Skip to content
This repository has been archived by the owner on Jan 9, 2023. It is now read-only.
Permalink
master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Go to file
 
 
Cannot retrieve contributors at this time
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: restricted
labels:
addonmanager.kubernetes.io/mode: Reconcile
spec:
hostPID: false
hostIPC: false
hostNetwork: false
privileged: false
allowPrivilegeEscalation: true
readOnlyRootFilesystem: false
volumes:
- configMap
- emptyDir
- projected
- secret
- downwardAPI
- persistentVolumeClaim
fsGroup:
rule: RunAsAny
runAsUser:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
seLinux:
rule: RunAsAny
---
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: privileged
labels:
addonmanager.kubernetes.io/mode: Reconcile
annotations:
seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
spec:
hostPID: true
hostIPC: true
hostNetwork: true
privileged: true
allowPrivilegeEscalation: true
readOnlyRootFilesystem: false
hostPorts:
- min: 0
max: 65535
allowedCapabilities:
- '*'
volumes:
- '*'
fsGroup:
rule: RunAsAny
runAsUser:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
seLinux:
rule: RunAsAny