Class LinuxContainerInstanceSecurityContext


  • @Generated(value="OracleSDKGenerator",
               comments="API Version: 20210415")
    public final class LinuxContainerInstanceSecurityContext
    extends ContainerInstanceSecurityContext
    Security context for all containers in a container instance.
    Note: Objects should always be created or deserialized using the LinuxContainerInstanceSecurityContext.Builder. This model distinguishes fields that are null because they are unset from fields that are explicitly set to null. This is done in the setter methods of the LinuxContainerInstanceSecurityContext.Builder, which maintain a set of all explicitly set fields called LinuxContainerInstanceSecurityContext.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set fields into account. The constructor, on the other hand, does not take the explicitly set fields into account (since the constructor cannot distinguish explicit null from unset null).
    • Method Detail

      • getFsGroup

        public Integer getFsGroup()
        A special supplemental group that applies to all containers in the container instance.

        Some volume types allow the container instance to change ownership of the volume. The owning GID will be the fsGroup, the setgid bit will be set (new files will be owned by the fsGroup), and the permission bits are OR’d with rw-rw—-. If unset, the container instance will not modify the ownership and permissions of volumes.

        Returns:
        the value
      • getFsGroupChangePolicy

        public ContainerFsGroupChangePolicyType getFsGroupChangePolicy()
        Defines behavior of changing ownership and permission of the volume before being exposed inside the containers.

        This only applies to volumes which support fsGroup ownership and permissions, and will have no effect on ephemeral volumes. ON_ROOT_MISMATCH only changes permissions and ownership if the permission and ownership of the root directory does not match the expected permissions and ownership of the volume. This can improve container instance start times. ALWAYS changes permission and ownership of the volume when it is mounted. If unset, ALWAYS is used.

        Returns:
        the value
      • toString

        public String toString​(boolean includeByteArrayContents)
        Return a string representation of the object.
        Overrides:
        toString in class ContainerInstanceSecurityContext
        Parameters:
        includeByteArrayContents - true to include the full contents of byte arrays
        Returns:
        string representation