profile

Documentation

Index

• Constants
• func GetProfilePath(profileName string, cfg *corev1.ConfigMap) (string, error)
• func Setup(mgr ctrl.Manager, l logr.Logger) error
• type Reconciler
  • func (r *Reconciler) Reconcile(req reconcile.Request) (reconcile.Result, error)

Constants

const (

	// ProfileRootPath specifies the path where the operator populates the
	// profiles.
	ProfileRootPath = "/var/lib/kubelet/seccomp/operator"

	// DefaultProfilesConfigMapName is the configMap name for the default
	// profiles.
	DefaultProfilesConfigMapName = "default-profiles"

	// DefaultNamespace is the default namespace for the operator deployment.
	DefaultNamespace = "seccomp-operator"
)

const SeccompProfileAnnotation = "seccomp.security.kubernetes.io/profile"

SeccompProfileAnnotation is the annotation on a ConfigMap that specifies its intention to be treated as a seccomp profile.

Functions

func GetProfilePath

func GetProfilePath(profileName string, cfg *corev1.ConfigMap) (string, error)

GetProfilePath returns the full path for the provided profile name and config.

func Setup

func Setup(mgr ctrl.Manager, l logr.Logger) error

Setup adds a controller that reconciles seccomp profiles.

Types

type Reconciler

type Reconciler struct {
	// contains filtered or unexported fields
}

A Reconciler reconciles seccomp profiles.

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(req reconcile.Request) (reconcile.Result, error)

Reconcile reconciles a ConfigMap representing a seccomp profile.