Interface WindowsSecurityContextOptions

  • All Superinterfaces:
    software.amazon.jsii.JsiiSerializable
    All Known Implementing Classes:
    WindowsSecurityContextOptions.Jsii$Proxy

    @Generated(value="jsii-pacmak/1.88.0 (build eaabd08)",
               date="2023-09-11T06:17:58.853Z")
    @Stability(Stable)
    public interface WindowsSecurityContextOptions
    extends software.amazon.jsii.JsiiSerializable
    WindowsSecurityContextOptions contain Windows-specific options and credentials.
    • Method Detail

      • getGmsaCredentialSpec

        @Stability(Stable)
        @Nullable
        default String getGmsaCredentialSpec()
        GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
      • getGmsaCredentialSpecName

        @Stability(Stable)
        @Nullable
        default String getGmsaCredentialSpecName()
        GMSACredentialSpecName is the name of the GMSA credential spec to use.
      • getHostProcess

        @Stability(Stable)
        @Nullable
        default Boolean getHostProcess()
        HostProcess determines if a container should be run as a 'Host Process' container.

        This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.

      • getRunAsUserName

        @Stability(Stable)
        @Nullable
        default String getRunAsUserName()
        The UserName in Windows to run the entrypoint of the container process.

        Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.

        Default: the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.