Class EksContainerSecurityContext
- java.lang.Object
-
- software.amazon.awssdk.services.batch.model.EksContainerSecurityContext
-
- All Implemented Interfaces:
Serializable
,SdkPojo
,ToCopyableBuilder<EksContainerSecurityContext.Builder,EksContainerSecurityContext>
@Generated("software.amazon.awssdk:codegen") public final class EksContainerSecurityContext extends Object implements SdkPojo, Serializable, ToCopyableBuilder<EksContainerSecurityContext.Builder,EksContainerSecurityContext>
The security context for a job. For more information, see Configure a security context for a pod or container in the Kubernetes documentation.
- See Also:
- Serialized Form
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static interface
EksContainerSecurityContext.Builder
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static EksContainerSecurityContext.Builder
builder()
boolean
equals(Object obj)
boolean
equalsBySdkFields(Object obj)
<T> Optional<T>
getValueForField(String fieldName, Class<T> clazz)
int
hashCode()
Boolean
privileged()
When this parameter istrue
, the container is given elevated permissions on the host container instance.Boolean
readOnlyRootFilesystem()
When this parameter istrue
, the container is given read-only access to its root file system.Long
runAsGroup()
When this parameter is specified, the container is run as the specified group ID (gid
).Boolean
runAsNonRoot()
When this parameter is specified, the container is run as a user with auid
other than 0.Long
runAsUser()
When this parameter is specified, the container is run as the specified user ID (uid
).List<SdkField<?>>
sdkFields()
static Class<? extends EksContainerSecurityContext.Builder>
serializableBuilderClass()
EksContainerSecurityContext.Builder
toBuilder()
String
toString()
Returns a string representation of this object.-
Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait
-
Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
-
-
-
Method Detail
-
runAsUser
public final Long runAsUser()
When this parameter is specified, the container is run as the specified user ID (
uid
). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps toRunAsUser
andMustRanAs
policy in the Users and groups pod security policies in the Kubernetes documentation.- Returns:
- When this parameter is specified, the container is run as the specified user ID (
uid
). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps toRunAsUser
andMustRanAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
-
runAsGroup
public final Long runAsGroup()
When this parameter is specified, the container is run as the specified group ID (
gid
). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps toRunAsGroup
andMustRunAs
policy in the Users and groups pod security policies in the Kubernetes documentation.- Returns:
- When this parameter is specified, the container is run as the specified group ID (
gid
). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps toRunAsGroup
andMustRunAs
policy in the Users and groups pod security policies in the Kubernetes documentation.
-
privileged
public final Boolean privileged()
When this parameter is
true
, the container is given elevated permissions on the host container instance. The level of permissions are similar to theroot
user permissions. The default value isfalse
. This parameter maps toprivileged
policy in the Privileged pod security policies in the Kubernetes documentation.- Returns:
- When this parameter is
true
, the container is given elevated permissions on the host container instance. The level of permissions are similar to theroot
user permissions. The default value isfalse
. This parameter maps toprivileged
policy in the Privileged pod security policies in the Kubernetes documentation.
-
readOnlyRootFilesystem
public final Boolean readOnlyRootFilesystem()
When this parameter is
true
, the container is given read-only access to its root file system. The default value isfalse
. This parameter maps toReadOnlyRootFilesystem
policy in the Volumes and file systems pod security policies in the Kubernetes documentation.- Returns:
- When this parameter is
true
, the container is given read-only access to its root file system. The default value isfalse
. This parameter maps toReadOnlyRootFilesystem
policy in the Volumes and file systems pod security policies in the Kubernetes documentation.
-
runAsNonRoot
public final Boolean runAsNonRoot()
When this parameter is specified, the container is run as a user with a
uid
other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps toRunAsUser
andMustRunAsNonRoot
policy in the Users and groups pod security policies in the Kubernetes documentation.- Returns:
- When this parameter is specified, the container is run as a user with a
uid
other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps toRunAsUser
andMustRunAsNonRoot
policy in the Users and groups pod security policies in the Kubernetes documentation.
-
toBuilder
public EksContainerSecurityContext.Builder toBuilder()
- Specified by:
toBuilder
in interfaceToCopyableBuilder<EksContainerSecurityContext.Builder,EksContainerSecurityContext>
-
builder
public static EksContainerSecurityContext.Builder builder()
-
serializableBuilderClass
public static Class<? extends EksContainerSecurityContext.Builder> serializableBuilderClass()
-
equalsBySdkFields
public final boolean equalsBySdkFields(Object obj)
- Specified by:
equalsBySdkFields
in interfaceSdkPojo
-
toString
public final String toString()
Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
-
-