github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Clean unused code in pkg/securitycontext/util.go

Browse Source
This commit is contained in:
WanLinghao
2019-02-11 10:21:37 +08:00
parent a1cc48bf59
commit e9edbf1d52
2 changed files with 0 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
pkg/securitycontext/util.go
View File

@@ -17,9 +17,6 @@ limitations under the License.
package securitycontext
import (
"fmt"
"strings"
"k8s.io/api/core/v1"
)
@@ -47,26 +44,6 @@ func HasCapabilitiesRequest(container *v1.Container) bool {
return len(container.SecurityContext.Capabilities.Add) > 0 || len(container.SecurityContext.Capabilities.Drop) > 0
}
const expectedSELinuxFields = 4
// ParseSELinuxOptions parses a string containing a full SELinux context
// (user, role, type, and level) into an SELinuxOptions object. If the
// context is malformed, an error is returned.
func ParseSELinuxOptions(context string) (*v1.SELinuxOptions, error) {
fields := strings.SplitN(context, ":", expectedSELinuxFields)
if len(fields) != expectedSELinuxFields {
return nil, fmt.Errorf("expected %v fields in selinux; got %v (context: %v)", expectedSELinuxFields, len(fields), context)
}
return &v1.SELinuxOptions{
User: fields[0],
Role: fields[1],
Type: fields[2],
Level: fields[3],
}, nil
}
func DetermineEffectiveSecurityContext(pod *v1.Pod, container *v1.Container) *v1.SecurityContext {
effectiveSc := securityContextFromPodSecurityContext(pod)
containerSc := container.SecurityContext