github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-04 18:00:08 +00:00
Code Issues Projects Releases Wiki Activity

update PSPs to allow projected volumes

Browse Source
This commit is contained in:
Mike Danese 2018-11-02 13:25:41 -07:00
parent cde4c9ebe1
commit 98c468de8d
4 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cluster/addons/fluentd-gcp/podsecuritypolicies/event-exporter-psp.yaml
View File

@ -19,6 +19,7 @@ spec:
volumes: volumes:
- 'hostPath' - 'hostPath'
- 'secret' - 'secret'
- 'projected'
# TODO: This only needs a hostPath to read /etc/ssl/certs, # TODO: This only needs a hostPath to read /etc/ssl/certs,
# but it should be able to just include these in the image. # but it should be able to just include these in the image.
allowedHostPaths: allowedHostPaths:

1
cluster/addons/fluentd-gcp/podsecuritypolicies/fluentd-gcp-psp.yaml
View File

@ -20,6 +20,7 @@ spec:
- 'configMap' - 'configMap'
- 'hostPath' - 'hostPath'
- 'secret' - 'secret'
- 'projected'
allowedHostPaths: allowedHostPaths:
- pathPrefix: /var/log - pathPrefix: /var/log
- pathPrefix: /var/lib/docker/containers - pathPrefix: /var/lib/docker/containers

1
cluster/gce/addons/podsecuritypolicies/persistent-volume-binder.yaml
View File

@ -15,6 +15,7 @@ spec:
volumes: volumes:
- 'nfs' - 'nfs'
- 'secret' # Required for service account credentials. - 'secret' # Required for service account credentials.
- 'projected'
hostNetwork: false hostNetwork: false
hostIPC: false hostIPC: false
hostPID: false hostPID: false

1
cluster/gce/addons/podsecuritypolicies/unprivileged-addon.yaml
View File

@ -39,6 +39,7 @@ spec:
- 'emptyDir' - 'emptyDir'
- 'configMap' - 'configMap'
- 'secret' - 'secret'
- 'projected'
hostNetwork: false hostNetwork: false
hostIPC: false hostIPC: false
hostPID: false hostPID: false