“Checks” list

The checks are some sort of plugin to leash-server. They permit to verify/filter the access to one or more resources.

check name Description
Allow Authorize the request inconditionnally
Deny Deny the request inconditionnally
ReadOnly Allow only read-only actions
BindMount Restrict bind mounts
ContainerName Restrict by container name
ImageName Restrict image name
VolumeName Restrict volume name
Privileged Check the privileged flag
User Restrict user

Note

More checks to come. See the related issues in our repository.