V1beta1Policy.PodSecurityPolicySpecOrBuilder (client-java-proto 13.0.0 API)

All Superinterfaces:

com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder

All Known Implementing Classes:

V1beta1Policy.PodSecurityPolicySpec, V1beta1Policy.PodSecurityPolicySpec.Builder

Enclosing class:

V1beta1Policy
```
public static interface V1beta1Policy.PodSecurityPolicySpecOrBuilder
extends com.google.protobuf.MessageOrBuilder
```

Method Summary

All Methods Instance Methods Abstract Methods
Modifier and Type	Method and Description
`String`	`getAllowedCapabilities(int index)` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`com.google.protobuf.ByteString`	`getAllowedCapabilitiesBytes(int index)` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`int`	`getAllowedCapabilitiesCount()` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`List<String>`	`getAllowedCapabilitiesList()` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`V1beta1Policy.AllowedFlexVolume`	`getAllowedFlexVolumes(int index)` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`int`	`getAllowedFlexVolumesCount()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`List<V1beta1Policy.AllowedFlexVolume>`	`getAllowedFlexVolumesList()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`V1beta1Policy.AllowedFlexVolumeOrBuilder`	`getAllowedFlexVolumesOrBuilder(int index)` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`List<? extends V1beta1Policy.AllowedFlexVolumeOrBuilder>`	`getAllowedFlexVolumesOrBuilderList()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`V1beta1Policy.AllowedHostPath`	`getAllowedHostPaths(int index)` allowedHostPaths is a white list of allowed host paths.
`int`	`getAllowedHostPathsCount()` allowedHostPaths is a white list of allowed host paths.
`List<V1beta1Policy.AllowedHostPath>`	`getAllowedHostPathsList()` allowedHostPaths is a white list of allowed host paths.
`V1beta1Policy.AllowedHostPathOrBuilder`	`getAllowedHostPathsOrBuilder(int index)` allowedHostPaths is a white list of allowed host paths.
`List<? extends V1beta1Policy.AllowedHostPathOrBuilder>`	`getAllowedHostPathsOrBuilderList()` allowedHostPaths is a white list of allowed host paths.
`String`	`getAllowedProcMountTypes(int index)` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`com.google.protobuf.ByteString`	`getAllowedProcMountTypesBytes(int index)` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`int`	`getAllowedProcMountTypesCount()` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`List<String>`	`getAllowedProcMountTypesList()` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`String`	`getAllowedUnsafeSysctls(int index)` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`com.google.protobuf.ByteString`	`getAllowedUnsafeSysctlsBytes(int index)` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`int`	`getAllowedUnsafeSysctlsCount()` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`List<String>`	`getAllowedUnsafeSysctlsList()` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`boolean`	`getAllowPrivilegeEscalation()` allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
`String`	`getDefaultAddCapabilities(int index)` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`com.google.protobuf.ByteString`	`getDefaultAddCapabilitiesBytes(int index)` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`int`	`getDefaultAddCapabilitiesCount()` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`List<String>`	`getDefaultAddCapabilitiesList()` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`boolean`	`getDefaultAllowPrivilegeEscalation()` defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
`String`	`getForbiddenSysctls(int index)` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`com.google.protobuf.ByteString`	`getForbiddenSysctlsBytes(int index)` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`int`	`getForbiddenSysctlsCount()` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`List<String>`	`getForbiddenSysctlsList()` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`V1beta1Policy.FSGroupStrategyOptions`	`getFsGroup()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`V1beta1Policy.FSGroupStrategyOptionsOrBuilder`	`getFsGroupOrBuilder()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`boolean`	`getHostIPC()` hostIPC determines if the policy allows the use of HostIPC in the pod spec.
`boolean`	`getHostNetwork()` hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
`boolean`	`getHostPID()` hostPID determines if the policy allows the use of HostPID in the pod spec.
`V1beta1Policy.HostPortRange`	`getHostPorts(int index)` hostPorts determines which host port ranges are allowed to be exposed.
`int`	`getHostPortsCount()` hostPorts determines which host port ranges are allowed to be exposed.
`List<V1beta1Policy.HostPortRange>`	`getHostPortsList()` hostPorts determines which host port ranges are allowed to be exposed.
`V1beta1Policy.HostPortRangeOrBuilder`	`getHostPortsOrBuilder(int index)` hostPorts determines which host port ranges are allowed to be exposed.
`List<? extends V1beta1Policy.HostPortRangeOrBuilder>`	`getHostPortsOrBuilderList()` hostPorts determines which host port ranges are allowed to be exposed.
`boolean`	`getPrivileged()` privileged determines if a pod can request to be run as privileged.
`boolean`	`getReadOnlyRootFilesystem()` readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
`String`	`getRequiredDropCapabilities(int index)` requiredDropCapabilities are the capabilities that will be dropped from the container.
`com.google.protobuf.ByteString`	`getRequiredDropCapabilitiesBytes(int index)` requiredDropCapabilities are the capabilities that will be dropped from the container.
`int`	`getRequiredDropCapabilitiesCount()` requiredDropCapabilities are the capabilities that will be dropped from the container.
`List<String>`	`getRequiredDropCapabilitiesList()` requiredDropCapabilities are the capabilities that will be dropped from the container.
`V1beta1Policy.RunAsGroupStrategyOptions`	`getRunAsGroup()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`V1beta1Policy.RunAsGroupStrategyOptionsOrBuilder`	`getRunAsGroupOrBuilder()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`V1beta1Policy.RunAsUserStrategyOptions`	`getRunAsUser()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`V1beta1Policy.RunAsUserStrategyOptionsOrBuilder`	`getRunAsUserOrBuilder()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`V1beta1Policy.SELinuxStrategyOptions`	`getSeLinux()` seLinux is the strategy that will dictate the allowable labels that may be set.
`V1beta1Policy.SELinuxStrategyOptionsOrBuilder`	`getSeLinuxOrBuilder()` seLinux is the strategy that will dictate the allowable labels that may be set.
`V1beta1Policy.SupplementalGroupsStrategyOptions`	`getSupplementalGroups()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
`V1beta1Policy.SupplementalGroupsStrategyOptionsOrBuilder`	`getSupplementalGroupsOrBuilder()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
`String`	`getVolumes(int index)` volumes is a white list of allowed volume plugins.
`com.google.protobuf.ByteString`	`getVolumesBytes(int index)` volumes is a white list of allowed volume plugins.
`int`	`getVolumesCount()` volumes is a white list of allowed volume plugins.
`List<String>`	`getVolumesList()` volumes is a white list of allowed volume plugins.
`boolean`	`hasAllowPrivilegeEscalation()` allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
`boolean`	`hasDefaultAllowPrivilegeEscalation()` defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
`boolean`	`hasFsGroup()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`boolean`	`hasHostIPC()` hostIPC determines if the policy allows the use of HostIPC in the pod spec.
`boolean`	`hasHostNetwork()` hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
`boolean`	`hasHostPID()` hostPID determines if the policy allows the use of HostPID in the pod spec.
`boolean`	`hasPrivileged()` privileged determines if a pod can request to be run as privileged.
`boolean`	`hasReadOnlyRootFilesystem()` readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
`boolean`	`hasRunAsGroup()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`boolean`	`hasRunAsUser()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`boolean`	`hasSeLinux()` seLinux is the strategy that will dictate the allowable labels that may be set.
`boolean`	`hasSupplementalGroups()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

Methods inherited from interface com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder
isInitialized

Method Detail

hasPrivileged

boolean hasPrivileged()

 privileged determines if a pod can request to be run as privileged.
 +optional

optional bool privileged = 1;

getPrivileged

boolean getPrivileged()

 privileged determines if a pod can request to be run as privileged.
 +optional

optional bool privileged = 1;

getDefaultAddCapabilitiesList

List<String> getDefaultAddCapabilitiesList()

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

getDefaultAddCapabilitiesCount

int getDefaultAddCapabilitiesCount()

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

getDefaultAddCapabilities

String getDefaultAddCapabilities(int index)

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

getDefaultAddCapabilitiesBytes

com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index)

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

getRequiredDropCapabilitiesList

List<String> getRequiredDropCapabilitiesList()

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

getRequiredDropCapabilitiesCount

int getRequiredDropCapabilitiesCount()

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

getRequiredDropCapabilities

String getRequiredDropCapabilities(int index)

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

getRequiredDropCapabilitiesBytes

com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index)

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

getAllowedCapabilitiesList

List<String> getAllowedCapabilitiesList()

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

getAllowedCapabilitiesCount

int getAllowedCapabilitiesCount()

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

getAllowedCapabilities

String getAllowedCapabilities(int index)

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

getAllowedCapabilitiesBytes

com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index)

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

getVolumesList

List<String> getVolumesList()

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

getVolumesCount

int getVolumesCount()

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

getVolumes

String getVolumes(int index)

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

getVolumesBytes

com.google.protobuf.ByteString getVolumesBytes(int index)

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

hasHostNetwork

boolean hasHostNetwork()

 hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
 +optional

optional bool hostNetwork = 6;

getHostNetwork

boolean getHostNetwork()

 hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
 +optional

optional bool hostNetwork = 6;