Class LinuxContainerInstanceSecurityContext

Security context for all containers in a container instance.

Inheritance

object

ContainerInstanceSecurityContext

LinuxContainerInstanceSecurityContext

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: Oci.ContainerinstancesService.Models

Assembly: OCI.DotNetSDK.Containerinstances.dll

Syntax

public class LinuxContainerInstanceSecurityContext : ContainerInstanceSecurityContext

Properties

FsGroup

Declaration

[JsonProperty(PropertyName = "fsGroup")]
public int? FsGroup { get; set; }

Property Value

Type	Description
int?	A special supplemental group that applies to all containers in the container instance. Some volume types allow the container instance to change ownership of the volume. The owning GID will be the fsGroup, the setgid bit will be set (new files will be owned by the fsGroup), and the permission bits are OR'd with rw-rw----. If unset, the container instance will not modify the ownership and permissions of volumes.

Type

Description

int?

A special supplemental group that applies to all containers in the container instance. Some volume types allow the container instance to change ownership of the volume. The owning GID will be the fsGroup, the setgid bit will be set (new files will be owned by the fsGroup), and the permission bits are OR'd with rw-rw----. If unset, the container instance will not modify the ownership and permissions of volumes.

FsGroupChangePolicy

Declaration

[JsonProperty(PropertyName = "fsGroupChangePolicy")]
[JsonConverter(typeof(ResponseEnumConverter))]
public ContainerFsGroupChangePolicyType? FsGroupChangePolicy { get; set; }

Property Value

Type	Description
ContainerFsGroupChangePolicyType?	Defines behavior of changing ownership and permission of the volume before being exposed inside the containers. This only applies to volumes which support fsGroup ownership and permissions, and will have no effect on ephemeral volumes. ON_ROOT_MISMATCH only changes permissions and ownership if the permission and ownership of the root directory does not match the expected permissions and ownership of the volume. This can improve container instance start times. ALWAYS changes permission and ownership of the volume when it is mounted. If unset, ALWAYS is used.

Type

Description

ContainerFsGroupChangePolicyType?

Defines behavior of changing ownership and permission of the volume before being exposed inside the containers. This only applies to volumes which support fsGroup ownership and permissions, and will have no effect on ephemeral volumes. ON_ROOT_MISMATCH only changes permissions and ownership if the permission and ownership of the root directory does not match the expected permissions and ownership of the volume. This can improve container instance start times. ALWAYS changes permission and ownership of the volume when it is mounted. If unset, ALWAYS is used.