/AWS1/CL_BTCEKSCONTAINERSECCTX

The security context for a job. For more information, see Configure a security context for a pod or container in the Kubernetes documentation.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_runasuser TYPE /AWS1/BTCLONG /AWS1/BTCLONG

When this parameter is specified, the container is run as the specified user ID (uid). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps to RunAsUser and MustRanAs policy in the Users and groups pod security policies in the Kubernetes documentation.

iv_runasgroup TYPE /AWS1/BTCLONG /AWS1/BTCLONG

When this parameter is specified, the container is run as the specified group ID (gid). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps to RunAsGroup and MustRunAs policy in the Users and groups pod security policies in the Kubernetes documentation.

iv_privileged TYPE /AWS1/BTCBOOLEAN /AWS1/BTCBOOLEAN

When this parameter is true, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root user permissions. The default value is false. This parameter maps to privileged policy in the Privileged pod security policies in the Kubernetes documentation.

iv_allowprivilegeescalation TYPE /AWS1/BTCBOOLEAN /AWS1/BTCBOOLEAN

Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is false.

iv_readonlyrootfilesystem TYPE /AWS1/BTCBOOLEAN /AWS1/BTCBOOLEAN

When this parameter is true, the container is given read-only access to its root file system. The default value is false. This parameter maps to ReadOnlyRootFilesystem policy in the Volumes and file systems pod security policies in the Kubernetes documentation.

iv_runasnonroot TYPE /AWS1/BTCBOOLEAN /AWS1/BTCBOOLEAN

When this parameter is specified, the container is run as a user with a uid other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps to RunAsUser and MustRunAsNonRoot policy in the Users and groups pod security policies in the Kubernetes documentation.

---

Queryable Attributes

runAsUser

When this parameter is specified, the container is run as the specified user ID (uid). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps to RunAsUser and MustRanAs policy in the Users and groups pod security policies in the Kubernetes documentation.

Accessible with the following methods

Method	Description
GET_RUNASUSER()	Getter for RUNASUSER, with configurable default
ASK_RUNASUSER()	Getter for RUNASUSER w/ exceptions if field has no value
HAS_RUNASUSER()	Determine if RUNASUSER has a value

runAsGroup

When this parameter is specified, the container is run as the specified group ID (gid). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps to RunAsGroup and MustRunAs policy in the Users and groups pod security policies in the Kubernetes documentation.

Accessible with the following methods

Method	Description
GET_RUNASGROUP()	Getter for RUNASGROUP, with configurable default
ASK_RUNASGROUP()	Getter for RUNASGROUP w/ exceptions if field has no value
HAS_RUNASGROUP()	Determine if RUNASGROUP has a value

privileged

When this parameter is true, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root user permissions. The default value is false. This parameter maps to privileged policy in the Privileged pod security policies in the Kubernetes documentation.

Accessible with the following methods

Method	Description
GET_PRIVILEGED()	Getter for PRIVILEGED, with configurable default
ASK_PRIVILEGED()	Getter for PRIVILEGED w/ exceptions if field has no value
HAS_PRIVILEGED()	Determine if PRIVILEGED has a value

allowPrivilegeEscalation

Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is false.

Accessible with the following methods

Method	Description
GET_ALLOWPRIVILEGEESCALATION()	Getter for ALLOWPRIVILEGEESCALATION, with configurable defau
ASK_ALLOWPRIVILEGEESCALATION()	Getter for ALLOWPRIVILEGEESCALATION w/ exceptions if field h
HAS_ALLOWPRIVILEGEESCALATION()	Determine if ALLOWPRIVILEGEESCALATION has a value

readOnlyRootFilesystem

When this parameter is true, the container is given read-only access to its root file system. The default value is false. This parameter maps to ReadOnlyRootFilesystem policy in the Volumes and file systems pod security policies in the Kubernetes documentation.

Accessible with the following methods

Method	Description
GET_READONLYROOTFILESYSTEM()	Getter for READONLYROOTFILESYSTEM, with configurable default
ASK_READONLYROOTFILESYSTEM()	Getter for READONLYROOTFILESYSTEM w/ exceptions if field has
HAS_READONLYROOTFILESYSTEM()	Determine if READONLYROOTFILESYSTEM has a value

runAsNonRoot

When this parameter is specified, the container is run as a user with a uid other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps to RunAsUser and MustRunAsNonRoot policy in the Users and groups pod security policies in the Kubernetes documentation.

Accessible with the following methods

Method	Description
GET_RUNASNONROOT()	Getter for RUNASNONROOT, with configurable default
ASK_RUNASNONROOT()	Getter for RUNASNONROOT w/ exceptions if field has no value
HAS_RUNASNONROOT()	Determine if RUNASNONROOT has a value