V1beta1Policy.PodSecurityPolicySpec (client-java-proto 10.0.0 API)

java.lang.Object
- com.google.protobuf.AbstractMessageLite
- - com.google.protobuf.AbstractMessage
  - - com.google.protobuf.GeneratedMessageV3
    - - io.kubernetes.client.proto.V1beta1Policy.PodSecurityPolicySpec

All Implemented Interfaces:

com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, V1beta1Policy.PodSecurityPolicySpecOrBuilder, Serializable

Enclosing class:

V1beta1Policy
```
public static final class V1beta1Policy.PodSecurityPolicySpec
extends com.google.protobuf.GeneratedMessageV3
implements V1beta1Policy.PodSecurityPolicySpecOrBuilder
```
```
 PodSecurityPolicySpec defines the policy enforced.
 
```
Protobuf type k8s.io.api.policy.v1beta1.PodSecurityPolicySpec
See Also:

Serialized Form

Nested Class Summary

Nested Classes
Modifier and Type Class and Description

static class V1beta1Policy.PodSecurityPolicySpec.Builder
PodSecurityPolicySpec defines the policy enforced.
- Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3
  com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter
- Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite
  com.google.protobuf.AbstractMessageLite.InternalOneOfEnum

Nested Classes
Modifier and Type	Class and Description
`static class`	`V1beta1Policy.PodSecurityPolicySpec.Builder` PodSecurityPolicySpec defines the policy enforced.

Field Summary

Fields
Modifier and Type	Field and Description
`static int`	`ALLOWEDCAPABILITIES_FIELD_NUMBER`
`static int`	`ALLOWEDFLEXVOLUMES_FIELD_NUMBER`
`static int`	`ALLOWEDHOSTPATHS_FIELD_NUMBER`
`static int`	`ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER`
`static int`	`ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER`
`static int`	`ALLOWPRIVILEGEESCALATION_FIELD_NUMBER`
`static int`	`DEFAULTADDCAPABILITIES_FIELD_NUMBER`
`static int`	`DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER`
`static int`	`FORBIDDENSYSCTLS_FIELD_NUMBER`
`static int`	`FSGROUP_FIELD_NUMBER`
`static int`	`HOSTIPC_FIELD_NUMBER`
`static int`	`HOSTNETWORK_FIELD_NUMBER`
`static int`	`HOSTPID_FIELD_NUMBER`
`static int`	`HOSTPORTS_FIELD_NUMBER`
`static com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec>`	`PARSER` Deprecated.
`static int`	`PRIVILEGED_FIELD_NUMBER`
`static int`	`READONLYROOTFILESYSTEM_FIELD_NUMBER`
`static int`	`REQUIREDDROPCAPABILITIES_FIELD_NUMBER`
`static int`	`RUNASGROUP_FIELD_NUMBER`
`static int`	`RUNASUSER_FIELD_NUMBER`
`static int`	`SELINUX_FIELD_NUMBER`
`static int`	`SUPPLEMENTALGROUPS_FIELD_NUMBER`
`static int`	`VOLUMES_FIELD_NUMBER`

Fields inherited from class com.google.protobuf.GeneratedMessageV3
alwaysUseFieldBuilders, unknownFields

Fields inherited from class com.google.protobuf.AbstractMessage
memoizedSize

Fields inherited from class com.google.protobuf.AbstractMessageLite
memoizedHashCode

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`boolean`	`equals(Object obj)`
`String`	`getAllowedCapabilities(int index)` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`com.google.protobuf.ByteString`	`getAllowedCapabilitiesBytes(int index)` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`int`	`getAllowedCapabilitiesCount()` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`com.google.protobuf.ProtocolStringList`	`getAllowedCapabilitiesList()` allowedCapabilities is a list of capabilities that can be requested to add to the container.
`V1beta1Policy.AllowedFlexVolume`	`getAllowedFlexVolumes(int index)` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`int`	`getAllowedFlexVolumesCount()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`List<V1beta1Policy.AllowedFlexVolume>`	`getAllowedFlexVolumesList()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`V1beta1Policy.AllowedFlexVolumeOrBuilder`	`getAllowedFlexVolumesOrBuilder(int index)` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`List<? extends V1beta1Policy.AllowedFlexVolumeOrBuilder>`	`getAllowedFlexVolumesOrBuilderList()` allowedFlexVolumes is a whitelist of allowed Flexvolumes.
`V1beta1Policy.AllowedHostPath`	`getAllowedHostPaths(int index)` allowedHostPaths is a white list of allowed host paths.
`int`	`getAllowedHostPathsCount()` allowedHostPaths is a white list of allowed host paths.
`List<V1beta1Policy.AllowedHostPath>`	`getAllowedHostPathsList()` allowedHostPaths is a white list of allowed host paths.
`V1beta1Policy.AllowedHostPathOrBuilder`	`getAllowedHostPathsOrBuilder(int index)` allowedHostPaths is a white list of allowed host paths.
`List<? extends V1beta1Policy.AllowedHostPathOrBuilder>`	`getAllowedHostPathsOrBuilderList()` allowedHostPaths is a white list of allowed host paths.
`String`	`getAllowedProcMountTypes(int index)` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`com.google.protobuf.ByteString`	`getAllowedProcMountTypesBytes(int index)` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`int`	`getAllowedProcMountTypesCount()` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`com.google.protobuf.ProtocolStringList`	`getAllowedProcMountTypesList()` AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
`String`	`getAllowedUnsafeSysctls(int index)` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`com.google.protobuf.ByteString`	`getAllowedUnsafeSysctlsBytes(int index)` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`int`	`getAllowedUnsafeSysctlsCount()` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`com.google.protobuf.ProtocolStringList`	`getAllowedUnsafeSysctlsList()` allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
`boolean`	`getAllowPrivilegeEscalation()` allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
`String`	`getDefaultAddCapabilities(int index)` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`com.google.protobuf.ByteString`	`getDefaultAddCapabilitiesBytes(int index)` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`int`	`getDefaultAddCapabilitiesCount()` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`com.google.protobuf.ProtocolStringList`	`getDefaultAddCapabilitiesList()` defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.
`boolean`	`getDefaultAllowPrivilegeEscalation()` defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
`static V1beta1Policy.PodSecurityPolicySpec`	`getDefaultInstance()`
`V1beta1Policy.PodSecurityPolicySpec`	`getDefaultInstanceForType()`
`static com.google.protobuf.Descriptors.Descriptor`	`getDescriptor()`
`String`	`getForbiddenSysctls(int index)` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`com.google.protobuf.ByteString`	`getForbiddenSysctlsBytes(int index)` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`int`	`getForbiddenSysctlsCount()` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`com.google.protobuf.ProtocolStringList`	`getForbiddenSysctlsList()` forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
`V1beta1Policy.FSGroupStrategyOptions`	`getFsGroup()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`V1beta1Policy.FSGroupStrategyOptionsOrBuilder`	`getFsGroupOrBuilder()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`boolean`	`getHostIPC()` hostIPC determines if the policy allows the use of HostIPC in the pod spec.
`boolean`	`getHostNetwork()` hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
`boolean`	`getHostPID()` hostPID determines if the policy allows the use of HostPID in the pod spec.
`V1beta1Policy.HostPortRange`	`getHostPorts(int index)` hostPorts determines which host port ranges are allowed to be exposed.
`int`	`getHostPortsCount()` hostPorts determines which host port ranges are allowed to be exposed.
`List<V1beta1Policy.HostPortRange>`	`getHostPortsList()` hostPorts determines which host port ranges are allowed to be exposed.
`V1beta1Policy.HostPortRangeOrBuilder`	`getHostPortsOrBuilder(int index)` hostPorts determines which host port ranges are allowed to be exposed.
`List<? extends V1beta1Policy.HostPortRangeOrBuilder>`	`getHostPortsOrBuilderList()` hostPorts determines which host port ranges are allowed to be exposed.
`com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec>`	`getParserForType()`
`boolean`	`getPrivileged()` privileged determines if a pod can request to be run as privileged.
`boolean`	`getReadOnlyRootFilesystem()` readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
`String`	`getRequiredDropCapabilities(int index)` requiredDropCapabilities are the capabilities that will be dropped from the container.
`com.google.protobuf.ByteString`	`getRequiredDropCapabilitiesBytes(int index)` requiredDropCapabilities are the capabilities that will be dropped from the container.
`int`	`getRequiredDropCapabilitiesCount()` requiredDropCapabilities are the capabilities that will be dropped from the container.
`com.google.protobuf.ProtocolStringList`	`getRequiredDropCapabilitiesList()` requiredDropCapabilities are the capabilities that will be dropped from the container.
`V1beta1Policy.RunAsGroupStrategyOptions`	`getRunAsGroup()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`V1beta1Policy.RunAsGroupStrategyOptionsOrBuilder`	`getRunAsGroupOrBuilder()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`V1beta1Policy.RunAsUserStrategyOptions`	`getRunAsUser()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`V1beta1Policy.RunAsUserStrategyOptionsOrBuilder`	`getRunAsUserOrBuilder()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`V1beta1Policy.SELinuxStrategyOptions`	`getSeLinux()` seLinux is the strategy that will dictate the allowable labels that may be set.
`V1beta1Policy.SELinuxStrategyOptionsOrBuilder`	`getSeLinuxOrBuilder()` seLinux is the strategy that will dictate the allowable labels that may be set.
`int`	`getSerializedSize()`
`V1beta1Policy.SupplementalGroupsStrategyOptions`	`getSupplementalGroups()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
`V1beta1Policy.SupplementalGroupsStrategyOptionsOrBuilder`	`getSupplementalGroupsOrBuilder()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
`com.google.protobuf.UnknownFieldSet`	`getUnknownFields()`
`String`	`getVolumes(int index)` volumes is a white list of allowed volume plugins.
`com.google.protobuf.ByteString`	`getVolumesBytes(int index)` volumes is a white list of allowed volume plugins.
`int`	`getVolumesCount()` volumes is a white list of allowed volume plugins.
`com.google.protobuf.ProtocolStringList`	`getVolumesList()` volumes is a white list of allowed volume plugins.
`boolean`	`hasAllowPrivilegeEscalation()` allowPrivilegeEscalation determines if a pod can request to allow privilege escalation.
`boolean`	`hasDefaultAllowPrivilegeEscalation()` defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
`boolean`	`hasFsGroup()` fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
`int`	`hashCode()`
`boolean`	`hasHostIPC()` hostIPC determines if the policy allows the use of HostIPC in the pod spec.
`boolean`	`hasHostNetwork()` hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
`boolean`	`hasHostPID()` hostPID determines if the policy allows the use of HostPID in the pod spec.
`boolean`	`hasPrivileged()` privileged determines if a pod can request to be run as privileged.
`boolean`	`hasReadOnlyRootFilesystem()` readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.
`boolean`	`hasRunAsGroup()` RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
`boolean`	`hasRunAsUser()` runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
`boolean`	`hasSeLinux()` seLinux is the strategy that will dictate the allowable labels that may be set.
`boolean`	`hasSupplementalGroups()` supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
`protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable`	`internalGetFieldAccessorTable()`
`boolean`	`isInitialized()`
`static V1beta1Policy.PodSecurityPolicySpec.Builder`	`newBuilder()`
`static V1beta1Policy.PodSecurityPolicySpec.Builder`	`newBuilder(V1beta1Policy.PodSecurityPolicySpec prototype)`
`V1beta1Policy.PodSecurityPolicySpec.Builder`	`newBuilderForType()`
`protected V1beta1Policy.PodSecurityPolicySpec.Builder`	`newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseDelimitedFrom(InputStream input)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(byte[] data)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(ByteBuffer data)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(com.google.protobuf.ByteString data)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(com.google.protobuf.CodedInputStream input)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(InputStream input)`
`static V1beta1Policy.PodSecurityPolicySpec`	`parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)`
`static com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec>`	`parser()`
`V1beta1Policy.PodSecurityPolicySpec.Builder`	`toBuilder()`
`void`	`writeTo(com.google.protobuf.CodedOutputStream output)`

Methods inherited from class com.google.protobuf.GeneratedMessageV3
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newInstance, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag

Methods inherited from class com.google.protobuf.AbstractMessage
findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toString

Methods inherited from class com.google.protobuf.AbstractMessageLite
addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo

Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLite
toByteArray, toByteString, writeDelimitedTo, writeTo

Field Detail
- PRIVILEGED_FIELD_NUMBER
```
public static final int PRIVILEGED_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- DEFAULTADDCAPABILITIES_FIELD_NUMBER
```
public static final int DEFAULTADDCAPABILITIES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- REQUIREDDROPCAPABILITIES_FIELD_NUMBER
```
public static final int REQUIREDDROPCAPABILITIES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWEDCAPABILITIES_FIELD_NUMBER
```
public static final int ALLOWEDCAPABILITIES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- VOLUMES_FIELD_NUMBER
```
public static final int VOLUMES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- HOSTNETWORK_FIELD_NUMBER
```
public static final int HOSTNETWORK_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- HOSTPORTS_FIELD_NUMBER
```
public static final int HOSTPORTS_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- HOSTPID_FIELD_NUMBER
```
public static final int HOSTPID_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- HOSTIPC_FIELD_NUMBER
```
public static final int HOSTIPC_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- SELINUX_FIELD_NUMBER
```
public static final int SELINUX_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- RUNASUSER_FIELD_NUMBER
```
public static final int RUNASUSER_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- RUNASGROUP_FIELD_NUMBER
```
public static final int RUNASGROUP_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- SUPPLEMENTALGROUPS_FIELD_NUMBER
```
public static final int SUPPLEMENTALGROUPS_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- FSGROUP_FIELD_NUMBER
```
public static final int FSGROUP_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- READONLYROOTFILESYSTEM_FIELD_NUMBER
```
public static final int READONLYROOTFILESYSTEM_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER
```
public static final int DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWPRIVILEGEESCALATION_FIELD_NUMBER
```
public static final int ALLOWPRIVILEGEESCALATION_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWEDHOSTPATHS_FIELD_NUMBER
```
public static final int ALLOWEDHOSTPATHS_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWEDFLEXVOLUMES_FIELD_NUMBER
```
public static final int ALLOWEDFLEXVOLUMES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER
```
public static final int ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- FORBIDDENSYSCTLS_FIELD_NUMBER
```
public static final int FORBIDDENSYSCTLS_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER
```
public static final int ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER
```
  See Also:
  
  Constant Field Values
- PARSER
```
@Deprecated
public static final com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec> PARSER
```
  Deprecated.

Method Detail

getUnknownFields
```
public final com.google.protobuf.UnknownFieldSet getUnknownFields()
```
Specified by:

getUnknownFields in interface com.google.protobuf.MessageOrBuilder

Overrides:

getUnknownFields in class com.google.protobuf.GeneratedMessageV3

getDescriptor

public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

internalGetFieldAccessorTable
```
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
```
Specified by:

internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3

hasPrivileged
```
public boolean hasPrivileged()
```
```
 privileged determines if a pod can request to be run as privileged.
 +optional
 
```
optional bool privileged = 1;
Specified by:

hasPrivileged in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getPrivileged
```
public boolean getPrivileged()
```
```
 privileged determines if a pod can request to be run as privileged.
 +optional
 
```
optional bool privileged = 1;
Specified by:

getPrivileged in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getDefaultAddCapabilitiesList

public com.google.protobuf.ProtocolStringList getDefaultAddCapabilitiesList()

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

Specified by:: getDefaultAddCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getDefaultAddCapabilitiesCount

public int getDefaultAddCapabilitiesCount()

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

Specified by:: getDefaultAddCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getDefaultAddCapabilities

public String getDefaultAddCapabilities(int index)

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

Specified by:: getDefaultAddCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getDefaultAddCapabilitiesBytes

public com.google.protobuf.ByteString getDefaultAddCapabilitiesBytes(int index)

 defaultAddCapabilities is the default set of capabilities that will be added to the container
 unless the pod spec specifically drops the capability.  You may not list a capability in both
 defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly
 allowed, and need not be included in the allowedCapabilities list.
 +optional

repeated string defaultAddCapabilities = 2;

Specified by:: getDefaultAddCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRequiredDropCapabilitiesList

public com.google.protobuf.ProtocolStringList getRequiredDropCapabilitiesList()

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

Specified by:: getRequiredDropCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRequiredDropCapabilitiesCount

public int getRequiredDropCapabilitiesCount()

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

Specified by:: getRequiredDropCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRequiredDropCapabilities

public String getRequiredDropCapabilities(int index)

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

Specified by:: getRequiredDropCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRequiredDropCapabilitiesBytes

public com.google.protobuf.ByteString getRequiredDropCapabilitiesBytes(int index)

 requiredDropCapabilities are the capabilities that will be dropped from the container.  These
 are required to be dropped and cannot be added.
 +optional

repeated string requiredDropCapabilities = 3;

Specified by:: getRequiredDropCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedCapabilitiesList

public com.google.protobuf.ProtocolStringList getAllowedCapabilitiesList()

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

Specified by:: getAllowedCapabilitiesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedCapabilitiesCount

public int getAllowedCapabilitiesCount()

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

Specified by:: getAllowedCapabilitiesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedCapabilities

public String getAllowedCapabilities(int index)

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

Specified by:: getAllowedCapabilities in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedCapabilitiesBytes

public com.google.protobuf.ByteString getAllowedCapabilitiesBytes(int index)

 allowedCapabilities is a list of capabilities that can be requested to add to the container.
 Capabilities in this field may be added at the pod author's discretion.
 You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
 +optional

repeated string allowedCapabilities = 4;

Specified by:: getAllowedCapabilitiesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getVolumesList

public com.google.protobuf.ProtocolStringList getVolumesList()

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

Specified by:: getVolumesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getVolumesCount

public int getVolumesCount()

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

Specified by:: getVolumesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getVolumes

public String getVolumes(int index)

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

Specified by:: getVolumes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getVolumesBytes

public com.google.protobuf.ByteString getVolumesBytes(int index)

 volumes is a white list of allowed volume plugins. Empty indicates that
 no volumes may be used. To allow all volumes you may use '*'.
 +optional

repeated string volumes = 5;

Specified by:: getVolumesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasHostNetwork

public boolean hasHostNetwork()

 hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
 +optional

optional bool hostNetwork = 6;

Specified by:: hasHostNetwork in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostNetwork

public boolean getHostNetwork()

 hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
 +optional

optional bool hostNetwork = 6;

Specified by:: getHostNetwork in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPortsList
```
public List<V1beta1Policy.HostPortRange> getHostPortsList()
```
```
 hostPorts determines which host port ranges are allowed to be exposed.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;
Specified by:

getHostPortsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPortsOrBuilderList
```
public List<? extends V1beta1Policy.HostPortRangeOrBuilder> getHostPortsOrBuilderList()
```
```
 hostPorts determines which host port ranges are allowed to be exposed.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;
Specified by:

getHostPortsOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPortsCount
```
public int getHostPortsCount()
```
```
 hostPorts determines which host port ranges are allowed to be exposed.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;
Specified by:

getHostPortsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPorts
```
public V1beta1Policy.HostPortRange getHostPorts(int index)
```
```
 hostPorts determines which host port ranges are allowed to be exposed.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;
Specified by:

getHostPorts in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPortsOrBuilder
```
public V1beta1Policy.HostPortRangeOrBuilder getHostPortsOrBuilder(int index)
```
```
 hostPorts determines which host port ranges are allowed to be exposed.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.HostPortRange hostPorts = 7;
Specified by:

getHostPortsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasHostPID

public boolean hasHostPID()

 hostPID determines if the policy allows the use of HostPID in the pod spec.
 +optional

optional bool hostPID = 8;

Specified by:: hasHostPID in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostPID

public boolean getHostPID()

 hostPID determines if the policy allows the use of HostPID in the pod spec.
 +optional

optional bool hostPID = 8;

Specified by:: getHostPID in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasHostIPC

public boolean hasHostIPC()

 hostIPC determines if the policy allows the use of HostIPC in the pod spec.
 +optional

optional bool hostIPC = 9;

Specified by:: hasHostIPC in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getHostIPC

public boolean getHostIPC()

 hostIPC determines if the policy allows the use of HostIPC in the pod spec.
 +optional

optional bool hostIPC = 9;

Specified by:: getHostIPC in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasSeLinux
```
public boolean hasSeLinux()
```
```
 seLinux is the strategy that will dictate the allowable labels that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;
Specified by:

hasSeLinux in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getSeLinux
```
public V1beta1Policy.SELinuxStrategyOptions getSeLinux()
```
```
 seLinux is the strategy that will dictate the allowable labels that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;
Specified by:

getSeLinux in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getSeLinuxOrBuilder
```
public V1beta1Policy.SELinuxStrategyOptionsOrBuilder getSeLinuxOrBuilder()
```
```
 seLinux is the strategy that will dictate the allowable labels that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.SELinuxStrategyOptions seLinux = 10;
Specified by:

getSeLinuxOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasRunAsUser
```
public boolean hasRunAsUser()
```
```
 runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
Specified by:

hasRunAsUser in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRunAsUser
```
public V1beta1Policy.RunAsUserStrategyOptions getRunAsUser()
```
```
 runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
Specified by:

getRunAsUser in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRunAsUserOrBuilder
```
public V1beta1Policy.RunAsUserStrategyOptionsOrBuilder getRunAsUserOrBuilder()
```
```
 runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
 
```
optional .k8s.io.api.policy.v1beta1.RunAsUserStrategyOptions runAsUser = 11;
Specified by:

getRunAsUserOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasRunAsGroup

public boolean hasRunAsGroup()

 RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
 If this field is omitted, the pod's RunAsGroup can take any value. This field requires the
 RunAsGroup feature gate to be enabled.
 +optional

optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;

Specified by:: hasRunAsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRunAsGroup

public V1beta1Policy.RunAsGroupStrategyOptions getRunAsGroup()

 RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
 If this field is omitted, the pod's RunAsGroup can take any value. This field requires the
 RunAsGroup feature gate to be enabled.
 +optional

optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;

Specified by:: getRunAsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getRunAsGroupOrBuilder

public V1beta1Policy.RunAsGroupStrategyOptionsOrBuilder getRunAsGroupOrBuilder()

 RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set.
 If this field is omitted, the pod's RunAsGroup can take any value. This field requires the
 RunAsGroup feature gate to be enabled.
 +optional

optional .k8s.io.api.policy.v1beta1.RunAsGroupStrategyOptions runAsGroup = 22;

Specified by:: getRunAsGroupOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasSupplementalGroups
```
public boolean hasSupplementalGroups()
```
```
 supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
Specified by:

hasSupplementalGroups in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getSupplementalGroups
```
public V1beta1Policy.SupplementalGroupsStrategyOptions getSupplementalGroups()
```
```
 supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
Specified by:

getSupplementalGroups in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getSupplementalGroupsOrBuilder
```
public V1beta1Policy.SupplementalGroupsStrategyOptionsOrBuilder getSupplementalGroupsOrBuilder()
```
```
 supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.SupplementalGroupsStrategyOptions supplementalGroups = 12;
Specified by:

getSupplementalGroupsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasFsGroup
```
public boolean hasFsGroup()
```
```
 fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;
Specified by:

hasFsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getFsGroup
```
public V1beta1Policy.FSGroupStrategyOptions getFsGroup()
```
```
 fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;
Specified by:

getFsGroup in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getFsGroupOrBuilder
```
public V1beta1Policy.FSGroupStrategyOptionsOrBuilder getFsGroupOrBuilder()
```
```
 fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
 
```
optional .k8s.io.api.policy.v1beta1.FSGroupStrategyOptions fsGroup = 13;
Specified by:

getFsGroupOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasReadOnlyRootFilesystem

public boolean hasReadOnlyRootFilesystem()

 readOnlyRootFilesystem when set to true will force containers to run with a read only root file
 system.  If the container specifically requests to run with a non-read only root file system
 the PSP should deny the pod.
 If set to false the container may run with a read only root file system if it wishes but it
 will not be forced to.
 +optional

optional bool readOnlyRootFilesystem = 14;

Specified by:: hasReadOnlyRootFilesystem in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getReadOnlyRootFilesystem

public boolean getReadOnlyRootFilesystem()

 readOnlyRootFilesystem when set to true will force containers to run with a read only root file
 system.  If the container specifically requests to run with a non-read only root file system
 the PSP should deny the pod.
 If set to false the container may run with a read only root file system if it wishes but it
 will not be forced to.
 +optional

optional bool readOnlyRootFilesystem = 14;

Specified by:: getReadOnlyRootFilesystem in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasDefaultAllowPrivilegeEscalation

public boolean hasDefaultAllowPrivilegeEscalation()

 defaultAllowPrivilegeEscalation controls the default setting for whether a
 process can gain more privileges than its parent process.
 +optional

optional bool defaultAllowPrivilegeEscalation = 15;

Specified by:: hasDefaultAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getDefaultAllowPrivilegeEscalation

public boolean getDefaultAllowPrivilegeEscalation()

 defaultAllowPrivilegeEscalation controls the default setting for whether a
 process can gain more privileges than its parent process.
 +optional

optional bool defaultAllowPrivilegeEscalation = 15;

Specified by:: getDefaultAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

hasAllowPrivilegeEscalation

public boolean hasAllowPrivilegeEscalation()

 allowPrivilegeEscalation determines if a pod can request to allow
 privilege escalation. If unspecified, defaults to true.
 +optional

optional bool allowPrivilegeEscalation = 16;

Specified by:: hasAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowPrivilegeEscalation

public boolean getAllowPrivilegeEscalation()

 allowPrivilegeEscalation determines if a pod can request to allow
 privilege escalation. If unspecified, defaults to true.
 +optional

optional bool allowPrivilegeEscalation = 16;

Specified by:: getAllowPrivilegeEscalation in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedHostPathsList

public List<V1beta1Policy.AllowedHostPath> getAllowedHostPathsList()

 allowedHostPaths is a white list of allowed host paths. Empty indicates
 that all host paths may be used.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;

Specified by:: getAllowedHostPathsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedHostPathsOrBuilderList

public List<? extends V1beta1Policy.AllowedHostPathOrBuilder> getAllowedHostPathsOrBuilderList()

 allowedHostPaths is a white list of allowed host paths. Empty indicates
 that all host paths may be used.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;

Specified by:: getAllowedHostPathsOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedHostPathsCount
```
public int getAllowedHostPathsCount()
```
```
 allowedHostPaths is a white list of allowed host paths. Empty indicates
 that all host paths may be used.
 +optional
 
```
repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;
Specified by:

getAllowedHostPathsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedHostPaths

public V1beta1Policy.AllowedHostPath getAllowedHostPaths(int index)

 allowedHostPaths is a white list of allowed host paths. Empty indicates
 that all host paths may be used.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;

Specified by:: getAllowedHostPaths in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedHostPathsOrBuilder

public V1beta1Policy.AllowedHostPathOrBuilder getAllowedHostPathsOrBuilder(int index)

 allowedHostPaths is a white list of allowed host paths. Empty indicates
 that all host paths may be used.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedHostPath allowedHostPaths = 17;

Specified by:: getAllowedHostPathsOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedFlexVolumesList

public List<V1beta1Policy.AllowedFlexVolume> getAllowedFlexVolumesList()

 allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
 Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
 is allowed in the "volumes" field.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;

Specified by:: getAllowedFlexVolumesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedFlexVolumesOrBuilderList

public List<? extends V1beta1Policy.AllowedFlexVolumeOrBuilder> getAllowedFlexVolumesOrBuilderList()

 allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
 Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
 is allowed in the "volumes" field.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;

Specified by:: getAllowedFlexVolumesOrBuilderList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedFlexVolumesCount

public int getAllowedFlexVolumesCount()

 allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
 Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
 is allowed in the "volumes" field.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;

Specified by:: getAllowedFlexVolumesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedFlexVolumes

public V1beta1Policy.AllowedFlexVolume getAllowedFlexVolumes(int index)

 allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
 Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
 is allowed in the "volumes" field.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;

Specified by:: getAllowedFlexVolumes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedFlexVolumesOrBuilder

public V1beta1Policy.AllowedFlexVolumeOrBuilder getAllowedFlexVolumesOrBuilder(int index)

 allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
 Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
 is allowed in the "volumes" field.
 +optional

repeated .k8s.io.api.policy.v1beta1.AllowedFlexVolume allowedFlexVolumes = 18;

Specified by:: getAllowedFlexVolumesOrBuilder in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedUnsafeSysctlsList

public com.google.protobuf.ProtocolStringList getAllowedUnsafeSysctlsList()

 allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed.
 Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
 Examples:
 e.g. "foo/*" allows "foo/bar", "foo/baz", etc.
 e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
 +optional

repeated string allowedUnsafeSysctls = 19;

Specified by:: getAllowedUnsafeSysctlsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedUnsafeSysctlsCount

public int getAllowedUnsafeSysctlsCount()

 allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed.
 Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
 Examples:
 e.g. "foo/*" allows "foo/bar", "foo/baz", etc.
 e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
 +optional

repeated string allowedUnsafeSysctls = 19;

Specified by:: getAllowedUnsafeSysctlsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedUnsafeSysctls

public String getAllowedUnsafeSysctls(int index)

 allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed.
 Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
 Examples:
 e.g. "foo/*" allows "foo/bar", "foo/baz", etc.
 e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
 +optional

repeated string allowedUnsafeSysctls = 19;

Specified by:: getAllowedUnsafeSysctls in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedUnsafeSysctlsBytes

public com.google.protobuf.ByteString getAllowedUnsafeSysctlsBytes(int index)

 allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed.
 Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
 Examples:
 e.g. "foo/*" allows "foo/bar", "foo/baz", etc.
 e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
 +optional

repeated string allowedUnsafeSysctls = 19;

Specified by:: getAllowedUnsafeSysctlsBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getForbiddenSysctlsList

public com.google.protobuf.ProtocolStringList getForbiddenSysctlsList()

 forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
 Examples:
 e.g. "foo/*" forbids "foo/bar", "foo/baz", etc.
 e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
 +optional

repeated string forbiddenSysctls = 20;

Specified by:: getForbiddenSysctlsList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getForbiddenSysctlsCount

public int getForbiddenSysctlsCount()

 forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
 Examples:
 e.g. "foo/*" forbids "foo/bar", "foo/baz", etc.
 e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
 +optional

repeated string forbiddenSysctls = 20;

Specified by:: getForbiddenSysctlsCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getForbiddenSysctls

public String getForbiddenSysctls(int index)

 forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
 Examples:
 e.g. "foo/*" forbids "foo/bar", "foo/baz", etc.
 e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
 +optional

repeated string forbiddenSysctls = 20;

Specified by:: getForbiddenSysctls in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getForbiddenSysctlsBytes

public com.google.protobuf.ByteString getForbiddenSysctlsBytes(int index)

 forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none.
 Each entry is either a plain sysctl name or ends in "*" in which case it is considered
 as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
 Examples:
 e.g. "foo/*" forbids "foo/bar", "foo/baz", etc.
 e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
 +optional

repeated string forbiddenSysctls = 20;

Specified by:: getForbiddenSysctlsBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedProcMountTypesList

public com.google.protobuf.ProtocolStringList getAllowedProcMountTypesList()

 AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
 Empty or nil indicates that only the DefaultProcMountType may be used.
 This requires the ProcMountType feature flag to be enabled.
 +optional

repeated string allowedProcMountTypes = 21;

Specified by:: getAllowedProcMountTypesList in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedProcMountTypesCount

public int getAllowedProcMountTypesCount()

 AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
 Empty or nil indicates that only the DefaultProcMountType may be used.
 This requires the ProcMountType feature flag to be enabled.
 +optional

repeated string allowedProcMountTypes = 21;

Specified by:: getAllowedProcMountTypesCount in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedProcMountTypes

public String getAllowedProcMountTypes(int index)

 AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
 Empty or nil indicates that only the DefaultProcMountType may be used.
 This requires the ProcMountType feature flag to be enabled.
 +optional

repeated string allowedProcMountTypes = 21;

Specified by:: getAllowedProcMountTypes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

getAllowedProcMountTypesBytes

public com.google.protobuf.ByteString getAllowedProcMountTypesBytes(int index)

 AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
 Empty or nil indicates that only the DefaultProcMountType may be used.
 This requires the ProcMountType feature flag to be enabled.
 +optional

repeated string allowedProcMountTypes = 21;

Specified by:: getAllowedProcMountTypesBytes in interface V1beta1Policy.PodSecurityPolicySpecOrBuilder

isInitialized
```
public final boolean isInitialized()
```
Specified by:

isInitialized in interface com.google.protobuf.MessageLiteOrBuilder

Overrides:

isInitialized in class com.google.protobuf.GeneratedMessageV3

writeTo
```
public void writeTo(com.google.protobuf.CodedOutputStream output)
             throws IOException
```
Specified by:

writeTo in interface com.google.protobuf.MessageLite

Overrides:

writeTo in class com.google.protobuf.GeneratedMessageV3

Throws:

IOException

getSerializedSize
```
public int getSerializedSize()
```
Specified by:

getSerializedSize in interface com.google.protobuf.MessageLite

Overrides:

getSerializedSize in class com.google.protobuf.GeneratedMessageV3

equals
```
public boolean equals(Object obj)
```
Specified by:

equals in interface com.google.protobuf.Message

Overrides:

equals in class com.google.protobuf.AbstractMessage

hashCode
```
public int hashCode()
```
Specified by:

hashCode in interface com.google.protobuf.Message

Overrides:

hashCode in class com.google.protobuf.AbstractMessage

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(ByteBuffer data)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(ByteBuffer data,
                                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(com.google.protobuf.ByteString data,
                                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(byte[] data)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(byte[] data,
                                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                     throws com.google.protobuf.InvalidProtocolBufferException

Throws:: com.google.protobuf.InvalidProtocolBufferException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(InputStream input)
                                                     throws IOException

Throws:: IOException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(InputStream input,
                                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                     throws IOException

Throws:: IOException

parseDelimitedFrom

public static V1beta1Policy.PodSecurityPolicySpec parseDelimitedFrom(InputStream input)
                                                              throws IOException

Throws:: IOException

parseDelimitedFrom

public static V1beta1Policy.PodSecurityPolicySpec parseDelimitedFrom(InputStream input,
                                                                     com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                              throws IOException

Throws:: IOException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input)
                                                     throws IOException

Throws:: IOException

parseFrom

public static V1beta1Policy.PodSecurityPolicySpec parseFrom(com.google.protobuf.CodedInputStream input,
                                                            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                                     throws IOException

Throws:: IOException

newBuilderForType
```
public V1beta1Policy.PodSecurityPolicySpec.Builder newBuilderForType()
```
Specified by:

newBuilderForType in interface com.google.protobuf.Message

Specified by:

newBuilderForType in interface com.google.protobuf.MessageLite

newBuilder

public static V1beta1Policy.PodSecurityPolicySpec.Builder newBuilder()

newBuilder

public static V1beta1Policy.PodSecurityPolicySpec.Builder newBuilder(V1beta1Policy.PodSecurityPolicySpec prototype)

toBuilder
```
public V1beta1Policy.PodSecurityPolicySpec.Builder toBuilder()
```
Specified by:

toBuilder in interface com.google.protobuf.Message

Specified by:

toBuilder in interface com.google.protobuf.MessageLite

newBuilderForType

protected V1beta1Policy.PodSecurityPolicySpec.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)

Specified by:: newBuilderForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstance

public static V1beta1Policy.PodSecurityPolicySpec getDefaultInstance()

parser

public static com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec> parser()

getParserForType
```
public com.google.protobuf.Parser<V1beta1Policy.PodSecurityPolicySpec> getParserForType()
```
Specified by:

getParserForType in interface com.google.protobuf.Message

Specified by:

getParserForType in interface com.google.protobuf.MessageLite

Overrides:

getParserForType in class com.google.protobuf.GeneratedMessageV3

getDefaultInstanceForType
```
public V1beta1Policy.PodSecurityPolicySpec getDefaultInstanceForType()
```
Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder

Specified by:

getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

Class V1beta1Policy.PodSecurityPolicySpec

Nested Class Summary

Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3

Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite

Field Summary

Fields inherited from class com.google.protobuf.GeneratedMessageV3

Fields inherited from class com.google.protobuf.AbstractMessage

Fields inherited from class com.google.protobuf.AbstractMessageLite

Method Summary

Methods inherited from class com.google.protobuf.GeneratedMessageV3

Methods inherited from class com.google.protobuf.AbstractMessage

Methods inherited from class com.google.protobuf.AbstractMessageLite

Methods inherited from class java.lang.Object

Methods inherited from interface com.google.protobuf.MessageOrBuilder

Methods inherited from interface com.google.protobuf.MessageLite

Field Detail

PRIVILEGED_FIELD_NUMBER

DEFAULTADDCAPABILITIES_FIELD_NUMBER

REQUIREDDROPCAPABILITIES_FIELD_NUMBER

ALLOWEDCAPABILITIES_FIELD_NUMBER

VOLUMES_FIELD_NUMBER

HOSTNETWORK_FIELD_NUMBER

HOSTPORTS_FIELD_NUMBER

HOSTPID_FIELD_NUMBER

HOSTIPC_FIELD_NUMBER

SELINUX_FIELD_NUMBER

RUNASUSER_FIELD_NUMBER

RUNASGROUP_FIELD_NUMBER

SUPPLEMENTALGROUPS_FIELD_NUMBER

FSGROUP_FIELD_NUMBER

READONLYROOTFILESYSTEM_FIELD_NUMBER

DEFAULTALLOWPRIVILEGEESCALATION_FIELD_NUMBER

ALLOWPRIVILEGEESCALATION_FIELD_NUMBER

ALLOWEDHOSTPATHS_FIELD_NUMBER

ALLOWEDFLEXVOLUMES_FIELD_NUMBER

ALLOWEDUNSAFESYSCTLS_FIELD_NUMBER

FORBIDDENSYSCTLS_FIELD_NUMBER

ALLOWEDPROCMOUNTTYPES_FIELD_NUMBER

PARSER

Method Detail

getUnknownFields

getDescriptor

internalGetFieldAccessorTable

hasPrivileged

getPrivileged

getDefaultAddCapabilitiesList

getDefaultAddCapabilitiesCount

getDefaultAddCapabilities

getDefaultAddCapabilitiesBytes

getRequiredDropCapabilitiesList

getRequiredDropCapabilitiesCount

getRequiredDropCapabilities

getRequiredDropCapabilitiesBytes

getAllowedCapabilitiesList

getAllowedCapabilitiesCount

getAllowedCapabilities

getAllowedCapabilitiesBytes

getVolumesList

getVolumesCount

getVolumes

getVolumesBytes

hasHostNetwork

getHostNetwork

getHostPortsList

getHostPortsOrBuilderList

getHostPortsCount

getHostPorts

getHostPortsOrBuilder

hasHostPID

getHostPID

hasHostIPC

getHostIPC

hasSeLinux

getSeLinux

getSeLinuxOrBuilder

hasRunAsUser

getRunAsUser

getRunAsUserOrBuilder

hasRunAsGroup

getRunAsGroup