Options
All
  • Public
  • Public/Protected
  • All
Menu

Namespace CreateLinuxSecurityContextDetails

Security context for Linux container.

Properties

Methods

Properties

Optional capabilities

capabilities: model.ContainerCapabilities

Optional isNonRootUserCheckEnabled

isNonRootUserCheckEnabled: undefined | false | true

Indicates if the container must run as a non-root user. If true, the service validates the container image at runtime to ensure that it is not going to run with UID 0 (root) and fails the container instance creation if the validation fails.

Optional isRootFileSystemReadonly

isRootFileSystemReadonly: undefined | false | true

Determines if the container will have a read-only root file system. Default value is false.

Optional runAsGroup

runAsGroup: undefined | number

The group ID (GID) to run the entrypoint process of the container. Uses runtime default if not provided. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

Optional runAsUser

runAsUser: undefined | number

The user ID (UID) to run the entrypoint process of the container. Defaults to user specified UID in container image metadata if not provided. This must be provided if runAsGroup is provided. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

Const securityContextType

securityContextType: string = "LINUX"

Methods

getDeserializedJsonObj

getJsonObj