config

type ContainerConfig struct {
	// UnixSocketGroup sets the group that should own the unix socket used for
	// communication with the plugin. Can be a name or numeric gid.
	//
	// This is the least invasive option if you are not using a rootless container
	// runtime. Alternatively, set User to a user name or UID:GID pair matching
	// the client process.
	UnixSocketGroup string

	// container.Config options
	User           string            // User name or uid:gid to run the container as.
	Image          string            // Image to run (without the tag), e.g. hashicorp/vault-plugin-auth-jwt
	Tag            string            // Tag of the image to run, e.g. 0.16.0
	SHA256         string            // SHA256 digest of the image. Can be a plain sha256 or prefixed with sha256:
	DisableNetwork bool              // Whether to disable the networking stack.
	Labels         map[string]string // Arbitrary metadata to facilitate querying containers.

	// container.HostConfig options
	Runtime      string // OCI runtime.
	CgroupParent string // Parent Cgroup for the container
	NanoCpus     int64  // CPU quota in billionths of a CPU core
	Memory       int64  // Memory quota in bytes

	// network.NetworkConfig options
	EndpointsConfig map[string]*network.EndpointSettings // Endpoint configs for each connecting network
}