mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-08-23 22:26:49 +00:00
Jian Zhuandgemini
f989a37e1a
* Upgrade golang to 1.24 Signed-off-by: zhujian <jiazhu@redhat.com> * Fix lint errors Co-authored-by: gemini <gemini@google.com> Signed-off-by: zhujian <jiazhu@redhat.com> * upgrade sdk-go to latest Signed-off-by: zhujian <jiazhu@redhat.com> --------- Signed-off-by: zhujian <jiazhu@redhat.com> Co-authored-by: gemini <gemini@google.com>
22 lines
1.2 KiB
Go
22 lines
1.2 KiB
Go
package v1
|
|
|
|
const (
|
|
UIDRangeAnnotation = "openshift.io/sa.scc.uid-range"
|
|
// SupplementalGroupsAnnotation contains a comma delimited list of allocated supplemental groups
|
|
// for the namespace. Groups are in the form of a Block which supports {start}/{length} or {start}-{end}
|
|
SupplementalGroupsAnnotation = "openshift.io/sa.scc.supplemental-groups"
|
|
MCSAnnotation = "openshift.io/sa.scc.mcs"
|
|
ValidatedSCCAnnotation = "openshift.io/scc"
|
|
// This annotation pins required SCCs for core OpenShift workloads to prevent preemption of custom SCCs.
|
|
// It is being used in the SCC admission plugin.
|
|
RequiredSCCAnnotation = "openshift.io/required-scc"
|
|
|
|
// MinimallySufficientPodSecurityStandard indicates the PodSecurityStandard that matched the SCCs available to the users of the namespace.
|
|
MinimallySufficientPodSecurityStandard = "security.openshift.io/MinimallySufficientPodSecurityStandard"
|
|
|
|
// ValidatedSCCSubjectTypeAnnotation indicates the subject type that allowed the
|
|
// SCC admission. This can be used by controllers to detect potential issues
|
|
// between user-driven SCC usage and the ServiceAccount-driven SCC usage.
|
|
ValidatedSCCSubjectTypeAnnotation = "security.openshift.io/validated-scc-subject-type"
|
|
)
|