                                Long runAsUser,
                                Long runAsGroup,
                                Boolean runAsNonRoot,
                                Boolean readOnlyRootFilesystem)

The constructor of ContainerSecurityContext

Parameters:

capabilities - The capabilities to add/drop when running containers.

runAsUser - The UID to run the entrypoint of the container process.

runAsGroup - The GID to run the entrypoint of the container process.

runAsNonRoot - Indicates that the container must run as a non-root user.

readOnlyRootFilesystem - Whether this container has a read-only root filesystem.

Method Detail

getCapabilities

public Capabilities getCapabilities()

setCapabilities

public ContainerSecurityContext setCapabilities(Capabilities capabilities)

getRunAsUser

public Long getRunAsUser()

setRunAsUser

public ContainerSecurityContext setRunAsUser(Long runAsUser)

getRunAsGroup

public Long getRunAsGroup()

setRunAsGroup

public ContainerSecurityContext setRunAsGroup(Long runAsGroup)

getRunAsNonRoot

public Boolean getRunAsNonRoot()

setRunAsNonRoot

public ContainerSecurityContext setRunAsNonRoot(Boolean runAsNonRoot)

getReadOnlyRootFilesystem

public Boolean getReadOnlyRootFilesystem()

setReadOnlyRootFilesystem

public ContainerSecurityContext setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)