Class LinuxSecurityContext

Security context for Linux container.

LinuxSecurityContext

public class LinuxSecurityContext : SecurityContext

[JsonProperty(PropertyName = "capabilities")]
public ContainerCapabilities Capabilities { get; set; }

Type	Description
ContainerCapabilities

[JsonProperty(PropertyName = "isNonRootUserCheckEnabled")]
public bool? IsNonRootUserCheckEnabled { get; set; }

Type	Description
bool?	Indicates if the container must run as a non-root user. If true, the service validates the container image at runtime to ensure that it is not going to run with UID 0 (root) and fails the container instance creation if the validation fails.

[JsonProperty(PropertyName = "isRootFileSystemReadonly")]
public bool? IsRootFileSystemReadonly { get; set; }

Type	Description
bool?	Determines if the container will have a read-only root file system. Default value is false.

[JsonProperty(PropertyName = "runAsGroup")]
public int? RunAsGroup { get; set; }

Type	Description
int?	The group ID (GID) to run the entrypoint process of the container. Uses runtime default if not provided.

[JsonProperty(PropertyName = "runAsUser")]
public int? RunAsUser { get; set; }

Type	Description
int?	The user ID (UID) to run the entrypoint process of the container. Defaults to user specified UID in container image metadata if not provided. This must be provided if runAsGroup is provided.