Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
121 changes: 121 additions & 0 deletions schemas/2022-10-01-preview/Microsoft.ContainerInstance.json
Original file line number Diff line number Diff line change
Expand Up @@ -713,6 +713,17 @@
],
"description": "The resource requirements."
},
"securityContext": {
"oneOf": [
{
"$ref": "#/definitions/SecurityContextDefinition"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The security context for the container."
},
"volumeMounts": {
"oneOf": [
{
Expand Down Expand Up @@ -1026,6 +1037,17 @@
"type": "string",
"description": "The image of the init container."
},
"securityContext": {
"oneOf": [
{
"$ref": "#/definitions/SecurityContextDefinition"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The security context for the container."
},
"volumeMounts": {
"oneOf": [
{
Expand Down Expand Up @@ -1308,6 +1330,105 @@
],
"description": "The resource requirements."
},
"SecurityContextCapabilitiesDefinition": {
"type": "object",
"properties": {
"add": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to add to the container."
},
"drop": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to drop from the container."
}
},
"description": "The capabilities to add or drop from a container."
},
"SecurityContextDefinition": {
"type": "object",
"properties": {
"allowPrivilegeEscalation": {
"oneOf": [
{
"type": "boolean"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "A boolean value indicating whether the init process can elevate its privileges"
},
"capabilities": {
"oneOf": [
{
"$ref": "#/definitions/SecurityContextCapabilitiesDefinition"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to add or drop from a container."
},
"privileged": {
"oneOf": [
{
"type": "boolean"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The flag to determine if the container permissions is elevated to Privileged."
},
"runAsGroup": {
"oneOf": [
{
"type": "integer"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Sets the User GID for the container."
},
"runAsUser": {
"oneOf": [
{
"type": "integer"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Sets the User UID for the container."
},
"seccompProfile": {
"type": "string",
"description": "a base64 encoded string containing the contents of the JSON in the seccomp profile"
}
},
"description": "The security context for the container."
},
"UserAssignedIdentities": {
"type": "object",
"properties": {},
Expand Down
110 changes: 110 additions & 0 deletions schemas/2023-02-01-preview/Microsoft.ContainerInstance.json
Original file line number Diff line number Diff line change
Expand Up @@ -687,6 +687,17 @@
],
"description": "The resource requirements."
},
"securityContext": {
"oneOf": [
{
"$ref": "#/definitions/SecurityContextDefinition"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The security context for the container."
},
"volumeMounts": {
"oneOf": [
{
Expand Down Expand Up @@ -1282,6 +1293,105 @@
],
"description": "The resource requirements."
},
"SecurityContextCapabilitiesDefinition": {
"type": "object",
"properties": {
"add": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to add to the container."
},
"drop": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to drop from the container."
}
},
"description": "The capabilities to add or drop from a container."
},
"SecurityContextDefinition": {
"type": "object",
"properties": {
"allowPrivilegeEscalation": {
"oneOf": [
{
"type": "boolean"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "A boolean value indicating whether the init process can elevate its privileges"
},
"capabilities": {
"oneOf": [
{
"$ref": "#/definitions/SecurityContextCapabilitiesDefinition"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The capabilities to add or drop from a container."
},
"privileged": {
"oneOf": [
{
"type": "boolean"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The flag to determine if the container permissions is elevated to Privileged."
},
"runAsGroup": {
"oneOf": [
{
"type": "integer"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Sets the User GID for the container."
},
"runAsUser": {
"oneOf": [
{
"type": "integer"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Sets the User UID for the container."
},
"seccompProfile": {
"type": "string",
"description": "a base64 encoded string containing the contents of the JSON in the seccomp profile"
}
},
"description": "The security context for the container."
},
"UserAssignedIdentities": {
"type": "object",
"properties": {},
Expand Down