@@ -22,39 +22,39 @@ const (
22
22
// Profile represents a permission profile for a container
23
23
type Profile struct {
24
24
// Name is the name of the profile
25
- Name string `json:"name,omitempty"`
25
+ Name string `json:"name,omitempty" yaml:"name,omitempty" `
26
26
27
27
// Read is a list of mount declarations that the container can read from
28
28
// These can be in the following formats:
29
29
// - A single path: The same path will be mounted from host to container
30
30
// - host-path:container-path: Different paths for host and container
31
31
// - resource-uri:container-path: Mount a resource identified by URI to a container path
32
- Read []MountDeclaration `json:"read,omitempty"`
32
+ Read []MountDeclaration `json:"read,omitempty" yaml:"read,omitempty" `
33
33
34
34
// Write is a list of mount declarations that the container can write to
35
35
// These follow the same format as Read mounts but with write permissions
36
- Write []MountDeclaration `json:"write,omitempty"`
36
+ Write []MountDeclaration `json:"write,omitempty" yaml:"write,omitempty" `
37
37
38
38
// Network defines network permissions
39
- Network * NetworkPermissions `json:"network,omitempty"`
39
+ Network * NetworkPermissions `json:"network,omitempty" yaml:"network,omitempty" `
40
40
}
41
41
42
42
// NetworkPermissions defines network permissions for a container
43
43
type NetworkPermissions struct {
44
44
// Outbound defines outbound network permissions
45
- Outbound * OutboundNetworkPermissions `json:"outbound,omitempty"`
45
+ Outbound * OutboundNetworkPermissions `json:"outbound,omitempty" yaml:"outbound,omitempty" `
46
46
}
47
47
48
48
// OutboundNetworkPermissions defines outbound network permissions
49
49
type OutboundNetworkPermissions struct {
50
50
// InsecureAllowAll allows all outbound network connections
51
- InsecureAllowAll bool `json:"insecure_allow_all,omitempty"`
51
+ InsecureAllowAll bool `json:"insecure_allow_all,omitempty" yaml:"insecure_allow_all,omitempty" `
52
52
53
53
// AllowHost is a list of allowed hosts
54
- AllowHost []string `json:"allow_host,omitempty"`
54
+ AllowHost []string `json:"allow_host,omitempty" yaml:"allow_host,omitempty" `
55
55
56
56
// AllowPort is a list of allowed ports
57
- AllowPort []int `json:"allow_port,omitempty"`
57
+ AllowPort []int `json:"allow_port,omitempty" yaml:"allow_port,omitempty" `
58
58
}
59
59
60
60
// NewProfile creates a new permission profile
0 commit comments