Package org.cdk8s.plus25
Class ContainerSecurityContextProps.Jsii$Proxy
- java.lang.Object
-
- software.amazon.jsii.JsiiObject
-
- org.cdk8s.plus25.ContainerSecurityContextProps.Jsii$Proxy
-
- All Implemented Interfaces:
ContainerSecurityContextProps,software.amazon.jsii.JsiiSerializable
- Enclosing interface:
- ContainerSecurityContextProps
@Stability(Stable) @Internal public static final class ContainerSecurityContextProps.Jsii$Proxy extends software.amazon.jsii.JsiiObject implements ContainerSecurityContextProps
An implementation forContainerSecurityContextProps
-
-
Nested Class Summary
-
Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
-
Nested classes/interfaces inherited from interface org.cdk8s.plus25.ContainerSecurityContextProps
ContainerSecurityContextProps.Builder, ContainerSecurityContextProps.Jsii$Proxy
-
-
Constructor Summary
Constructors Modifier Constructor Description protectedJsii$Proxy(ContainerSecurityContextProps.Builder builder)Constructor that initializes the object based on literal property values passed by theContainerSecurityContextProps.Builder.protectedJsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)Constructor that initializes the object based on values retrieved from the JsiiObject.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description com.fasterxml.jackson.databind.JsonNode$jsii$toJson()booleanequals(Object o)BooleangetAllowPrivilegeEscalation()Whether a process can gain more privileges than its parent process.BooleangetEnsureNonRoot()Indicates that the container must run as a non-root user.NumbergetGroup()The GID to run the entrypoint of the container process.BooleangetPrivileged()Run container in privileged mode.BooleangetReadOnlyRootFilesystem()Whether this container has a read-only root filesystem.NumbergetUser()The UID to run the entrypoint of the container process.inthashCode()
-
-
-
Constructor Detail
-
Jsii$Proxy
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
Constructor that initializes the object based on values retrieved from the JsiiObject.- Parameters:
objRef- Reference to the JSII managed object.
-
Jsii$Proxy
protected Jsii$Proxy(ContainerSecurityContextProps.Builder builder)
Constructor that initializes the object based on literal property values passed by theContainerSecurityContextProps.Builder.
-
-
Method Detail
-
getAllowPrivilegeEscalation
public final Boolean getAllowPrivilegeEscalation()
Description copied from interface:ContainerSecurityContextPropsWhether a process can gain more privileges than its parent process.Default: false
- Specified by:
getAllowPrivilegeEscalationin interfaceContainerSecurityContextProps
-
getEnsureNonRoot
public final Boolean getEnsureNonRoot()
Description copied from interface:ContainerSecurityContextPropsIndicates that the container must run as a non-root user.If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does.
Default: true
- Specified by:
getEnsureNonRootin interfaceContainerSecurityContextProps
-
getGroup
public final Number getGroup()
Description copied from interface:ContainerSecurityContextPropsThe GID to run the entrypoint of the container process.Default: - 26000. An arbitrary number bigger than 9999 is selected here. This is so that the container is blocked to access host files even if somehow it manages to get access to host file system.
- Specified by:
getGroupin interfaceContainerSecurityContextProps
-
getPrivileged
public final Boolean getPrivileged()
Description copied from interface:ContainerSecurityContextPropsRun container in privileged mode.Processes in privileged containers are essentially equivalent to root on the host.
Default: false
- Specified by:
getPrivilegedin interfaceContainerSecurityContextProps
-
getReadOnlyRootFilesystem
public final Boolean getReadOnlyRootFilesystem()
Description copied from interface:ContainerSecurityContextPropsWhether this container has a read-only root filesystem.Default: true
- Specified by:
getReadOnlyRootFilesystemin interfaceContainerSecurityContextProps
-
getUser
public final Number getUser()
Description copied from interface:ContainerSecurityContextPropsThe UID to run the entrypoint of the container process.Default: - 25000. An arbitrary number bigger than 9999 is selected here. This is so that the container is blocked to access host files even if somehow it manages to get access to host file system.
- Specified by:
getUserin interfaceContainerSecurityContextProps
-
$jsii$toJson
@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
- Specified by:
$jsii$toJsonin interfacesoftware.amazon.jsii.JsiiSerializable
-
-