mirror of
				https://github.com/k3s-io/kubernetes.git
				synced 2025-11-04 07:49:35 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			45 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			45 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
/*
 | 
						|
Copyright 2014 The Kubernetes Authors.
 | 
						|
 | 
						|
Licensed under the Apache License, Version 2.0 (the "License");
 | 
						|
you may not use this file except in compliance with the License.
 | 
						|
You may obtain a copy of the License at
 | 
						|
 | 
						|
    http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
 | 
						|
Unless required by applicable law or agreed to in writing, software
 | 
						|
distributed under the License is distributed on an "AS IS" BASIS,
 | 
						|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | 
						|
See the License for the specific language governing permissions and
 | 
						|
limitations under the License.
 | 
						|
*/
 | 
						|
 | 
						|
package securitycontext
 | 
						|
 | 
						|
import (
 | 
						|
	"k8s.io/api/core/v1"
 | 
						|
	api "k8s.io/kubernetes/pkg/apis/core"
 | 
						|
)
 | 
						|
 | 
						|
// ValidSecurityContextWithContainerDefaults creates a valid security context provider based on
 | 
						|
// empty container defaults.  Used for testing.
 | 
						|
func ValidSecurityContextWithContainerDefaults() *v1.SecurityContext {
 | 
						|
	priv := false
 | 
						|
	return &v1.SecurityContext{
 | 
						|
		Capabilities: &v1.Capabilities{},
 | 
						|
		Privileged:   &priv,
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
// ValidInternalSecurityContextWithContainerDefaults creates a valid security context provider based on
 | 
						|
// empty container defaults.  Used for testing.
 | 
						|
func ValidInternalSecurityContextWithContainerDefaults() *api.SecurityContext {
 | 
						|
	priv := false
 | 
						|
	dpm := api.DefaultProcMount
 | 
						|
	return &api.SecurityContext{
 | 
						|
		Capabilities: &api.Capabilities{},
 | 
						|
		Privileged:   &priv,
 | 
						|
		ProcMount:    &dpm,
 | 
						|
	}
 | 
						|
}
 |