Class CreateLinuxContainerInstanceSecurityContextDetails


  • @Generated(value="OracleSDKGenerator",
               comments="API Version: 20210415")
    public final class CreateLinuxContainerInstanceSecurityContextDetails
    extends CreateContainerInstanceSecurityContextDetails
    Security context for all containers in a Linux container instance.
    Note: Objects should always be created or deserialized using the CreateLinuxContainerInstanceSecurityContextDetails.Builder. This model distinguishes fields that are null because they are unset from fields that are explicitly set to null. This is done in the setter methods of the CreateLinuxContainerInstanceSecurityContextDetails.Builder, which maintain a set of all explicitly set fields called CreateLinuxContainerInstanceSecurityContextDetails.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set fields into account. The constructor, on the other hand, does not take the explicitly set fields into account (since the constructor cannot distinguish explicit null from unset null).
    • Method Detail

      • getFsGroup

        public Integer getFsGroup()
        A special supplemental group that applies to all containers in the container instance.

        Some volume types allow the container instance to change ownership of the volume. The owning GID will be the fsGroup, the setgid bit will be set (new files will be owned by the fsGroup), and the permission bits are OR’d with rw-rw—-. If unset, the container instance will not modify the ownership and permissions of volumes.

        Returns:
        the value
      • getFsGroupChangePolicy

        public ContainerFsGroupChangePolicyType getFsGroupChangePolicy()
        Defines behavior of changing ownership and permission of the volume before being exposed inside the containers.

        This only applies to volumes which support fsGroup ownership and permissions, and will have no effect on ephemeral volumes. ON_ROOT_MISMATCH only changes permissions and ownership if the permission and ownership of the root directory does not match the expected permissions and ownership of the volume. This can improve container instance start times. ALWAYS changes permission and ownership of the volume when it is mounted. If unset, ALWAYS is used.

        Returns:
        the value
      • toString

        public String toString​(boolean includeByteArrayContents)
        Return a string representation of the object.
        Overrides:
        toString in class CreateContainerInstanceSecurityContextDetails
        Parameters:
        includeByteArrayContents - true to include the full contents of byte arrays
        Returns:
        string representation