AddNoNewPrivileges returns if we should add the no_new_privs option.

HasCapabilitiesRequest returns true if Adds or Drops are defined in the security context capabilities, taking into account nils.

HasPrivilegedRequest returns the value of SecurityContext.Privileged, taking into account the possibility of nils.

HasRootRunAsUser returns true if the run as user is set and it is set to 0.

HasNonRootUID returns true if the runAsUser is set and is greater than 0.

HasRunAsUser determines if the sc's runAsUser field is set.

NewPodSecurityContextAccessor returns an accessor for the given pod security context.

NewPodSecurityContextMutator returns a mutator for the given pod security context.

ParseSELinuxOptions parses a string containing a full SELinux context (user, role, type, and level) into an SELinuxOptions object.

ValidInternalSecurityContextWithContainerDefaults creates a valid security context provider based on empty container defaults.

ValidSecurityContextWithContainerDefaults creates a valid security context provider based on empty container defaults.

PodSecurityContextAccessor allows reading the values of a PodSecurityContext object.

PodSecurityContextMutator allows reading and writing the values of a PodSecurityContext object.