seccomp

Documentation

Index

• type SeccompStrategy
  • func NewSeccompStrategy(allowedProfiles []string) SeccompStrategy

Types

type SeccompStrategy

type SeccompStrategy interface {
	// Generate returns a profile based on constraint rules.
	Generate(annotations map[string]string, pod *api.Pod) (string, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	ValidatePod(pod *api.Pod) field.ErrorList
	// Validate ensures that the specified values fall within the range of the strategy.
	ValidateContainer(pod *api.Pod, container *api.Container) field.ErrorList
}

Strategy defines the interface for all seccomp constraint strategies.

func NewSeccompStrategy

func NewSeccompStrategy(allowedProfiles []string) SeccompStrategy

NewStrategy creates a new strategy that enforces seccomp profile constraints.