pub struct Builder { /* private fields */ }
Expand description
A builder for EksContainerSecurityContext
.
Implementations§
source§impl Builder
impl Builder
sourcepub fn run_as_user(self, input: i64) -> Self
pub fn run_as_user(self, input: i64) -> Self
When this parameter is specified, the container is run as the specified user ID (uid
). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps to RunAsUser
and MustRanAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn set_run_as_user(self, input: Option<i64>) -> Self
pub fn set_run_as_user(self, input: Option<i64>) -> Self
When this parameter is specified, the container is run as the specified user ID (uid
). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps to RunAsUser
and MustRanAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn run_as_group(self, input: i64) -> Self
pub fn run_as_group(self, input: i64) -> Self
When this parameter is specified, the container is run as the specified group ID (gid
). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps to RunAsGroup
and MustRunAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn set_run_as_group(self, input: Option<i64>) -> Self
pub fn set_run_as_group(self, input: Option<i64>) -> Self
When this parameter is specified, the container is run as the specified group ID (gid
). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps to RunAsGroup
and MustRunAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn privileged(self, input: bool) -> Self
pub fn privileged(self, input: bool) -> Self
When this parameter is true
, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root
user permissions. The default value is false
. This parameter maps to privileged
policy in the Privileged pod security policies in the Kubernetes documentation.
sourcepub fn set_privileged(self, input: Option<bool>) -> Self
pub fn set_privileged(self, input: Option<bool>) -> Self
When this parameter is true
, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root
user permissions. The default value is false
. This parameter maps to privileged
policy in the Privileged pod security policies in the Kubernetes documentation.
sourcepub fn read_only_root_filesystem(self, input: bool) -> Self
pub fn read_only_root_filesystem(self, input: bool) -> Self
When this parameter is true
, the container is given read-only access to its root file system. The default value is false
. This parameter maps to ReadOnlyRootFilesystem
policy in the Volumes and file systems pod security policies in the Kubernetes documentation.
sourcepub fn set_read_only_root_filesystem(self, input: Option<bool>) -> Self
pub fn set_read_only_root_filesystem(self, input: Option<bool>) -> Self
When this parameter is true
, the container is given read-only access to its root file system. The default value is false
. This parameter maps to ReadOnlyRootFilesystem
policy in the Volumes and file systems pod security policies in the Kubernetes documentation.
sourcepub fn run_as_non_root(self, input: bool) -> Self
pub fn run_as_non_root(self, input: bool) -> Self
When this parameter is specified, the container is run as a user with a uid
other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps to RunAsUser
and MustRunAsNonRoot
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn set_run_as_non_root(self, input: Option<bool>) -> Self
pub fn set_run_as_non_root(self, input: Option<bool>) -> Self
When this parameter is specified, the container is run as a user with a uid
other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps to RunAsUser
and MustRunAsNonRoot
policy in the Users and groups pod security policies in the Kubernetes documentation.
sourcepub fn build(self) -> EksContainerSecurityContext
pub fn build(self) -> EksContainerSecurityContext
Consumes the builder and constructs a EksContainerSecurityContext
.