mirror of
https://github.com/ceph/ceph-csi.git
synced 2025-06-14 18:53:35 +00:00
.github
actions
api
assets
charts
cmd
deploy
docs
e2e
examples
internal
scripts
tools
troubleshooting
vendor
github.com
go.opentelemetry.io
go.uber.org
golang.org
gomodules.xyz
google.golang.org
gopkg.in
k8s.io
api
apiextensions-apiserver
apimachinery
apiserver
client-go
cloud-provider
component-base
component-helpers
klog
kube-openapi
kubectl
kubelet
kubernetes
mount-utils
pod-security-admission
api
attributes.go
constants.go
doc.go
helpers.go
policy
LICENSE
utils
sigs.k8s.io
modules.txt
.commitlintrc.yml
.gitignore
.mergify.yml
.pre-commit-config.yaml
LICENSE
Makefile
README.md
build.env
deploy.sh
go.mod
go.sum
51 lines
1.4 KiB
Go
51 lines
1.4 KiB
Go
![]() |
/*
|
||
|
Copyright 2021 The Kubernetes Authors.
|
||
|
|
||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
you may not use this file except in compliance with the License.
|
||
|
You may obtain a copy of the License at
|
||
|
|
||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
||
|
Unless required by applicable law or agreed to in writing, software
|
||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
See the License for the specific language governing permissions and
|
||
|
limitations under the License.
|
||
|
*/
|
||
|
|
||
|
package api
|
||
|
|
||
|
type Level string
|
||
|
|
||
|
const (
|
||
|
LevelPrivileged Level = "privileged"
|
||
|
LevelBaseline Level = "baseline"
|
||
|
LevelRestricted Level = "restricted"
|
||
|
)
|
||
|
|
||
|
var validLevels = []string{
|
||
|
string(LevelPrivileged),
|
||
|
string(LevelBaseline),
|
||
|
string(LevelRestricted),
|
||
|
}
|
||
|
|
||
|
const VersionLatest = "latest"
|
||
|
|
||
|
const AuditAnnotationPrefix = labelPrefix
|
||
|
|
||
|
const (
|
||
|
labelPrefix = "pod-security.kubernetes.io/"
|
||
|
|
||
|
EnforceLevelLabel = labelPrefix + "enforce"
|
||
|
EnforceVersionLabel = labelPrefix + "enforce-version"
|
||
|
AuditLevelLabel = labelPrefix + "audit"
|
||
|
AuditVersionLabel = labelPrefix + "audit-version"
|
||
|
WarnLevelLabel = labelPrefix + "warn"
|
||
|
WarnVersionLabel = labelPrefix + "warn-version"
|
||
|
|
||
|
ExemptionReasonAnnotationKey = "exempt"
|
||
|
AuditViolationsAnnotationKey = "audit-violations"
|
||
|
EnforcedPolicyAnnotationKey = "enforce-policy"
|
||
|
)
|