mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-28 14:07:14 +00:00
Merge pull request #20721 from pweil-/disable-psp
Auto commit by PR queue bot
This commit is contained in:
k8s-merge-robot
commit
e83a0d1231
@ -2479,548 +2479,6 @@
|
|||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
{
|
|
||||||
"path": "/apis/extensions/v1beta1/podsecuritypolicies",
|
|
||||||
"description": "API at /apis/extensions/v1beta1",
|
|
||||||
"operations": [
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicyList",
|
|
||||||
"method": "GET",
|
|
||||||
"summary": "list or watch objects of kind PodSecurityPolicy",
|
|
||||||
"nickname": "listNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "labelSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "fieldSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "watch",
|
|
||||||
"description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "resourceVersion",
|
|
||||||
"description": "When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "integer",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "timeoutSeconds",
|
|
||||||
"description": "Timeout for the list/watch call.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "v1beta1.PodSecurityPolicyList"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"method": "POST",
|
|
||||||
"summary": "create a PodSecurityPolicy",
|
|
||||||
"nickname": "createNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"paramType": "body",
|
|
||||||
"name": "body",
|
|
||||||
"description": "",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "v1beta1.PodSecurityPolicy"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "unversioned.Status",
|
|
||||||
"method": "DELETE",
|
|
||||||
"summary": "delete collection of PodSecurityPolicy",
|
|
||||||
"nickname": "deletecollectionNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "labelSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "fieldSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "watch",
|
|
||||||
"description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "resourceVersion",
|
|
||||||
"description": "When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "integer",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "timeoutSeconds",
|
|
||||||
"description": "Timeout for the list/watch call.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "unversioned.Status"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"path": "/apis/extensions/v1beta1/watch/podsecuritypolicies",
|
|
||||||
"description": "API at /apis/extensions/v1beta1",
|
|
||||||
"operations": [
|
|
||||||
{
|
|
||||||
"type": "json.WatchEvent",
|
|
||||||
"method": "GET",
|
|
||||||
"summary": "watch individual changes to a list of PodSecurityPolicy",
|
|
||||||
"nickname": "watchNamespacedPodSecurityPolicyList",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "labelSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "fieldSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "watch",
|
|
||||||
"description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "resourceVersion",
|
|
||||||
"description": "When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "integer",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "timeoutSeconds",
|
|
||||||
"description": "Timeout for the list/watch call.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "json.WatchEvent"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"path": "/apis/extensions/v1beta1/podsecuritypolicies/{name}",
|
|
||||||
"description": "API at /apis/extensions/v1beta1",
|
|
||||||
"operations": [
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"method": "GET",
|
|
||||||
"summary": "read the specified PodSecurityPolicy",
|
|
||||||
"nickname": "readNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "export",
|
|
||||||
"description": "Should this value be exported. Export strips fields that a user can not specify.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "exact",
|
|
||||||
"description": "Should the export be exact. Exact export maintains cluster-specific fields like 'Namespace'",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "path",
|
|
||||||
"name": "name",
|
|
||||||
"description": "name of the PodSecurityPolicy",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "v1beta1.PodSecurityPolicy"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"method": "PUT",
|
|
||||||
"summary": "replace the specified PodSecurityPolicy",
|
|
||||||
"nickname": "replaceNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"paramType": "body",
|
|
||||||
"name": "body",
|
|
||||||
"description": "",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "path",
|
|
||||||
"name": "name",
|
|
||||||
"description": "name of the PodSecurityPolicy",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "v1beta1.PodSecurityPolicy"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1beta1.PodSecurityPolicy",
|
|
||||||
"method": "PATCH",
|
|
||||||
"summary": "partially update the specified PodSecurityPolicy",
|
|
||||||
"nickname": "patchNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "unversioned.Patch",
|
|
||||||
"paramType": "body",
|
|
||||||
"name": "body",
|
|
||||||
"description": "",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "path",
|
|
||||||
"name": "name",
|
|
||||||
"description": "name of the PodSecurityPolicy",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "v1beta1.PodSecurityPolicy"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"application/json-patch+json",
|
|
||||||
"application/merge-patch+json",
|
|
||||||
"application/strategic-merge-patch+json"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "unversioned.Status",
|
|
||||||
"method": "DELETE",
|
|
||||||
"summary": "delete a PodSecurityPolicy",
|
|
||||||
"nickname": "deleteNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "v1.DeleteOptions",
|
|
||||||
"paramType": "body",
|
|
||||||
"name": "body",
|
|
||||||
"description": "",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "path",
|
|
||||||
"name": "name",
|
|
||||||
"description": "name of the PodSecurityPolicy",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "unversioned.Status"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json",
|
|
||||||
"application/yaml"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"path": "/apis/extensions/v1beta1/watch/podsecuritypolicies/{name}",
|
|
||||||
"description": "API at /apis/extensions/v1beta1",
|
|
||||||
"operations": [
|
|
||||||
{
|
|
||||||
"type": "json.WatchEvent",
|
|
||||||
"method": "GET",
|
|
||||||
"summary": "watch changes to an object of kind PodSecurityPolicy",
|
|
||||||
"nickname": "watchNamespacedPodSecurityPolicy",
|
|
||||||
"parameters": [
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "pretty",
|
|
||||||
"description": "If 'true', then the output is pretty printed.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "labelSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "fieldSelector",
|
|
||||||
"description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "boolean",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "watch",
|
|
||||||
"description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "resourceVersion",
|
|
||||||
"description": "When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "integer",
|
|
||||||
"paramType": "query",
|
|
||||||
"name": "timeoutSeconds",
|
|
||||||
"description": "Timeout for the list/watch call.",
|
|
||||||
"required": false,
|
|
||||||
"allowMultiple": false
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "string",
|
|
||||||
"paramType": "path",
|
|
||||||
"name": "name",
|
|
||||||
"description": "name of the PodSecurityPolicy",
|
|
||||||
"required": true,
|
|
||||||
"allowMultiple": false
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"responseMessages": [
|
|
||||||
{
|
|
||||||
"code": 200,
|
|
||||||
"message": "OK",
|
|
||||||
"responseModel": "json.WatchEvent"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"produces": [
|
|
||||||
"application/json"
|
|
||||||
],
|
|
||||||
"consumes": [
|
|
||||||
"*/*"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
{
|
||||||
"path": "/apis/extensions/v1beta1/namespaces/{namespace}/replicasets",
|
"path": "/apis/extensions/v1beta1/namespaces/{namespace}/replicasets",
|
||||||
"description": "API at /apis/extensions/v1beta1",
|
"description": "API at /apis/extensions/v1beta1",
|
||||||
@ -5886,188 +5344,6 @@
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"v1beta1.PodSecurityPolicyList": {
|
|
||||||
"id": "v1beta1.PodSecurityPolicyList",
|
|
||||||
"description": "Pod Security Policy List is a list of PodSecurityPolicy objects.",
|
|
||||||
"required": [
|
|
||||||
"items"
|
|
||||||
],
|
|
||||||
"properties": {
|
|
||||||
"kind": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds"
|
|
||||||
},
|
|
||||||
"apiVersion": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources"
|
|
||||||
},
|
|
||||||
"metadata": {
|
|
||||||
"$ref": "unversioned.ListMeta",
|
|
||||||
"description": "Standard list metadata. More info: http://docs.k8s.io/api-conventions.md#metadata"
|
|
||||||
},
|
|
||||||
"items": {
|
|
||||||
"type": "array",
|
|
||||||
"items": {
|
|
||||||
"$ref": "v1beta1.PodSecurityPolicy"
|
|
||||||
},
|
|
||||||
"description": "Items is a list of schema objects."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.PodSecurityPolicy": {
|
|
||||||
"id": "v1beta1.PodSecurityPolicy",
|
|
||||||
"description": "Pod Security Policy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
|
|
||||||
"properties": {
|
|
||||||
"kind": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds"
|
|
||||||
},
|
|
||||||
"apiVersion": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources"
|
|
||||||
},
|
|
||||||
"metadata": {
|
|
||||||
"$ref": "v1.ObjectMeta",
|
|
||||||
"description": "Standard object's metadata. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata"
|
|
||||||
},
|
|
||||||
"spec": {
|
|
||||||
"$ref": "v1beta1.PodSecurityPolicySpec",
|
|
||||||
"description": "Spec defines the policy enforced."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.PodSecurityPolicySpec": {
|
|
||||||
"id": "v1beta1.PodSecurityPolicySpec",
|
|
||||||
"description": "Pod Security Policy Spec defines the policy enforced.",
|
|
||||||
"properties": {
|
|
||||||
"privileged": {
|
|
||||||
"type": "boolean",
|
|
||||||
"description": "privileged determines if a pod can request to be run as privileged."
|
|
||||||
},
|
|
||||||
"capabilities": {
|
|
||||||
"type": "array",
|
|
||||||
"items": {
|
|
||||||
"$ref": "v1.Capability"
|
|
||||||
},
|
|
||||||
"description": "capabilities is a list of capabilities that can be added."
|
|
||||||
},
|
|
||||||
"volumes": {
|
|
||||||
"type": "array",
|
|
||||||
"items": {
|
|
||||||
"$ref": "v1beta1.FSType"
|
|
||||||
},
|
|
||||||
"description": "volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used."
|
|
||||||
},
|
|
||||||
"hostNetwork": {
|
|
||||||
"type": "boolean",
|
|
||||||
"description": "hostNetwork determines if the policy allows the use of HostNetwork in the pod spec."
|
|
||||||
},
|
|
||||||
"hostPorts": {
|
|
||||||
"type": "array",
|
|
||||||
"items": {
|
|
||||||
"$ref": "v1beta1.HostPortRange"
|
|
||||||
},
|
|
||||||
"description": "hostPorts determines which host port ranges are allowed to be exposed."
|
|
||||||
},
|
|
||||||
"hostPID": {
|
|
||||||
"type": "boolean",
|
|
||||||
"description": "hostPID determines if the policy allows the use of HostPID in the pod spec."
|
|
||||||
},
|
|
||||||
"hostIPC": {
|
|
||||||
"type": "boolean",
|
|
||||||
"description": "hostIPC determines if the policy allows the use of HostIPC in the pod spec."
|
|
||||||
},
|
|
||||||
"seLinuxContext": {
|
|
||||||
"$ref": "v1beta1.SELinuxContextStrategyOptions",
|
|
||||||
"description": "seLinuxContext is the strategy that will dictate the allowable labels that may be set."
|
|
||||||
},
|
|
||||||
"runAsUser": {
|
|
||||||
"$ref": "v1beta1.RunAsUserStrategyOptions",
|
|
||||||
"description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.FSType": {
|
|
||||||
"id": "v1beta1.FSType",
|
|
||||||
"properties": {}
|
|
||||||
},
|
|
||||||
"v1beta1.HostPortRange": {
|
|
||||||
"id": "v1beta1.HostPortRange",
|
|
||||||
"description": "Host Port Range defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.",
|
|
||||||
"required": [
|
|
||||||
"min",
|
|
||||||
"max"
|
|
||||||
],
|
|
||||||
"properties": {
|
|
||||||
"min": {
|
|
||||||
"type": "integer",
|
|
||||||
"format": "int32",
|
|
||||||
"description": "min is the start of the range, inclusive."
|
|
||||||
},
|
|
||||||
"max": {
|
|
||||||
"type": "integer",
|
|
||||||
"format": "int32",
|
|
||||||
"description": "max is the end of the range, inclusive."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.SELinuxContextStrategyOptions": {
|
|
||||||
"id": "v1beta1.SELinuxContextStrategyOptions",
|
|
||||||
"description": "SELinux Context Strategy Options defines the strategy type and any options used to create the strategy.",
|
|
||||||
"required": [
|
|
||||||
"type"
|
|
||||||
],
|
|
||||||
"properties": {
|
|
||||||
"type": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "type is the strategy that will dictate the allowable labels that may be set."
|
|
||||||
},
|
|
||||||
"seLinuxOptions": {
|
|
||||||
"$ref": "v1.SELinuxOptions",
|
|
||||||
"description": "seLinuxOptions required to run as; required for MustRunAs More info: http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.RunAsUserStrategyOptions": {
|
|
||||||
"id": "v1beta1.RunAsUserStrategyOptions",
|
|
||||||
"description": "Run A sUser Strategy Options defines the strategy type and any options used to create the strategy.",
|
|
||||||
"required": [
|
|
||||||
"type"
|
|
||||||
],
|
|
||||||
"properties": {
|
|
||||||
"type": {
|
|
||||||
"type": "string",
|
|
||||||
"description": "type is the strategy that will dictate the allowable RunAsUser values that may be set."
|
|
||||||
},
|
|
||||||
"ranges": {
|
|
||||||
"type": "array",
|
|
||||||
"items": {
|
|
||||||
"$ref": "v1beta1.IDRange"
|
|
||||||
},
|
|
||||||
"description": "Ranges are the allowed ranges of uids that may be used."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.IDRange": {
|
|
||||||
"id": "v1beta1.IDRange",
|
|
||||||
"description": "ID Range provides a min/max of an allowed range of IDs.",
|
|
||||||
"required": [
|
|
||||||
"min",
|
|
||||||
"max"
|
|
||||||
],
|
|
||||||
"properties": {
|
|
||||||
"min": {
|
|
||||||
"type": "integer",
|
|
||||||
"format": "int64",
|
|
||||||
"description": "Min is the start of the range, inclusive."
|
|
||||||
},
|
|
||||||
"max": {
|
|
||||||
"type": "integer",
|
|
||||||
"format": "int64",
|
|
||||||
"description": "Max is the end of the range, inclusive."
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"v1beta1.ReplicaSetList": {
|
"v1beta1.ReplicaSetList": {
|
||||||
"id": "v1beta1.ReplicaSetList",
|
"id": "v1beta1.ReplicaSetList",
|
||||||
"description": "ReplicaSetList is a collection of ReplicaSets.",
|
"description": "ReplicaSetList is a collection of ReplicaSets.",
|
||||||
|
|||||||
@ -396,12 +396,6 @@ span.icon > [class^="icon-"], span.icon > [class*=" icon-"] { cursor: default; }
|
|||||||
<li>
|
<li>
|
||||||
<p><a href="#_v1beta1_replicasetlist">v1beta1.ReplicaSetList</a></p>
|
<p><a href="#_v1beta1_replicasetlist">v1beta1.ReplicaSetList</a></p>
|
||||||
</li>
|
</li>
|
||||||
<li>
|
|
||||||
<p><a href="#_v1beta1_podsecuritypolicy">v1beta1.PodSecurityPolicy</a></p>
|
|
||||||
</li>
|
|
||||||
<li>
|
|
||||||
<p><a href="#_v1beta1_podsecuritypolicylist">v1beta1.PodSecurityPolicyList</a></p>
|
|
||||||
</li>
|
|
||||||
</ul>
|
</ul>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
@ -470,10 +464,6 @@ span.icon > [class^="icon-"], span.icon > [class*=" icon-"] { cursor: default; }
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_fstype">v1beta1.FSType</h3>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_selinuxoptions">v1.SELinuxOptions</h3>
|
<h3 id="_v1_selinuxoptions">v1.SELinuxOptions</h3>
|
||||||
@ -611,47 +601,6 @@ span.icon > [class^="icon-"], span.icon > [class*=" icon-"] { cursor: default; }
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_selinuxcontextstrategyoptions">v1beta1.SELinuxContextStrategyOptions</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>SELinux Context Strategy Options defines the strategy type and any options used to create the strategy.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">type</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">type is the strategy that will dictate the allowable labels that may be set.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">seLinuxOptions</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">seLinuxOptions required to run as; required for MustRunAs More info: <a href="http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context">http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1_selinuxoptions">v1.SELinuxOptions</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_volumemount">v1.VolumeMount</h3>
|
<h3 id="_v1_volumemount">v1.VolumeMount</h3>
|
||||||
@ -1297,61 +1246,6 @@ Examples:<br>
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_podsecuritypolicylist">v1beta1.PodSecurityPolicyList</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>Pod Security Policy List is a list of PodSecurityPolicy objects.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">kind</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <a href="http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds">http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">apiVersion</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <a href="http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources">http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">metadata</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Standard list metadata. More info: <a href="http://docs.k8s.io/api-conventions.md#metadata">http://docs.k8s.io/api-conventions.md#metadata</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_unversioned_listmeta">unversioned.ListMeta</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">items</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Items is a list of schema objects.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_podsecuritypolicy">v1beta1.PodSecurityPolicy</a> array</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_tcpsocketaction">v1.TCPSocketAction</h3>
|
<h3 id="_v1_tcpsocketaction">v1.TCPSocketAction</h3>
|
||||||
@ -3079,47 +2973,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_hostportrange">v1beta1.HostPortRange</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>Host Port Range defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">min</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">min is the start of the range, inclusive.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">integer (int32)</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">max</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">max is the end of the range, inclusive.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">integer (int32)</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1beta1_labelselectorrequirement">v1beta1.LabelSelectorRequirement</h3>
|
<h3 id="_v1beta1_labelselectorrequirement">v1beta1.LabelSelectorRequirement</h3>
|
||||||
@ -3230,47 +3083,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_runasuserstrategyoptions">v1beta1.RunAsUserStrategyOptions</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>Run A sUser Strategy Options defines the strategy type and any options used to create the strategy.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">type</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">type is the strategy that will dictate the allowable RunAsUser values that may be set.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">ranges</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Ranges are the allowed ranges of uids that may be used.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_idrange">v1beta1.IDRange</a> array</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_envvar">v1.EnvVar</h3>
|
<h3 id="_v1_envvar">v1.EnvVar</h3>
|
||||||
@ -3706,96 +3518,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_podsecuritypolicyspec">v1beta1.PodSecurityPolicySpec</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>Pod Security Policy Spec defines the policy enforced.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">privileged</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">privileged determines if a pod can request to be run as privileged.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">boolean</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">capabilities</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">capabilities is a list of capabilities that can be added.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1_capability">v1.Capability</a> array</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">volumes</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">volumes is a white list of allowed volume plugins. Empty indicates that all plugins may be used.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_fstype">v1beta1.FSType</a> array</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostNetwork</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">boolean</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostPorts</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostPorts determines which host port ranges are allowed to be exposed.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_hostportrange">v1beta1.HostPortRange</a> array</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostPID</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostPID determines if the policy allows the use of HostPID in the pod spec.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">boolean</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostIPC</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">hostIPC determines if the policy allows the use of HostIPC in the pod spec.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">boolean</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">seLinuxContext</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">seLinuxContext is the strategy that will dictate the allowable labels that may be set.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_selinuxcontextstrategyoptions">v1beta1.SELinuxContextStrategyOptions</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">runAsUser</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_runasuserstrategyoptions">v1beta1.RunAsUserStrategyOptions</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_volume">v1.Volume</h3>
|
<h3 id="_v1_volume">v1.Volume</h3>
|
||||||
@ -4139,61 +3861,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_podsecuritypolicy">v1beta1.PodSecurityPolicy</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>Pod Security Policy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">kind</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <a href="http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds">http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">apiVersion</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <a href="http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources">http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">string</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">metadata</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Standard object’s metadata. More info: <a href="http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata">http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1_objectmeta">v1.ObjectMeta</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">spec</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Spec defines the policy enforced.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock"><a href="#_v1beta1_podsecuritypolicyspec">v1beta1.PodSecurityPolicySpec</a></p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1_capability">v1.Capability</h3>
|
<h3 id="_v1_capability">v1.Capability</h3>
|
||||||
@ -4516,47 +4183,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
</div>
|
|
||||||
<div class="sect2">
|
|
||||||
<h3 id="_v1beta1_idrange">v1beta1.IDRange</h3>
|
|
||||||
<div class="paragraph">
|
|
||||||
<p>ID Range provides a min/max of an allowed range of IDs.</p>
|
|
||||||
</div>
|
|
||||||
<table class="tableblock frame-all grid-all" style="width:100%; ">
|
|
||||||
<colgroup>
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
<col style="width:20%;">
|
|
||||||
</colgroup>
|
|
||||||
<thead>
|
|
||||||
<tr>
|
|
||||||
<th class="tableblock halign-left valign-top">Name</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Description</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Required</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Schema</th>
|
|
||||||
<th class="tableblock halign-left valign-top">Default</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">min</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Min is the start of the range, inclusive.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">integer (int64)</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">max</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">Max is the end of the range, inclusive.</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">true</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"><p class="tableblock">integer (int64)</p></td>
|
|
||||||
<td class="tableblock halign-left valign-top"></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
<div class="sect2">
|
<div class="sect2">
|
||||||
<h3 id="_v1beta1_horizontalpodautoscalerlist">v1beta1.HorizontalPodAutoscalerList</h3>
|
<h3 id="_v1beta1_horizontalpodautoscalerlist">v1beta1.HorizontalPodAutoscalerList</h3>
|
||||||
@ -5146,7 +4772,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
|
|||||||
</div>
|
</div>
|
||||||
<div id="footer">
|
<div id="footer">
|
||||||
<div id="footer-text">
|
<div id="footer-text">
|
||||||
Last updated 2016-02-06 11:42:34 UTC
|
Last updated 2016-02-08 13:55:53 UTC
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
</body>
|
</body>
|
||||||
|
|||||||
File diff suppressed because it is too large
Load Diff
@ -938,7 +938,7 @@ type PodSecurityPolicy struct {
|
|||||||
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
||||||
v1.ObjectMeta `json:"metadata,omitempty"`
|
v1.ObjectMeta `json:"metadata,omitempty"`
|
||||||
|
|
||||||
// Spec defines the policy enforced.
|
// spec defines the policy enforced.
|
||||||
Spec PodSecurityPolicySpec `json:"spec,omitempty"`
|
Spec PodSecurityPolicySpec `json:"spec,omitempty"`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -497,7 +497,7 @@ func (NodeUtilization) SwaggerDoc() map[string]string {
|
|||||||
var map_PodSecurityPolicy = map[string]string{
|
var map_PodSecurityPolicy = map[string]string{
|
||||||
"": "Pod Security Policy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
|
"": "Pod Security Policy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
|
||||||
"metadata": "Standard object's metadata. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata",
|
"metadata": "Standard object's metadata. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata",
|
||||||
"spec": "Spec defines the policy enforced.",
|
"spec": "spec defines the policy enforced.",
|
||||||
}
|
}
|
||||||
|
|
||||||
func (PodSecurityPolicy) SwaggerDoc() map[string]string {
|
func (PodSecurityPolicy) SwaggerDoc() map[string]string {
|
||||||
|
|||||||
@ -574,7 +574,7 @@ func (m *Master) thirdpartyapi(group, kind, version string) *apiserver.APIGroupV
|
|||||||
// getExperimentalResources returns the resources for extenstions api
|
// getExperimentalResources returns the resources for extenstions api
|
||||||
func (m *Master) getExtensionResources(c *Config) map[string]rest.Storage {
|
func (m *Master) getExtensionResources(c *Config) map[string]rest.Storage {
|
||||||
// All resources except these are disabled by default.
|
// All resources except these are disabled by default.
|
||||||
enabledResources := sets.NewString("horizontalpodautoscalers", "ingresses", "jobs", "podsecuritypolicy", "replicasets")
|
enabledResources := sets.NewString("horizontalpodautoscalers", "ingresses", "jobs", "replicasets")
|
||||||
resourceOverrides := m.ApiGroupVersionOverrides["extensions/v1beta1"].ResourceOverrides
|
resourceOverrides := m.ApiGroupVersionOverrides["extensions/v1beta1"].ResourceOverrides
|
||||||
isEnabled := func(resource string) bool {
|
isEnabled := func(resource string) bool {
|
||||||
// Check if the resource has been overriden.
|
// Check if the resource has been overriden.
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user