Package net.stickycode.kuuty.model.v18

Class IoK8sApiPolicyV1beta1PodSecurityPolicySpec

java.lang.Object

net.stickycode.kuuty.model.v18.IoK8sApiPolicyV1beta1PodSecurityPolicySpec

@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen",
           date="2020-11-26T11:01:11.402583+13:00[Pacific/Auckland]")
public class IoK8sApiPolicyV1beta1PodSecurityPolicySpec
extends Object

PodSecurityPolicySpec defines the policy enforced.

Field Summary

Fields

Modifier and Type	Field	Description
static String	JSON_PROPERTY_ALLOW_PRIVILEGE_ESCALATION
static String	JSON_PROPERTY_ALLOWED_C_S_I_DRIVERS
static String	JSON_PROPERTY_ALLOWED_CAPABILITIES
static String	JSON_PROPERTY_ALLOWED_FLEX_VOLUMES
static String	JSON_PROPERTY_ALLOWED_HOST_PATHS
static String	JSON_PROPERTY_ALLOWED_PROC_MOUNT_TYPES
static String	JSON_PROPERTY_ALLOWED_UNSAFE_SYSCTLS
static String	JSON_PROPERTY_DEFAULT_ADD_CAPABILITIES
static String	JSON_PROPERTY_DEFAULT_ALLOW_PRIVILEGE_ESCALATION
static String	JSON_PROPERTY_FORBIDDEN_SYSCTLS
static String	JSON_PROPERTY_FS_GROUP
static String	JSON_PROPERTY_HOST_I_P_C
static String	JSON_PROPERTY_HOST_NETWORK
static String	JSON_PROPERTY_HOST_P_I_D
static String	JSON_PROPERTY_HOST_PORTS
static String	JSON_PROPERTY_PRIVILEGED
static String	JSON_PROPERTY_READ_ONLY_ROOT_FILESYSTEM
static String	JSON_PROPERTY_REQUIRED_DROP_CAPABILITIES
static String	JSON_PROPERTY_RUN_AS_GROUP
static String	JSON_PROPERTY_RUN_AS_USER
static String	JSON_PROPERTY_RUNTIME_CLASS
static String	JSON_PROPERTY_SE_LINUX
static String	JSON_PROPERTY_SUPPLEMENTAL_GROUPS
static String	JSON_PROPERTY_VOLUMES

Constructor Summary

Constructors

Constructor	Description
IoK8sApiPolicyV1beta1PodSecurityPolicySpec()

Method Summary

Modifier and Type	Method	Description
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedCapabilitiesItem(String allowedCapabilitiesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedCSIDriversItem(IoK8sApiPolicyV1beta1AllowedCSIDriver allowedCSIDriversItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedFlexVolumesItem(IoK8sApiPolicyV1beta1AllowedFlexVolume allowedFlexVolumesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedHostPathsItem(IoK8sApiPolicyV1beta1AllowedHostPath allowedHostPathsItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedProcMountTypesItem(String allowedProcMountTypesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addAllowedUnsafeSysctlsItem(String allowedUnsafeSysctlsItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addDefaultAddCapabilitiesItem(String defaultAddCapabilitiesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addForbiddenSysctlsItem(String forbiddenSysctlsItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addHostPortsItem(IoK8sApiPolicyV1beta1HostPortRange hostPortsItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addRequiredDropCapabilitiesItem(String requiredDropCapabilitiesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	addVolumesItem(String volumesItem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedCapabilities(List<String> allowedCapabilities)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedCSIDrivers(List<IoK8sApiPolicyV1beta1AllowedCSIDriver> allowedCSIDrivers)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedFlexVolumes(List<IoK8sApiPolicyV1beta1AllowedFlexVolume> allowedFlexVolumes)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedHostPaths(List<IoK8sApiPolicyV1beta1AllowedHostPath> allowedHostPaths)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedProcMountTypes(List<String> allowedProcMountTypes)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowedUnsafeSysctls(List<String> allowedUnsafeSysctls)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	allowPrivilegeEscalation(Boolean allowPrivilegeEscalation)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	defaultAddCapabilities(List<String> defaultAddCapabilities)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	defaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)
boolean	equals(Object o)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	forbiddenSysctls(List<String> forbiddenSysctls)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	fsGroup(IoK8sApiPolicyV1beta1FSGroupStrategyOptions fsGroup)
List<String>	getAllowedCapabilities()	allowedCapabilities is a list of capabilities that can be requested to add to the container.
List<IoK8sApiPolicyV1beta1AllowedCSIDriver>	getAllowedCSIDrivers()	AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
List<IoK8sApiPolicyV1beta1AllowedFlexVolume>	getAllowedFlexVolumes()	allowedFlexVolumes is a whitelist of allowed Flexvolumes.
List<IoK8sApiPolicyV1beta1AllowedHostPath>	getAllowedHostPaths()	allowedHostPaths is a white list of allowed host paths.
List<String>	getAllowedProcMountTypes()	AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
List<String>	getAllowedUnsafeSysctls()	allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
Boolean	getAllowPrivilegeEscalation()	allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
List<String>	getDefaultAddCapabilities()	defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
Boolean	getDefaultAllowPrivilegeEscalation()	defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
List<String>	getForbiddenSysctls()	forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
IoK8sApiPolicyV1beta1FSGroupStrategyOptions	getFsGroup()	Get fsGroup
Boolean	getHostIPC()	hostIPC determines if the policy allows the use of HostIPC in the pod spec.
Boolean	getHostNetwork()	hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
Boolean	getHostPID()	hostPID determines if the policy allows the use of HostPID in the pod spec.
List<IoK8sApiPolicyV1beta1HostPortRange>	getHostPorts()	hostPorts determines which host port ranges are allowed to be exposed.
Boolean	getPrivileged()	privileged determines if a pod can request to be run as privileged.
Boolean	getReadOnlyRootFilesystem()	readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
List<String>	getRequiredDropCapabilities()	requiredDropCapabilities are the capabilities that will be dropped from the container.
IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions	getRunAsGroup()	Get runAsGroup
IoK8sApiPolicyV1beta1RunAsUserStrategyOptions	getRunAsUser()	Get runAsUser
IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions	getRuntimeClass()	Get runtimeClass
IoK8sApiPolicyV1beta1SELinuxStrategyOptions	getSeLinux()	Get seLinux
IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions	getSupplementalGroups()	Get supplementalGroups
List<String>	getVolumes()	volumes is a white list of allowed volume plugins.
int	hashCode()
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	hostIPC(Boolean hostIPC)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	hostNetwork(Boolean hostNetwork)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	hostPID(Boolean hostPID)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	hostPorts(List<IoK8sApiPolicyV1beta1HostPortRange> hostPorts)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	privileged(Boolean privileged)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	readOnlyRootFilesystem(Boolean readOnlyRootFilesystem)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	requiredDropCapabilities(List<String> requiredDropCapabilities)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	runAsGroup(IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions runAsGroup)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	runAsUser(IoK8sApiPolicyV1beta1RunAsUserStrategyOptions runAsUser)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	runtimeClass(IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions runtimeClass)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	seLinux(IoK8sApiPolicyV1beta1SELinuxStrategyOptions seLinux)
void	setAllowedCapabilities(List<String> allowedCapabilities)
void	setAllowedCSIDrivers(List<IoK8sApiPolicyV1beta1AllowedCSIDriver> allowedCSIDrivers)
void	setAllowedFlexVolumes(List<IoK8sApiPolicyV1beta1AllowedFlexVolume> allowedFlexVolumes)
void	setAllowedHostPaths(List<IoK8sApiPolicyV1beta1AllowedHostPath> allowedHostPaths)
void	setAllowedProcMountTypes(List<String> allowedProcMountTypes)
void	setAllowedUnsafeSysctls(List<String> allowedUnsafeSysctls)
void	setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation)
void	setDefaultAddCapabilities(List<String> defaultAddCapabilities)
void	setDefaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)
void	setForbiddenSysctls(List<String> forbiddenSysctls)
void	setFsGroup(IoK8sApiPolicyV1beta1FSGroupStrategyOptions fsGroup)
void	setHostIPC(Boolean hostIPC)
void	setHostNetwork(Boolean hostNetwork)
void	setHostPID(Boolean hostPID)
void	setHostPorts(List<IoK8sApiPolicyV1beta1HostPortRange> hostPorts)
void	setPrivileged(Boolean privileged)
void	setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)
void	setRequiredDropCapabilities(List<String> requiredDropCapabilities)
void	setRunAsGroup(IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions runAsGroup)
void	setRunAsUser(IoK8sApiPolicyV1beta1RunAsUserStrategyOptions runAsUser)
void	setRuntimeClass(IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions runtimeClass)
void	setSeLinux(IoK8sApiPolicyV1beta1SELinuxStrategyOptions seLinux)
void	setSupplementalGroups(IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions supplementalGroups)
void	setVolumes(List<String> volumes)
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	supplementalGroups(IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions supplementalGroups)
String	toString()
IoK8sApiPolicyV1beta1PodSecurityPolicySpec	volumes(List<String> volumes)

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

JSON_PROPERTY_ALLOW_PRIVILEGE_ESCALATION

public static final String JSON_PROPERTY_ALLOW_PRIVILEGE_ESCALATION

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_C_S_I_DRIVERS

public static final String JSON_PROPERTY_ALLOWED_C_S_I_DRIVERS

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_CAPABILITIES

public static final String JSON_PROPERTY_ALLOWED_CAPABILITIES

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_FLEX_VOLUMES

public static final String JSON_PROPERTY_ALLOWED_FLEX_VOLUMES

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_HOST_PATHS

public static final String JSON_PROPERTY_ALLOWED_HOST_PATHS

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_PROC_MOUNT_TYPES

public static final String JSON_PROPERTY_ALLOWED_PROC_MOUNT_TYPES

See Also:

Constant Field Values

JSON_PROPERTY_ALLOWED_UNSAFE_SYSCTLS

public static final String JSON_PROPERTY_ALLOWED_UNSAFE_SYSCTLS

See Also:

Constant Field Values

JSON_PROPERTY_DEFAULT_ADD_CAPABILITIES

public static final String JSON_PROPERTY_DEFAULT_ADD_CAPABILITIES

See Also:

Constant Field Values

JSON_PROPERTY_DEFAULT_ALLOW_PRIVILEGE_ESCALATION

public static final String JSON_PROPERTY_DEFAULT_ALLOW_PRIVILEGE_ESCALATION

See Also:

Constant Field Values

JSON_PROPERTY_FORBIDDEN_SYSCTLS

public static final String JSON_PROPERTY_FORBIDDEN_SYSCTLS

See Also:

Constant Field Values

JSON_PROPERTY_FS_GROUP

public static final String JSON_PROPERTY_FS_GROUP

See Also:

Constant Field Values

JSON_PROPERTY_HOST_I_P_C

public static final String JSON_PROPERTY_HOST_I_P_C

See Also:

Constant Field Values

JSON_PROPERTY_HOST_NETWORK

public static final String JSON_PROPERTY_HOST_NETWORK

See Also:

Constant Field Values

JSON_PROPERTY_HOST_P_I_D

public static final String JSON_PROPERTY_HOST_P_I_D

See Also:

Constant Field Values

JSON_PROPERTY_HOST_PORTS

public static final String JSON_PROPERTY_HOST_PORTS

See Also:

Constant Field Values

JSON_PROPERTY_PRIVILEGED

public static final String JSON_PROPERTY_PRIVILEGED

See Also:

Constant Field Values

JSON_PROPERTY_READ_ONLY_ROOT_FILESYSTEM

public static final String JSON_PROPERTY_READ_ONLY_ROOT_FILESYSTEM

See Also:

Constant Field Values

JSON_PROPERTY_REQUIRED_DROP_CAPABILITIES

public static final String JSON_PROPERTY_REQUIRED_DROP_CAPABILITIES

See Also:

Constant Field Values

JSON_PROPERTY_RUN_AS_GROUP

public static final String JSON_PROPERTY_RUN_AS_GROUP

See Also:

Constant Field Values

JSON_PROPERTY_RUN_AS_USER

public static final String JSON_PROPERTY_RUN_AS_USER

See Also:

Constant Field Values

JSON_PROPERTY_RUNTIME_CLASS

public static final String JSON_PROPERTY_RUNTIME_CLASS

See Also:

Constant Field Values

JSON_PROPERTY_SE_LINUX

public static final String JSON_PROPERTY_SE_LINUX

See Also:

Constant Field Values

JSON_PROPERTY_SUPPLEMENTAL_GROUPS

public static final String JSON_PROPERTY_SUPPLEMENTAL_GROUPS

See Also:

Constant Field Values

JSON_PROPERTY_VOLUMES

public static final String JSON_PROPERTY_VOLUMES

See Also:

Constant Field Values

Constructor Detail

IoK8sApiPolicyV1beta1PodSecurityPolicySpec

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec()

Method Detail

allowPrivilegeEscalation

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowPrivilegeEscalation(Boolean allowPrivilegeEscalation)

getAllowPrivilegeEscalation

@Nullable
public Boolean getAllowPrivilegeEscalation()

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

Returns:

allowPrivilegeEscalation

setAllowPrivilegeEscalation

public void setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation)

allowedCSIDrivers

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedCSIDrivers(List<IoK8sApiPolicyV1beta1AllowedCSIDriver> allowedCSIDrivers)

addAllowedCSIDriversItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedCSIDriversItem(IoK8sApiPolicyV1beta1AllowedCSIDriver allowedCSIDriversItem)

getAllowedCSIDrivers

@Nullable
public List<IoK8sApiPolicyV1beta1AllowedCSIDriver> getAllowedCSIDrivers()

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

Returns:

allowedCSIDrivers

setAllowedCSIDrivers

public void setAllowedCSIDrivers(List<IoK8sApiPolicyV1beta1AllowedCSIDriver> allowedCSIDrivers)

allowedCapabilities

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedCapabilities(List<String> allowedCapabilities)

addAllowedCapabilitiesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedCapabilitiesItem(String allowedCapabilitiesItem)

getAllowedCapabilities

@Nullable
public List<String> getAllowedCapabilities()

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

Returns:

allowedCapabilities

setAllowedCapabilities

public void setAllowedCapabilities(List<String> allowedCapabilities)

allowedFlexVolumes

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedFlexVolumes(List<IoK8sApiPolicyV1beta1AllowedFlexVolume> allowedFlexVolumes)

addAllowedFlexVolumesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedFlexVolumesItem(IoK8sApiPolicyV1beta1AllowedFlexVolume allowedFlexVolumesItem)

getAllowedFlexVolumes

@Nullable
public List<IoK8sApiPolicyV1beta1AllowedFlexVolume> getAllowedFlexVolumes()

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"volumes\" field.

Returns:

allowedFlexVolumes

setAllowedFlexVolumes

public void setAllowedFlexVolumes(List<IoK8sApiPolicyV1beta1AllowedFlexVolume> allowedFlexVolumes)

allowedHostPaths

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedHostPaths(List<IoK8sApiPolicyV1beta1AllowedHostPath> allowedHostPaths)

addAllowedHostPathsItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedHostPathsItem(IoK8sApiPolicyV1beta1AllowedHostPath allowedHostPathsItem)

getAllowedHostPaths

@Nullable
public List<IoK8sApiPolicyV1beta1AllowedHostPath> getAllowedHostPaths()

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

Returns:

allowedHostPaths

setAllowedHostPaths

public void setAllowedHostPaths(List<IoK8sApiPolicyV1beta1AllowedHostPath> allowedHostPaths)

allowedProcMountTypes

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedProcMountTypes(List<String> allowedProcMountTypes)

addAllowedProcMountTypesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedProcMountTypesItem(String allowedProcMountTypesItem)

getAllowedProcMountTypes

@Nullable
public List<String> getAllowedProcMountTypes()

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

Returns:

allowedProcMountTypes

setAllowedProcMountTypes

public void setAllowedProcMountTypes(List<String> allowedProcMountTypes)

allowedUnsafeSysctls

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec allowedUnsafeSysctls(List<String> allowedUnsafeSysctls)

addAllowedUnsafeSysctlsItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addAllowedUnsafeSysctlsItem(String allowedUnsafeSysctlsItem)

getAllowedUnsafeSysctls

@Nullable
public List<String> getAllowedUnsafeSysctls()

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. \"foo/_*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.

Returns:

allowedUnsafeSysctls

setAllowedUnsafeSysctls

public void setAllowedUnsafeSysctls(List<String> allowedUnsafeSysctls)

defaultAddCapabilities

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec defaultAddCapabilities(List<String> defaultAddCapabilities)

addDefaultAddCapabilitiesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addDefaultAddCapabilitiesItem(String defaultAddCapabilitiesItem)

getDefaultAddCapabilities

@Nullable
public List<String> getDefaultAddCapabilities()

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

Returns:

defaultAddCapabilities

setDefaultAddCapabilities

public void setDefaultAddCapabilities(List<String> defaultAddCapabilities)

defaultAllowPrivilegeEscalation

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec defaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)

getDefaultAllowPrivilegeEscalation

@Nullable
public Boolean getDefaultAllowPrivilegeEscalation()

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

Returns:

defaultAllowPrivilegeEscalation

setDefaultAllowPrivilegeEscalation

public void setDefaultAllowPrivilegeEscalation(Boolean defaultAllowPrivilegeEscalation)

forbiddenSysctls

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec forbiddenSysctls(List<String> forbiddenSysctls)

addForbiddenSysctlsItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addForbiddenSysctlsItem(String forbiddenSysctlsItem)

getForbiddenSysctls

@Nullable
public List<String> getForbiddenSysctls()

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. \"foo/_*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.

Returns:

forbiddenSysctls

setForbiddenSysctls

public void setForbiddenSysctls(List<String> forbiddenSysctls)

fsGroup

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec fsGroup(IoK8sApiPolicyV1beta1FSGroupStrategyOptions fsGroup)

getFsGroup

public IoK8sApiPolicyV1beta1FSGroupStrategyOptions getFsGroup()

Get fsGroup

Returns:

fsGroup

setFsGroup

public void setFsGroup(IoK8sApiPolicyV1beta1FSGroupStrategyOptions fsGroup)

hostIPC

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec hostIPC(Boolean hostIPC)

getHostIPC

@Nullable
public Boolean getHostIPC()

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

Returns:

hostIPC

setHostIPC

public void setHostIPC(Boolean hostIPC)

hostNetwork

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec hostNetwork(Boolean hostNetwork)

getHostNetwork

@Nullable
public Boolean getHostNetwork()

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

Returns:

hostNetwork

setHostNetwork

public void setHostNetwork(Boolean hostNetwork)

hostPID

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec hostPID(Boolean hostPID)

getHostPID

@Nullable
public Boolean getHostPID()

hostPID determines if the policy allows the use of HostPID in the pod spec.

Returns:

hostPID

setHostPID

public void setHostPID(Boolean hostPID)

hostPorts

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec hostPorts(List<IoK8sApiPolicyV1beta1HostPortRange> hostPorts)

addHostPortsItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addHostPortsItem(IoK8sApiPolicyV1beta1HostPortRange hostPortsItem)

getHostPorts

@Nullable
public List<IoK8sApiPolicyV1beta1HostPortRange> getHostPorts()

hostPorts determines which host port ranges are allowed to be exposed.

Returns:

hostPorts

setHostPorts

public void setHostPorts(List<IoK8sApiPolicyV1beta1HostPortRange> hostPorts)

privileged

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec privileged(Boolean privileged)

getPrivileged

@Nullable
public Boolean getPrivileged()

privileged determines if a pod can request to be run as privileged.

Returns:

privileged

setPrivileged

public void setPrivileged(Boolean privileged)

readOnlyRootFilesystem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec readOnlyRootFilesystem(Boolean readOnlyRootFilesystem)

getReadOnlyRootFilesystem

@Nullable
public Boolean getReadOnlyRootFilesystem()

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

Returns:

readOnlyRootFilesystem

setReadOnlyRootFilesystem

public void setReadOnlyRootFilesystem(Boolean readOnlyRootFilesystem)

requiredDropCapabilities

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec requiredDropCapabilities(List<String> requiredDropCapabilities)

addRequiredDropCapabilitiesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addRequiredDropCapabilitiesItem(String requiredDropCapabilitiesItem)

getRequiredDropCapabilities

@Nullable
public List<String> getRequiredDropCapabilities()

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

Returns:

requiredDropCapabilities

setRequiredDropCapabilities

public void setRequiredDropCapabilities(List<String> requiredDropCapabilities)

runAsGroup

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec runAsGroup(IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions runAsGroup)

getRunAsGroup

@Nullable
public IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions getRunAsGroup()

Get runAsGroup

Returns:

runAsGroup

setRunAsGroup

public void setRunAsGroup(IoK8sApiPolicyV1beta1RunAsGroupStrategyOptions runAsGroup)

runAsUser

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec runAsUser(IoK8sApiPolicyV1beta1RunAsUserStrategyOptions runAsUser)

getRunAsUser

public IoK8sApiPolicyV1beta1RunAsUserStrategyOptions getRunAsUser()

Get runAsUser

Returns:

runAsUser

setRunAsUser

public void setRunAsUser(IoK8sApiPolicyV1beta1RunAsUserStrategyOptions runAsUser)

runtimeClass

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec runtimeClass(IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions runtimeClass)

getRuntimeClass

@Nullable
public IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions getRuntimeClass()

Get runtimeClass

Returns:

runtimeClass

setRuntimeClass

public void setRuntimeClass(IoK8sApiPolicyV1beta1RuntimeClassStrategyOptions runtimeClass)

seLinux

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec seLinux(IoK8sApiPolicyV1beta1SELinuxStrategyOptions seLinux)

getSeLinux

public IoK8sApiPolicyV1beta1SELinuxStrategyOptions getSeLinux()

Get seLinux

Returns:

seLinux

setSeLinux

public void setSeLinux(IoK8sApiPolicyV1beta1SELinuxStrategyOptions seLinux)

supplementalGroups

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec supplementalGroups(IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions supplementalGroups)

getSupplementalGroups

public IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions getSupplementalGroups()

Get supplementalGroups

Returns:

supplementalGroups

setSupplementalGroups

public void setSupplementalGroups(IoK8sApiPolicyV1beta1SupplementalGroupsStrategyOptions supplementalGroups)

volumes

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec volumes(List<String> volumes)

addVolumesItem

public IoK8sApiPolicyV1beta1PodSecurityPolicySpec addVolumesItem(String volumesItem)

getVolumes

@Nullable
public List<String> getVolumes()

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

Returns:

volumes

setVolumes

public void setVolumes(List<String> volumes)

equals

public boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object

toString

public String toString()

Overrides:

toString in class Object