com.google.api.services.cloudbuild.v2.model

Class SecurityContext

java.lang.Object

java.util.AbstractMap<String,Object>

com.google.api.client.util.GenericData

com.google.api.client.json.GenericJson

com.google.api.services.cloudbuild.v2.model.SecurityContext

All Implemented Interfaces:

Cloneable, Map<String,Object>

public final class SecurityContext
extends com.google.api.client.json.GenericJson

Security options the container should be run with.

This is the Java data model class that specifies how to parse/serialize into the JSON that is transmitted over HTTP when working with the Cloud Build API. For a detailed explanation see: https://developers.google.com/api-client-library/java/google-http-java-client/json

Author:

Google, Inc.

Nested Class Summary

Nested classes/interfaces inherited from class com.google.api.client.util.GenericData

com.google.api.client.util.GenericData.Flags

Nested classes/interfaces inherited from class java.util.AbstractMap

AbstractMap.SimpleEntry<K,V>, AbstractMap.SimpleImmutableEntry<K,V>

Nested classes/interfaces inherited from interface java.util.Map

Map.Entry<K,V>

Constructor Summary

Constructors

Constructor and Description
SecurityContext()

Method Summary

Modifier and Type	Method and Description
SecurityContext	clone()
Boolean	getAllowPrivilegeEscalation() Optional.
Boolean	getPrivileged() Run container in privileged mode.
Long	getRunAsGroup() Optional.
Boolean	getRunAsNonRoot() Optional.
Long	getRunAsUser() Optional.
SecurityContext	set(String fieldName, Object value)
SecurityContext	setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation) Optional.
SecurityContext	setPrivileged(Boolean privileged) Run container in privileged mode.
SecurityContext	setRunAsGroup(Long runAsGroup) Optional.
SecurityContext	setRunAsNonRoot(Boolean runAsNonRoot) Optional.
SecurityContext	setRunAsUser(Long runAsUser) Optional.

Methods inherited from class com.google.api.client.json.GenericJson

getFactory, setFactory, toPrettyString, toString

Methods inherited from class com.google.api.client.util.GenericData

entrySet, equals, get, getClassInfo, getUnknownKeys, hashCode, put, putAll, remove, setUnknownKeys

Methods inherited from class java.util.AbstractMap

clear, containsKey, containsValue, isEmpty, keySet, size, values

Methods inherited from class java.lang.Object

finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.util.Map

compute, computeIfAbsent, computeIfPresent, forEach, getOrDefault, merge, putIfAbsent, remove, replace, replace, replaceAll

Constructor Detail

SecurityContext

public SecurityContext()

Method Detail

getAllowPrivilegeEscalation

public Boolean getAllowPrivilegeEscalation()

Optional. AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows. +optional

Returns:

value or null for none

setAllowPrivilegeEscalation

public SecurityContext setAllowPrivilegeEscalation(Boolean allowPrivilegeEscalation)

Optional. AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows. +optional

Parameters:

allowPrivilegeEscalation - allowPrivilegeEscalation or null for none

getPrivileged

public Boolean getPrivileged()

Run container in privileged mode.

Returns:

value or null for none

setPrivileged

public SecurityContext setPrivileged(Boolean privileged)

Run container in privileged mode.

Parameters:

privileged - privileged or null for none

getRunAsGroup

public Long getRunAsGroup()

Optional. The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. +optional

Returns:

value or null for none

setRunAsGroup

public SecurityContext setRunAsGroup(Long runAsGroup)

Optional. The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. +optional

Parameters:

runAsGroup - runAsGroup or null for none

getRunAsNonRoot

public Boolean getRunAsNonRoot()

Optional. Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. +optional

Returns:

value or null for none

setRunAsNonRoot

public SecurityContext setRunAsNonRoot(Boolean runAsNonRoot)

Optional. Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. +optional

Parameters:

runAsNonRoot - runAsNonRoot or null for none

getRunAsUser

public Long getRunAsUser()

Optional. The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. +optional

Returns:

value or null for none

setRunAsUser

public SecurityContext setRunAsUser(Long runAsUser)

Optional. The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows. +optional

Parameters:

runAsUser - runAsUser or null for none

set

public SecurityContext set(String fieldName,
                           Object value)

Overrides:

set in class com.google.api.client.json.GenericJson

clone

public SecurityContext clone()

Overrides:

clone in class com.google.api.client.json.GenericJson