Package io.strimzi.plugin.security.profiles

package io.strimzi.plugin.security.profiles

This package provides interfaces for the pluggable PodSecurityProviders which are used to configure the Pod and container security profiles. Strimzi provides two built-in providers for the baseline and restricted Kubernetes security profiles. In addition, users can provide their own implementations by implementing the PodSecurityProvider interface, packaging it into a JAR and adding the JAR to the Strimzi Cluster Operator image. The pluggable PodSecurityProvider mechanism was introduced in Strimzi 0.31 based on the proposal https://github.com/strimzi/proposals/blob/main/037-pluggable-pod-security-profiles.md

Since:

0.31.0

Related Packages

Package	Description
io.strimzi.plugin.security.profiles.impl	Provides the built-in implementations of the PodSecurityProvider plugins: - BaselinePodSecurityProvider which is the default implementation and provides security contexts which match the baseline Kubernetes security profile - RestrictedPodSecurityProvider which is an optional implementation and provides security contexts which match the restricted Kubernetes security profile

Interfaces

Class	Description
ContainerSecurityProviderContext	Interface which provides the context which can be used to generate the (container) security context
PodSecurityProvider	Interface describing the Pod Security Provider.
PodSecurityProviderContext	Interface which provides the context which can be used to generate the Pod security context