Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.

Package policy is for any kind of policy object.

Kind takes an unqualified kind and returns a Group qualified GroupKind.

Resource takes an unqualified resource and returns a Group qualified GroupResource.

FSGroupStrategyMayRunAs means that container does not need to have FSGroup of X applied.

FSGroupStrategyMustRunAs means that container must have FSGroup of X applied.

FSGroupStrategyRunAsAny means that container may make requests for any FSGroup labels.

GroupName is the group name use in this package.

RunAsGroupStrategyMayRunAs means that container does not need to run with a particular gid.

RunAsGroupStrategyMustRunAs means that container must run as a particular gid.

RunAsGroupStrategyRunAsAny means that container may make requests for any gid.

RunAsUserStrategyMustRunAs means that container must run as a particular uid.

RunAsUserStrategyMustRunAsNonRoot means that container must run as a non-root uid.

RunAsUserStrategyRunAsAny means that container may make requests for any uid.

SELinuxStrategyMustRunAs means that container must have SELinux labels of X applied.

SELinuxStrategyRunAsAny means that container may make requests for any SELinux context labels.

SupplementalGroupsStrategyMayRunAs means that container does not need to run with a particular gid.

SupplementalGroupsStrategyMustRunAs means that container must run as a particular gid.

SupplementalGroupsStrategyRunAsAny means that container may make requests for any gid.

AllowAllCapabilities can be used as a value for the PodSecurityPolicy.AllowAllCapabilities field and means that any capabilities are allowed to be requested.

SchemeGroupVersion is group version used to register these objects.

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use.

Eviction evicts a pod from its node subject to certain policies and safety constraints.

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.

IDRange provides a min/max of an allowed range of IDs.

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods.

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget.

PodSecurityPolicy governs the ability to make requests that affect the SecurityContext that will be applied to a pod and container.

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

PodSecurityPolicySpec defines the policy enforced.

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

FSGroupStrategyType denotes strategy types for generating FSGroup values for a SecurityContext.

FSType gives strong typing to different file systems that are used by volumes.

RunAsGroupStrategy denotes strategy types for generating RunAsGroup values for a SecurityContext.

RunAsUserStrategy denotes strategy types for generating RunAsUser values for a SecurityContext.

SELinuxStrategy denotes strategy types for generating SELinux options for a Security.

SupplementalGroupsStrategyType denotes strategy types for determining valid supplemental groups for a SecurityContext.