github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-01 15:58:37 +00:00
Code Issues Projects Releases Wiki Activity

Fix issue 10587; update SecurityContext godoc

Browse Source
This commit is contained in:
Paul Morie 2015-08-17 11:23:11 -04:00
parent 9d1a48d5f6
commit 8ddef45679
2 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/swagger-spec/v1.json
View File

@ -12777,7 +12777,7 @@
"properties": { "properties": {
"capabilities": { "capabilities": {
"$ref": "v1.Capabilities", "$ref": "v1.Capabilities",
"description": "the linux capabilites that should be added or removed; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context" "description": "the linux kernel capabilites that should be added or removed; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"
}, },
"privileged": { "privileged": {
"type": "boolean", "type": "boolean",

9
pkg/api/v1/types.go
View File

@ -2011,17 +2011,12 @@ type ComponentStatusList struct {
Items []ComponentStatus `json:"items" description:"list of component status objects"` Items []ComponentStatus `json:"items" description:"list of component status objects"`
} }
// SecurityContext holds security configuration that will be applied to a container. SecurityContext // SecurityContext holds security configuration that will be applied to a container.
// contains duplication of some existing fields from the Container resource. These duplicate fields
// will be populated based on the Container configuration if they are not set. Defining them on
// both the Container AND the SecurityContext will result in an error.
type SecurityContext struct { type SecurityContext struct {
// Capabilities are the capabilities to add/drop when running the container // Capabilities are the capabilities to add/drop when running the container
// Must match Container.Capabilities or be unset. Will be defaulted to Container.Capabilities if left unset Capabilities *Capabilities `json:"capabilities,omitempty" description:"the linux kernel capabilites that should be added or removed; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"`
Capabilities *Capabilities `json:"capabilities,omitempty" description:"the linux capabilites that should be added or removed; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"`
// Run the container in privileged mode // Run the container in privileged mode
// Must match Container.Privileged or be unset. Will be defaulted to Container.Privileged if left unset
Privileged *bool `json:"privileged,omitempty" description:"run the container in privileged mode; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"` Privileged *bool `json:"privileged,omitempty" description:"run the container in privileged mode; see http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"`
// SELinuxOptions are the labels to be applied to the container // SELinuxOptions are the labels to be applied to the container