Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions custom-words.txt
Original file line number Diff line number Diff line change
Expand Up @@ -1919,6 +1919,7 @@ SDWAN
searchbuffer
searchindex
searchservice
seccomp
SECG
secondarybytes
SECP
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -947,6 +947,62 @@
"readinessProbe": {
"description": "The readiness probe.",
"$ref": "#/definitions/ContainerProbe"
},
"securityContext": {
"description": "The container security properties.",
"$ref": "#/definitions/SecurityContextDefinition"
}
}
},
"SecurityContextDefinition": {
"description": "The security context for the container.",
"type": "object",
"properties": {
"privileged": {
"type": "boolean",
"description": "The flag to determine if the container permissions is elevated to Privileged."
},
"allowPrivilegeEscalation": {
"type": "boolean",
"description": "A boolean value indicating whether the init process can elevate its privileges"
},
"capabilities": {
"description": "The capabilities to add or drop from a container.",
"$ref": "#/definitions/SecurityContextCapabilitiesDefinition"
},
"runAsGroup": {
"type": "integer",
"format": "int32",
"description": "Sets the User GID for the container."
},
"runAsUser": {
"type": "integer",
"format": "int32",
"description": "Sets the User UID for the container."
},
"seccompProfile": {
"type": "string",
"description": "a base64 encoded string containing the contents of the JSON in the seccomp profile"
}
}
},
"SecurityContextCapabilitiesDefinition": {
"description": "The capabilities to add or drop from a container.",
"type": "object",
"properties": {
"add": {
"type": "array",
"items": {
"type": "string"
},
"description": "The capabilities to add to the container."
},
"drop": {
"type": "array",
"items": {
"type": "string"
},
"description": "The capabilities to drop from the container."
}
}
},
Expand Down Expand Up @@ -2361,6 +2417,10 @@
"x-ms-identifiers": [
"name"
]
},
"securityContext": {
"description": "The container security properties.",
"$ref": "#/definitions/SecurityContextDefinition"
}
}
},
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -938,6 +938,62 @@
"readinessProbe": {
"description": "The readiness probe.",
"$ref": "#/definitions/ContainerProbe"
},
"securityContext": {
"description": "The container security properties.",
"$ref": "#/definitions/SecurityContextDefinition"
}
}
},
"SecurityContextDefinition": {
"description": "The security context for the container.",
"type": "object",
"properties": {
"privileged": {
"type": "boolean",
"description": "The flag to determine if the container permissions is elevated to Privileged."
},
"allowPrivilegeEscalation": {
"type": "boolean",
"description": "A boolean value indicating whether the init process can elevate its privileges"
},
"capabilities": {
"description": "The capabilities to add or drop from a container.",
"$ref": "#/definitions/SecurityContextCapabilitiesDefinition"
},
"runAsGroup": {
"type": "integer",
"format": "int32",
"description": "Sets the User GID for the container."
},
"runAsUser": {
"type": "integer",
"format": "int32",
"description": "Sets the User UID for the container."
},
"seccompProfile": {
"type": "string",
"description": "a base64 encoded string containing the contents of the JSON in the seccomp profile"
}
}
},
"SecurityContextCapabilitiesDefinition": {
"description": "The capabilities to add or drop from a container.",
"type": "object",
"properties": {
"add": {
"type": "array",
"items": {
"type": "string"
},
"description": "The capabilities to add to the container."
},
"drop": {
"type": "array",
"items": {
"type": "string"
},
"description": "The capabilities to drop from the container."
}
}
},
Expand Down