public static final class V1beta1Policy.PodSecurityPolicySpec.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder> implements V1beta1Policy.PodSecurityPolicySpecOrBuilder
PodSecurityPolicySpec defines the policy enforced.Protobuf type
k8s.io.api.policy.v1beta1.PodSecurityPolicySpec| Modifier and Type | Method and Description |
|---|---|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedCapabilities(Iterable<String> values)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedCSIDrivers(Iterable<? extends V1beta1Policy.AllowedCSIDriver> values)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedFlexVolumes(Iterable<? extends V1beta1Policy.AllowedFlexVolume> values)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedHostPaths(Iterable<? extends V1beta1Policy.AllowedHostPath> values)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedProcMountTypes(Iterable<String> values)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllAllowedUnsafeSysctls(Iterable<String> values)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllDefaultAddCapabilities(Iterable<String> values)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllForbiddenSysctls(Iterable<String> values)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllHostPorts(Iterable<? extends V1beta1Policy.HostPortRange> values)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCapabilities(String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCapabilitiesBytes(com.google.protobuf.ByteString value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCSIDrivers(int index,
V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCSIDrivers(int index,
V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCSIDrivers(V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedCSIDrivers(V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.AllowedCSIDriver.Builder |
addAllowedCSIDriversBuilder()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.AllowedCSIDriver.Builder |
addAllowedCSIDriversBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(int index,
V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(int index,
V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedFlexVolumes(V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.AllowedFlexVolume.Builder |
addAllowedFlexVolumesBuilder()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.AllowedFlexVolume.Builder |
addAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(int index,
V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(int index,
V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedHostPaths(V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.AllowedHostPath.Builder |
addAllowedHostPathsBuilder()
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.AllowedHostPath.Builder |
addAllowedHostPathsBuilder(int index)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedProcMountTypes(String value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedProcMountTypesBytes(com.google.protobuf.ByteString value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedUnsafeSysctls(String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllowedUnsafeSysctlsBytes(com.google.protobuf.ByteString value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllRequiredDropCapabilities(Iterable<String> values)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addAllVolumes(Iterable<String> values)
volumes is an allowlist of volume plugins.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addDefaultAddCapabilities(String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addDefaultAddCapabilitiesBytes(com.google.protobuf.ByteString value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addForbiddenSysctls(String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addForbiddenSysctlsBytes(com.google.protobuf.ByteString value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addHostPorts(int index,
V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addHostPorts(int index,
V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addHostPorts(V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addHostPorts(V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.HostPortRange.Builder |
addHostPortsBuilder()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.HostPortRange.Builder |
addHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
addRequiredDropCapabilities(String value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addRequiredDropCapabilitiesBytes(com.google.protobuf.ByteString value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addVolumes(String value)
volumes is an allowlist of volume plugins.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
addVolumesBytes(com.google.protobuf.ByteString value)
volumes is an allowlist of volume plugins.
|
V1beta1Policy.PodSecurityPolicySpec |
build() |
V1beta1Policy.PodSecurityPolicySpec |
buildPartial() |
V1beta1Policy.PodSecurityPolicySpec.Builder |
clear() |
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedCapabilities()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedCSIDrivers()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedFlexVolumes()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedHostPaths()
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedProcMountTypes()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowedUnsafeSysctls()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearDefaultAddCapabilities()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearForbiddenSysctls()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearHostPorts()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearPrivileged()
privileged determines if a pod can request to be run as privileged.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearRequiredDropCapabilities()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clearVolumes()
volumes is an allowlist of volume plugins.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
clone() |
String |
getAllowedCapabilities(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
com.google.protobuf.ByteString |
getAllowedCapabilitiesBytes(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
int |
getAllowedCapabilitiesCount()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
com.google.protobuf.ProtocolStringList |
getAllowedCapabilitiesList()
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.AllowedCSIDriver |
getAllowedCSIDrivers(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.AllowedCSIDriver.Builder |
getAllowedCSIDriversBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
List<V1beta1Policy.AllowedCSIDriver.Builder> |
getAllowedCSIDriversBuilderList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
int |
getAllowedCSIDriversCount()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
List<V1beta1Policy.AllowedCSIDriver> |
getAllowedCSIDriversList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.AllowedCSIDriverOrBuilder |
getAllowedCSIDriversOrBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
List<? extends V1beta1Policy.AllowedCSIDriverOrBuilder> |
getAllowedCSIDriversOrBuilderList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.AllowedFlexVolume |
getAllowedFlexVolumes(int index)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.AllowedFlexVolume.Builder |
getAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
List<V1beta1Policy.AllowedFlexVolume.Builder> |
getAllowedFlexVolumesBuilderList()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
int |
getAllowedFlexVolumesCount()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
List<V1beta1Policy.AllowedFlexVolume> |
getAllowedFlexVolumesList()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.AllowedFlexVolumeOrBuilder |
getAllowedFlexVolumesOrBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
List<? extends V1beta1Policy.AllowedFlexVolumeOrBuilder> |
getAllowedFlexVolumesOrBuilderList()
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.AllowedHostPath |
getAllowedHostPaths(int index)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.AllowedHostPath.Builder |
getAllowedHostPathsBuilder(int index)
allowedHostPaths is an allowlist of host paths.
|
List<V1beta1Policy.AllowedHostPath.Builder> |
getAllowedHostPathsBuilderList()
allowedHostPaths is an allowlist of host paths.
|
int |
getAllowedHostPathsCount()
allowedHostPaths is an allowlist of host paths.
|
List<V1beta1Policy.AllowedHostPath> |
getAllowedHostPathsList()
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.AllowedHostPathOrBuilder |
getAllowedHostPathsOrBuilder(int index)
allowedHostPaths is an allowlist of host paths.
|
List<? extends V1beta1Policy.AllowedHostPathOrBuilder> |
getAllowedHostPathsOrBuilderList()
allowedHostPaths is an allowlist of host paths.
|
String |
getAllowedProcMountTypes(int index)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
com.google.protobuf.ByteString |
getAllowedProcMountTypesBytes(int index)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
int |
getAllowedProcMountTypesCount()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
com.google.protobuf.ProtocolStringList |
getAllowedProcMountTypesList()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
String |
getAllowedUnsafeSysctls(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
com.google.protobuf.ByteString |
getAllowedUnsafeSysctlsBytes(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
int |
getAllowedUnsafeSysctlsCount()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
com.google.protobuf.ProtocolStringList |
getAllowedUnsafeSysctlsList()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
boolean |
getAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
String |
getDefaultAddCapabilities(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
com.google.protobuf.ByteString |
getDefaultAddCapabilitiesBytes(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
int |
getDefaultAddCapabilitiesCount()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
com.google.protobuf.ProtocolStringList |
getDefaultAddCapabilitiesList()
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
boolean |
getDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Policy.PodSecurityPolicySpec |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getForbiddenSysctls(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
com.google.protobuf.ByteString |
getForbiddenSysctlsBytes(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
int |
getForbiddenSysctlsCount()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
com.google.protobuf.ProtocolStringList |
getForbiddenSysctlsList()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.FSGroupStrategyOptions |
getFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.FSGroupStrategyOptions.Builder |
getFsGroupBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.FSGroupStrategyOptionsOrBuilder |
getFsGroupOrBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Policy.HostPortRange |
getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.HostPortRange.Builder |
getHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
List<V1beta1Policy.HostPortRange.Builder> |
getHostPortsBuilderList()
hostPorts determines which host port ranges are allowed to be exposed.
|
int |
getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed.
|
List<V1beta1Policy.HostPortRange> |
getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.HostPortRangeOrBuilder |
getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
List<? extends V1beta1Policy.HostPortRangeOrBuilder> |
getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed.
|
boolean |
getPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
getReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
String |
getRequiredDropCapabilities(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
com.google.protobuf.ByteString |
getRequiredDropCapabilitiesBytes(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
int |
getRequiredDropCapabilitiesCount()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
com.google.protobuf.ProtocolStringList |
getRequiredDropCapabilitiesList()
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.RunAsGroupStrategyOptions |
getRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.RunAsGroupStrategyOptions.Builder |
getRunAsGroupBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.RunAsGroupStrategyOptionsOrBuilder |
getRunAsGroupOrBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.RunAsUserStrategyOptions |
getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.RunAsUserStrategyOptions.Builder |
getRunAsUserBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.RunAsUserStrategyOptionsOrBuilder |
getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.RuntimeClassStrategyOptions |
getRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.RuntimeClassStrategyOptions.Builder |
getRuntimeClassBuilder()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.RuntimeClassStrategyOptionsOrBuilder |
getRuntimeClassOrBuilder()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.SELinuxStrategyOptions |
getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.SELinuxStrategyOptions.Builder |
getSeLinuxBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.SELinuxStrategyOptionsOrBuilder |
getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.SupplementalGroupsStrategyOptions |
getSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.SupplementalGroupsStrategyOptions.Builder |
getSupplementalGroupsBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.SupplementalGroupsStrategyOptionsOrBuilder |
getSupplementalGroupsOrBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
String |
getVolumes(int index)
volumes is an allowlist of volume plugins.
|
com.google.protobuf.ByteString |
getVolumesBytes(int index)
volumes is an allowlist of volume plugins.
|
int |
getVolumesCount()
volumes is an allowlist of volume plugins.
|
com.google.protobuf.ProtocolStringList |
getVolumesList()
volumes is an allowlist of volume plugins.
|
boolean |
hasAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
boolean |
hasDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
boolean |
hasFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
boolean |
hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
boolean |
hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
boolean |
hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
boolean |
hasPrivileged()
privileged determines if a pod can request to be run as privileged.
|
boolean |
hasReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
boolean |
hasRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
boolean |
hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
boolean |
hasRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
boolean |
hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
|
boolean |
hasSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeFrom(com.google.protobuf.Message other) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeFrom(V1beta1Policy.PodSecurityPolicySpec other) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeFsGroup(V1beta1Policy.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeRunAsUser(V1beta1Policy.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions value)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeSeLinux(V1beta1Policy.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
removeAllowedCSIDrivers(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
removeAllowedFlexVolumes(int index)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
removeAllowedHostPaths(int index)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
removeHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedCapabilities(int index,
String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedCSIDrivers(int index,
V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedCSIDrivers(int index,
V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedFlexVolumes(int index,
V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedFlexVolumes(int index,
V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedHostPaths(int index,
V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedHostPaths(int index,
V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedProcMountTypes(int index,
String value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowedUnsafeSysctls(int index,
String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setAllowPrivilegeEscalation(boolean value)
allowPrivilegeEscalation determines if a pod can request to allow
privilege escalation.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setDefaultAddCapabilities(int index,
String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container
unless the pod spec specifically drops the capability.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setDefaultAllowPrivilegeEscalation(boolean value)
defaultAllowPrivilegeEscalation controls the default setting for whether a
process can gain more privileges than its parent process.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
setForbiddenSysctls(int index,
String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setFsGroup(V1beta1Policy.FSGroupStrategyOptions.Builder builderForValue)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setFsGroup(V1beta1Policy.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setHostIPC(boolean value)
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setHostNetwork(boolean value)
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setHostPID(boolean value)
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setHostPorts(int index,
V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setHostPorts(int index,
V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setPrivileged(boolean value)
privileged determines if a pod can request to be run as privileged.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setReadOnlyRootFilesystem(boolean value)
readOnlyRootFilesystem when set to true will force containers to run with a read only root file
system.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRequiredDropCapabilities(int index,
String value)
requiredDropCapabilities are the capabilities that will be dropped from the container.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions.Builder builderForValue)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRunAsUser(V1beta1Policy.RunAsUserStrategyOptions.Builder builderForValue)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRunAsUser(V1beta1Policy.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions.Builder builderForValue)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions value)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setSeLinux(V1beta1Policy.SELinuxStrategyOptions.Builder builderForValue)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setSeLinux(V1beta1Policy.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions.Builder builderForValue)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
V1beta1Policy.PodSecurityPolicySpec.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
V1beta1Policy.PodSecurityPolicySpec.Builder |
setVolumes(int index,
String value)
volumes is an allowlist of volume plugins.
|
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitfindInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic V1beta1Policy.PodSecurityPolicySpec buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic V1beta1Policy.PodSecurityPolicySpec.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder mergeFrom(V1beta1Policy.PodSecurityPolicySpec other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public V1beta1Policy.PodSecurityPolicySpec.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>IOExceptionpublic boolean hasPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;hasPrivileged in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;getPrivileged in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setPrivileged(boolean value)
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;public V1beta1Policy.PodSecurityPolicySpec.Builder clearPrivileged()
privileged determines if a pod can request to be run as privileged. +optional
optional bool privileged = 1;public com.google.protobuf.ProtocolStringList getDefaultAddCapabilitiesList()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getDefaultAddCapabilitiesCount()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getDefaultAddCapabilities(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;getDefaultAddCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setDefaultAddCapabilities(int index, String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Policy.PodSecurityPolicySpec.Builder addDefaultAddCapabilities(String value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllDefaultAddCapabilities(Iterable<String> values)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Policy.PodSecurityPolicySpec.Builder clearDefaultAddCapabilities()
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public V1beta1Policy.PodSecurityPolicySpec.Builder addDefaultAddCapabilitiesBytes(com.google.protobuf.ByteString value)
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. +optional
repeated string defaultAddCapabilities = 2;public com.google.protobuf.ProtocolStringList getRequiredDropCapabilitiesList()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getRequiredDropCapabilitiesCount()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getRequiredDropCapabilities(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;getRequiredDropCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setRequiredDropCapabilities(int index, String value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Policy.PodSecurityPolicySpec.Builder addRequiredDropCapabilities(String value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllRequiredDropCapabilities(Iterable<String> values)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Policy.PodSecurityPolicySpec.Builder clearRequiredDropCapabilities()
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public V1beta1Policy.PodSecurityPolicySpec.Builder addRequiredDropCapabilitiesBytes(com.google.protobuf.ByteString value)
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. +optional
repeated string requiredDropCapabilities = 3;public com.google.protobuf.ProtocolStringList getAllowedCapabilitiesList()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedCapabilitiesCount()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getAllowedCapabilities(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;getAllowedCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedCapabilities(int index, String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCapabilities(String value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedCapabilities(Iterable<String> values)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedCapabilities()
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCapabilitiesBytes(com.google.protobuf.ByteString value)
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. +optional
repeated string allowedCapabilities = 4;public com.google.protobuf.ProtocolStringList getVolumesList()
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getVolumesCount()
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getVolumes(int index)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getVolumesBytes(int index)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;getVolumesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setVolumes(int index, String value)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Policy.PodSecurityPolicySpec.Builder addVolumes(String value)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllVolumes(Iterable<String> values)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Policy.PodSecurityPolicySpec.Builder clearVolumes()
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public V1beta1Policy.PodSecurityPolicySpec.Builder addVolumesBytes(com.google.protobuf.ByteString value)
volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'. +optional
repeated string volumes = 5;public boolean hasHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;hasHostNetwork in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;getHostNetwork in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setHostNetwork(boolean value)
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;public V1beta1Policy.PodSecurityPolicySpec.Builder clearHostNetwork()
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. +optional
optional bool hostNetwork = 6;public List<V1beta1Policy.HostPortRange> getHostPortsList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;getHostPortsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getHostPortsCount()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;getHostPortsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.HostPortRange getHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;getHostPorts in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setHostPorts(int index, V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder setHostPorts(int index, V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder addHostPorts(V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder addHostPorts(int index, V1beta1Policy.HostPortRange value)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder addHostPorts(V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder addHostPorts(int index, V1beta1Policy.HostPortRange.Builder builderForValue)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllHostPorts(Iterable<? extends V1beta1Policy.HostPortRange> values)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder clearHostPorts()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.PodSecurityPolicySpec.Builder removeHostPorts(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.HostPortRange.Builder getHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.HostPortRangeOrBuilder getHostPortsOrBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;getHostPortsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Policy.HostPortRangeOrBuilder> getHostPortsOrBuilderList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;getHostPortsOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.HostPortRange.Builder addHostPortsBuilder()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public V1beta1Policy.HostPortRange.Builder addHostPortsBuilder(int index)
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public List<V1beta1Policy.HostPortRange.Builder> getHostPortsBuilderList()
hostPorts determines which host port ranges are allowed to be exposed. +optional
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;public boolean hasHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;hasHostPID in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;getHostPID in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setHostPID(boolean value)
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;public V1beta1Policy.PodSecurityPolicySpec.Builder clearHostPID()
hostPID determines if the policy allows the use of HostPID in the pod spec. +optional
optional bool hostPID = 8;public boolean hasHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;hasHostIPC in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;getHostIPC in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setHostIPC(boolean value)
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;public V1beta1Policy.PodSecurityPolicySpec.Builder clearHostIPC()
hostIPC determines if the policy allows the use of HostIPC in the pod spec. +optional
optional bool hostIPC = 9;public boolean hasSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;hasSeLinux in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.SELinuxStrategyOptions getSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;getSeLinux in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setSeLinux(V1beta1Policy.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Policy.PodSecurityPolicySpec.Builder setSeLinux(V1beta1Policy.SELinuxStrategyOptions.Builder builderForValue)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Policy.PodSecurityPolicySpec.Builder mergeSeLinux(V1beta1Policy.SELinuxStrategyOptions value)
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Policy.PodSecurityPolicySpec.Builder clearSeLinux()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Policy.SELinuxStrategyOptions.Builder getSeLinuxBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;public V1beta1Policy.SELinuxStrategyOptionsOrBuilder getSeLinuxOrBuilder()
seLinux is the strategy that will dictate the allowable labels that may be set.
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;getSeLinuxOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean hasRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;hasRunAsUser in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.RunAsUserStrategyOptions getRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;getRunAsUser in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setRunAsUser(V1beta1Policy.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Policy.PodSecurityPolicySpec.Builder setRunAsUser(V1beta1Policy.RunAsUserStrategyOptions.Builder builderForValue)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Policy.PodSecurityPolicySpec.Builder mergeRunAsUser(V1beta1Policy.RunAsUserStrategyOptions value)
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Policy.PodSecurityPolicySpec.Builder clearRunAsUser()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Policy.RunAsUserStrategyOptions.Builder getRunAsUserBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;public V1beta1Policy.RunAsUserStrategyOptionsOrBuilder getRunAsUserOrBuilder()
runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;getRunAsUserOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean hasRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;hasRunAsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.RunAsGroupStrategyOptions getRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;getRunAsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Policy.PodSecurityPolicySpec.Builder setRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions.Builder builderForValue)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Policy.PodSecurityPolicySpec.Builder mergeRunAsGroup(V1beta1Policy.RunAsGroupStrategyOptions value)
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Policy.PodSecurityPolicySpec.Builder clearRunAsGroup()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Policy.RunAsGroupStrategyOptions.Builder getRunAsGroupBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;public V1beta1Policy.RunAsGroupStrategyOptionsOrBuilder getRunAsGroupOrBuilder()
RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +optional
optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;getRunAsGroupOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean hasSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
hasSupplementalGroups in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.SupplementalGroupsStrategyOptions getSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
getSupplementalGroups in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
public V1beta1Policy.PodSecurityPolicySpec.Builder setSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions.Builder builderForValue)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
public V1beta1Policy.PodSecurityPolicySpec.Builder mergeSupplementalGroups(V1beta1Policy.SupplementalGroupsStrategyOptions value)
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
public V1beta1Policy.PodSecurityPolicySpec.Builder clearSupplementalGroups()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
public V1beta1Policy.SupplementalGroupsStrategyOptions.Builder getSupplementalGroupsBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
public V1beta1Policy.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
getSupplementalGroupsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean hasFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;hasFsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.FSGroupStrategyOptions getFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;getFsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setFsGroup(V1beta1Policy.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Policy.PodSecurityPolicySpec.Builder setFsGroup(V1beta1Policy.FSGroupStrategyOptions.Builder builderForValue)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Policy.PodSecurityPolicySpec.Builder mergeFsGroup(V1beta1Policy.FSGroupStrategyOptions value)
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Policy.PodSecurityPolicySpec.Builder clearFsGroup()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Policy.FSGroupStrategyOptions.Builder getFsGroupBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;public V1beta1Policy.FSGroupStrategyOptionsOrBuilder getFsGroupOrBuilder()
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;getFsGroupOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean hasReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;hasReadOnlyRootFilesystem in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;getReadOnlyRootFilesystem in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setReadOnlyRootFilesystem(boolean value)
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;public V1beta1Policy.PodSecurityPolicySpec.Builder clearReadOnlyRootFilesystem()
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. +optional
optional bool readOnlyRootFilesystem = 14;public boolean hasDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;hasDefaultAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;getDefaultAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setDefaultAllowPrivilegeEscalation(boolean value)
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;public V1beta1Policy.PodSecurityPolicySpec.Builder clearDefaultAllowPrivilegeEscalation()
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. +optional
optional bool defaultAllowPrivilegeEscalation = 15;public boolean hasAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;hasAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic boolean getAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;getAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowPrivilegeEscalation(boolean value)
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowPrivilegeEscalation()
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. +optional
optional bool allowPrivilegeEscalation = 16;public List<V1beta1Policy.AllowedHostPath> getAllowedHostPathsList()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedHostPathsCount()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedHostPath getAllowedHostPaths(int index)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPaths in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedHostPaths(int index, V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedHostPaths(int index, V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedHostPaths(V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedHostPaths(int index, V1beta1Policy.AllowedHostPath value)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedHostPaths(V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedHostPaths(int index, V1beta1Policy.AllowedHostPath.Builder builderForValue)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedHostPaths(Iterable<? extends V1beta1Policy.AllowedHostPath> values)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedHostPaths()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.PodSecurityPolicySpec.Builder removeAllowedHostPaths(int index)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.AllowedHostPath.Builder getAllowedHostPathsBuilder(int index)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.AllowedHostPathOrBuilder getAllowedHostPathsOrBuilder(int index)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Policy.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;getAllowedHostPathsOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedHostPath.Builder addAllowedHostPathsBuilder()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public V1beta1Policy.AllowedHostPath.Builder addAllowedHostPathsBuilder(int index)
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public List<V1beta1Policy.AllowedHostPath.Builder> getAllowedHostPathsBuilderList()
allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;public List<V1beta1Policy.AllowedFlexVolume> getAllowedFlexVolumesList()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedFlexVolumesCount()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedFlexVolume getAllowedFlexVolumes(int index)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedFlexVolumes(int index, V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedFlexVolumes(int index, V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(int index, V1beta1Policy.AllowedFlexVolume value)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedFlexVolumes(int index, V1beta1Policy.AllowedFlexVolume.Builder builderForValue)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedFlexVolumes(Iterable<? extends V1beta1Policy.AllowedFlexVolume> values)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedFlexVolumes()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.PodSecurityPolicySpec.Builder removeAllowedFlexVolumes(int index)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.AllowedFlexVolume.Builder getAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.AllowedFlexVolumeOrBuilder getAllowedFlexVolumesOrBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Policy.AllowedFlexVolumeOrBuilder> getAllowedFlexVolumesOrBuilderList()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;getAllowedFlexVolumesOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedFlexVolume.Builder addAllowedFlexVolumesBuilder()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public V1beta1Policy.AllowedFlexVolume.Builder addAllowedFlexVolumesBuilder(int index)
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public List<V1beta1Policy.AllowedFlexVolume.Builder> getAllowedFlexVolumesBuilderList()
allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;public List<V1beta1Policy.AllowedCSIDriver> getAllowedCSIDriversList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;getAllowedCSIDriversList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedCSIDriversCount()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;getAllowedCSIDriversCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedCSIDriver getAllowedCSIDrivers(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;getAllowedCSIDrivers in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedCSIDrivers(int index, V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedCSIDrivers(int index, V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCSIDrivers(V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCSIDrivers(int index, V1beta1Policy.AllowedCSIDriver value)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCSIDrivers(V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedCSIDrivers(int index, V1beta1Policy.AllowedCSIDriver.Builder builderForValue)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedCSIDrivers(Iterable<? extends V1beta1Policy.AllowedCSIDriver> values)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedCSIDrivers()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.PodSecurityPolicySpec.Builder removeAllowedCSIDrivers(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.AllowedCSIDriver.Builder getAllowedCSIDriversBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.AllowedCSIDriverOrBuilder getAllowedCSIDriversOrBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;getAllowedCSIDriversOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic List<? extends V1beta1Policy.AllowedCSIDriverOrBuilder> getAllowedCSIDriversOrBuilderList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;getAllowedCSIDriversOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.AllowedCSIDriver.Builder addAllowedCSIDriversBuilder()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public V1beta1Policy.AllowedCSIDriver.Builder addAllowedCSIDriversBuilder(int index)
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public List<V1beta1Policy.AllowedCSIDriver.Builder> getAllowedCSIDriversBuilderList()
AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate. +optional
repeated .k8s.io.api.policy.v1beta1.AllowedCSIDriver allowedCSIDrivers = 23;public com.google.protobuf.ProtocolStringList getAllowedUnsafeSysctlsList()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedUnsafeSysctlsCount()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getAllowedUnsafeSysctls(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctls in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedUnsafeSysctlsBytes(int index)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;getAllowedUnsafeSysctlsBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedUnsafeSysctls(int index, String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedUnsafeSysctls(String value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedUnsafeSysctls(Iterable<String> values)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedUnsafeSysctls()
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedUnsafeSysctlsBytes(com.google.protobuf.ByteString value)
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. +optional
repeated string allowedUnsafeSysctls = 19;public com.google.protobuf.ProtocolStringList getForbiddenSysctlsList()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getForbiddenSysctlsCount()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getForbiddenSysctls(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctls in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getForbiddenSysctlsBytes(int index)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;getForbiddenSysctlsBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setForbiddenSysctls(int index, String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Policy.PodSecurityPolicySpec.Builder addForbiddenSysctls(String value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllForbiddenSysctls(Iterable<String> values)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Policy.PodSecurityPolicySpec.Builder clearForbiddenSysctls()
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public V1beta1Policy.PodSecurityPolicySpec.Builder addForbiddenSysctlsBytes(com.google.protobuf.ByteString value)
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. +optional
repeated string forbiddenSysctls = 20;public com.google.protobuf.ProtocolStringList getAllowedProcMountTypesList()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic int getAllowedProcMountTypesCount()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic String getAllowedProcMountTypes(int index)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic com.google.protobuf.ByteString getAllowedProcMountTypesBytes(int index)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;getAllowedProcMountTypesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setAllowedProcMountTypes(int index, String value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedProcMountTypes(String value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllAllowedProcMountTypes(Iterable<String> values)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Policy.PodSecurityPolicySpec.Builder clearAllowedProcMountTypes()
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public V1beta1Policy.PodSecurityPolicySpec.Builder addAllowedProcMountTypesBytes(com.google.protobuf.ByteString value)
AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. +optional
repeated string allowedProcMountTypes = 21;public boolean hasRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
hasRuntimeClass in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.RuntimeClassStrategyOptions getRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
getRuntimeClass in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic V1beta1Policy.PodSecurityPolicySpec.Builder setRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions value)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
public V1beta1Policy.PodSecurityPolicySpec.Builder setRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions.Builder builderForValue)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
public V1beta1Policy.PodSecurityPolicySpec.Builder mergeRuntimeClass(V1beta1Policy.RuntimeClassStrategyOptions value)
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
public V1beta1Policy.PodSecurityPolicySpec.Builder clearRuntimeClass()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
public V1beta1Policy.RuntimeClassStrategyOptions.Builder getRuntimeClassBuilder()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
public V1beta1Policy.RuntimeClassStrategyOptionsOrBuilder getRuntimeClassOrBuilder()
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. +optional
optional .k8s.io.api.policy.v1beta1.RuntimeClassStrategyOptions runtimeClass = 24;
getRuntimeClassOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilderpublic final V1beta1Policy.PodSecurityPolicySpec.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>public final V1beta1Policy.PodSecurityPolicySpec.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<V1beta1Policy.PodSecurityPolicySpec.Builder>Copyright © 2023. All rights reserved.