mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-27 05:27:21 +00:00
enable golint for pkg/security/podsecuritypolicy/capabilities
Signed-off-by: Jess Frazelle <me@jessfraz.com>
This commit is contained in:
parent
818cdaf9d3
commit
c0f4bd38ff
@ -24,18 +24,18 @@ import (
|
|||||||
"k8s.io/kubernetes/pkg/util/validation/field"
|
"k8s.io/kubernetes/pkg/util/validation/field"
|
||||||
)
|
)
|
||||||
|
|
||||||
// defaultCapabilities implements the CapabilitiesStrategy interface
|
// defaultCapabilities implements the Strategy interface
|
||||||
type defaultCapabilities struct {
|
type defaultCapabilities struct {
|
||||||
defaultAddCapabilities []api.Capability
|
defaultAddCapabilities []api.Capability
|
||||||
requiredDropCapabilities []api.Capability
|
requiredDropCapabilities []api.Capability
|
||||||
allowedCaps []api.Capability
|
allowedCaps []api.Capability
|
||||||
}
|
}
|
||||||
|
|
||||||
var _ CapabilitiesStrategy = &defaultCapabilities{}
|
var _ Strategy = &defaultCapabilities{}
|
||||||
|
|
||||||
// NewDefaultCapabilities creates a new defaultCapabilities strategy that will provide defaults and validation
|
// NewDefaultCapabilities creates a new defaultCapabilities strategy that will provide defaults and validation
|
||||||
// based on the configured initial caps and allowed caps.
|
// based on the configured initial caps and allowed caps.
|
||||||
func NewDefaultCapabilities(defaultAddCapabilities, requiredDropCapabilities, allowedCaps []api.Capability) (CapabilitiesStrategy, error) {
|
func NewDefaultCapabilities(defaultAddCapabilities, requiredDropCapabilities, allowedCaps []api.Capability) (Strategy, error) {
|
||||||
return &defaultCapabilities{
|
return &defaultCapabilities{
|
||||||
defaultAddCapabilities: defaultAddCapabilities,
|
defaultAddCapabilities: defaultAddCapabilities,
|
||||||
requiredDropCapabilities: requiredDropCapabilities,
|
requiredDropCapabilities: requiredDropCapabilities,
|
||||||
|
@ -21,8 +21,8 @@ import (
|
|||||||
"k8s.io/kubernetes/pkg/util/validation/field"
|
"k8s.io/kubernetes/pkg/util/validation/field"
|
||||||
)
|
)
|
||||||
|
|
||||||
// CapabilitiesStrategy defines the interface for all cap constraint strategies.
|
// Strategy defines the interface for all cap constraint strategies.
|
||||||
type CapabilitiesStrategy interface {
|
type Strategy interface {
|
||||||
// Generate creates the capabilities based on policy rules.
|
// Generate creates the capabilities based on policy rules.
|
||||||
Generate(pod *api.Pod, container *api.Container) (*api.Capabilities, error)
|
Generate(pod *api.Pod, container *api.Container) (*api.Capabilities, error)
|
||||||
// Validate ensures that the specified values fall within the range of the strategy.
|
// Validate ensures that the specified values fall within the range of the strategy.
|
||||||
|
@ -130,6 +130,6 @@ func createSupplementalGroupStrategy(opts *extensions.SupplementalGroupsStrategy
|
|||||||
}
|
}
|
||||||
|
|
||||||
// createCapabilitiesStrategy creates a new capabilities strategy.
|
// createCapabilitiesStrategy creates a new capabilities strategy.
|
||||||
func createCapabilitiesStrategy(defaultAddCaps, requiredDropCaps, allowedCaps []api.Capability) (capabilities.CapabilitiesStrategy, error) {
|
func createCapabilitiesStrategy(defaultAddCaps, requiredDropCaps, allowedCaps []api.Capability) (capabilities.Strategy, error) {
|
||||||
return capabilities.NewDefaultCapabilities(defaultAddCaps, requiredDropCaps, allowedCaps)
|
return capabilities.NewDefaultCapabilities(defaultAddCaps, requiredDropCaps, allowedCaps)
|
||||||
}
|
}
|
||||||
|
@ -58,5 +58,5 @@ type ProviderStrategies struct {
|
|||||||
SELinuxStrategy selinux.SELinuxStrategy
|
SELinuxStrategy selinux.SELinuxStrategy
|
||||||
FSGroupStrategy group.GroupStrategy
|
FSGroupStrategy group.GroupStrategy
|
||||||
SupplementalGroupStrategy group.GroupStrategy
|
SupplementalGroupStrategy group.GroupStrategy
|
||||||
CapabilitiesStrategy capabilities.CapabilitiesStrategy
|
CapabilitiesStrategy capabilities.Strategy
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user