The highest tagged major version is
Documentation
¶
Index ¶
- func InitializeVolumes(specVolumes []v1.Volume) (map[string]*KubeVolume, error)
- func ToPodGen(ctx context.Context, podName string, podYAML *v1.PodTemplateSpec) (*specgen.PodSpecGenerator, error)
- func ToSpecGen(ctx context.Context, containerYAML v1.Container, iid string, ...) (*specgen.SpecGenerator, error)
- type KubeSeccompPaths
- type KubeVolume
- type KubeVolumeType
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func InitializeVolumes ¶
func InitializeVolumes(specVolumes []v1.Volume) (map[string]*KubeVolume, error)
Create a map of volume name to KubeVolume
func ToPodGen ¶
func ToPodGen(ctx context.Context, podName string, podYAML *v1.PodTemplateSpec) (*specgen.PodSpecGenerator, error)
Types ¶
type KubeSeccompPaths ¶
type KubeSeccompPaths struct {
// contains filtered or unexported fields
}
KubeSeccompPaths holds information about a pod YAML's seccomp configuration it holds both container and pod seccomp paths
func InitializeSeccompPaths ¶
func InitializeSeccompPaths(annotations map[string]string, profileRoot string) (*KubeSeccompPaths, error)
InitializeSeccompPaths takes annotations from the pod object metadata and finds annotations pertaining to seccomp it parses both pod and container level if the annotation is of the form "localhost/%s", the seccomp profile will be set to profileRoot/%s
func (*KubeSeccompPaths) FindForContainer ¶
func (k *KubeSeccompPaths) FindForContainer(ctrName string) string
FindForContainer checks whether a container has a seccomp path configured for it if not, it returns the podPath, which should always have a value
type KubeVolume ¶
type KubeVolume struct {
// Type of volume to create
Type KubeVolumeType
// Path for bind mount or volume name for named volume
Source string
}
func VolumeFromHostPath ¶
func VolumeFromHostPath(hostPath *v1.HostPathVolumeSource) (*KubeVolume, error)
Create a KubeVolume from an HostPathVolumeSource
func VolumeFromPersistentVolumeClaim ¶
func VolumeFromPersistentVolumeClaim(claim *v1.PersistentVolumeClaimVolumeSource) (*KubeVolume, error)
Create a KubeVolume from a PersistentVolumeClaimVolumeSource
func VolumeFromSource ¶
func VolumeFromSource(volumeSource v1.VolumeSource) (*KubeVolume, error)
Create a KubeVolume from one of the supported VolumeSource
type KubeVolumeType ¶
type KubeVolumeType int
const ( KubeVolumeTypeBindMount KubeVolumeType = iota KubeVolumeTypeNamed KubeVolumeType = iota )
Source Files