Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.ECS.Types.KernelCapabilities

Description

Synopsis

data KernelCapabilities = KernelCapabilities' {
- drop :: Maybe [Text]
- add :: Maybe [Text]
}
newKernelCapabilities :: KernelCapabilities
kernelCapabilities_drop :: Lens' KernelCapabilities (Maybe [Text])
kernelCapabilities_add :: Lens' KernelCapabilities (Maybe [Text])

Documentation

data KernelCapabilities Source #

The Linux capabilities for the container that are added to or dropped from the default configuration provided by Docker. For more information on the default capabilities and the non-default available capabilities, see Runtime privilege and Linux capabilities in the Docker run reference. For more detailed information on these Linux capabilities, see the capabilities(7) Linux manual page.

See: newKernelCapabilities smart constructor.

Constructors

KernelCapabilities'

Fields

drop :: Maybe [Text]
The Linux capabilities for the container that have been removed from the default configuration provided by Docker. This parameter maps to CapDrop in the Create a container section of the Docker Remote API and the --cap-drop option to docker run.
Valid values: "ALL" | "AUDIT_CONTROL" | "AUDIT_WRITE" | "BLOCK_SUSPEND" | "CHOWN" | "DAC_OVERRIDE" | "DAC_READ_SEARCH" | "FOWNER" | "FSETID" | "IPC_LOCK" | "IPC_OWNER" | "KILL" | "LEASE" | "LINUX_IMMUTABLE" | "MAC_ADMIN" | "MAC_OVERRIDE" | "MKNOD" | "NET_ADMIN" | "NET_BIND_SERVICE" | "NET_BROADCAST" | "NET_RAW" | "SETFCAP" | "SETGID" | "SETPCAP" | "SETUID" | "SYS_ADMIN" | "SYS_BOOT" | "SYS_CHROOT" | "SYS_MODULE" | "SYS_NICE" | "SYS_PACCT" | "SYS_PTRACE" | "SYS_RAWIO" | "SYS_RESOURCE" | "SYS_TIME" | "SYS_TTY_CONFIG" | "SYSLOG" | "WAKE_ALARM"
add :: Maybe [Text]
The Linux capabilities for the container that have been added to the default configuration provided by Docker. This parameter maps to CapAdd in the Create a container section of the Docker Remote API and the --cap-add option to docker run.
Tasks launched on Fargate only support adding the SYS_PTRACE kernel capability.
Valid values: "ALL" | "AUDIT_CONTROL" | "AUDIT_WRITE" | "BLOCK_SUSPEND" | "CHOWN" | "DAC_OVERRIDE" | "DAC_READ_SEARCH" | "FOWNER" | "FSETID" | "IPC_LOCK" | "IPC_OWNER" | "KILL" | "LEASE" | "LINUX_IMMUTABLE" | "MAC_ADMIN" | "MAC_OVERRIDE" | "MKNOD" | "NET_ADMIN" | "NET_BIND_SERVICE" | "NET_BROADCAST" | "NET_RAW" | "SETFCAP" | "SETGID" | "SETPCAP" | "SETUID" | "SYS_ADMIN" | "SYS_BOOT" | "SYS_CHROOT" | "SYS_MODULE" | "SYS_NICE" | "SYS_PACCT" | "SYS_PTRACE" | "SYS_RAWIO" | "SYS_RESOURCE" | "SYS_TIME" | "SYS_TTY_CONFIG" | "SYSLOG" | "WAKE_ALARM"

Instances

Instances details

Eq KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods (==) :: KernelCapabilities -> KernelCapabilities -> Bool # (/=) :: KernelCapabilities -> KernelCapabilities -> Bool #
Read KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods readsPrec :: Int -> ReadS KernelCapabilities # readList :: ReadS [KernelCapabilities] # readPrec :: ReadPrec KernelCapabilities # readListPrec :: ReadPrec [KernelCapabilities] #
Show KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods showsPrec :: Int -> KernelCapabilities -> ShowS # show :: KernelCapabilities -> String # showList :: [KernelCapabilities] -> ShowS #
Generic KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Associated Types type Rep KernelCapabilities :: Type -> Type # Methods from :: KernelCapabilities -> Rep KernelCapabilities x # to :: Rep KernelCapabilities x -> KernelCapabilities #
NFData KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods rnf :: KernelCapabilities -> () #
Hashable KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods hashWithSalt :: Int -> KernelCapabilities -> Int # hash :: KernelCapabilities -> Int #
ToJSON KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods toJSON :: KernelCapabilities -> Value # toEncoding :: KernelCapabilities -> Encoding # toJSONList :: [KernelCapabilities] -> Value # toEncodingList :: [KernelCapabilities] -> Encoding #
FromJSON KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities Methods parseJSON :: Value -> Parser KernelCapabilities # parseJSONList :: Value -> Parser [KernelCapabilities] #
type Rep KernelCapabilities Source #
Instance details Defined in Amazonka.ECS.Types.KernelCapabilities type Rep KernelCapabilities = D1 ('MetaData "KernelCapabilities" "Amazonka.ECS.Types.KernelCapabilities" "libZSservicesZSamazonka-ecsZSamazonka-ecs" 'False) (C1 ('MetaCons "KernelCapabilities'" 'PrefixI 'True) (S1 ('MetaSel ('Just "drop") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :*: S1 ('MetaSel ('Just "add") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text]))))

newKernelCapabilities :: KernelCapabilities Source #

Create a value of KernelCapabilities with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:drop:KernelCapabilities', kernelCapabilities_drop - The Linux capabilities for the container that have been removed from the default configuration provided by Docker. This parameter maps to CapDrop in the Create a container section of the Docker Remote API and the --cap-drop option to docker run.

$sel:add:KernelCapabilities', kernelCapabilities_add - The Linux capabilities for the container that have been added to the default configuration provided by Docker. This parameter maps to CapAdd in the Create a container section of the Docker Remote API and the --cap-add option to docker run.

Tasks launched on Fargate only support adding the SYS_PTRACE kernel capability.

kernelCapabilities_drop :: Lens' KernelCapabilities (Maybe [Text]) Source #

The Linux capabilities for the container that have been removed from the default configuration provided by Docker. This parameter maps to CapDrop in the Create a container section of the Docker Remote API and the --cap-drop option to docker run.

kernelCapabilities_add :: Lens' KernelCapabilities (Maybe [Text]) Source #

The Linux capabilities for the container that have been added to the default configuration provided by Docker. This parameter maps to CapAdd in the Create a container section of the Docker Remote API and the --cap-add option to docker run.

Tasks launched on Fargate only support adding the SYS_PTRACE kernel capability.