Revert "Merge pull request #43946 from jhorwit2/jah/host-path-psp"

api/openapi-spec/swagger.json

@@ -54399,13 +54399,6 @@
        "type": "string"
       }
      },
-     "allowedHostPaths": {
-      "description": "AllowedHostPaths is a white list of allowed host path prefixes. Empty indicates that all host paths may be used.",
-      "type": "array",
-      "items": {
-       "type": "string"
-      }
-     },
      "defaultAddCapabilities": {
       "description": "DefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capabiility in both DefaultAddCapabilities and RequiredDropCapabilities.",
       "type": "array",

api/swagger-spec/extensions_v1beta1.json

@@ -10029,13 +10029,6 @@
      "readOnlyRootFilesystem": {
       "type": "boolean",
       "description": "ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to."
-     },
-     "allowedHostPaths": {
-      "type": "array",
-      "items": {
-       "type": "string"
-      },
-      "description": "AllowedHostPaths is a white list of allowed host path prefixes. Empty indicates that all host paths may be used."
      }
     }
    },

docs/api-reference/extensions/v1beta1/definitions.html

@@ -7690,13 +7690,6 @@ <h3 id="_v1beta1_podsecuritypolicyspec">v1beta1.PodSecurityPolicySpec</h3>
 <td class="tableblock halign-left valign-top"><p class="tableblock">boolean</p></td>
 <td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
 </tr>
-<tr>
-<td class="tableblock halign-left valign-top"><p class="tableblock">allowedHostPaths</p></td>
-<td class="tableblock halign-left valign-top"><p class="tableblock">AllowedHostPaths is a white list of allowed host path prefixes. Empty indicates that all host paths may be used.</p></td>
-<td class="tableblock halign-left valign-top"><p class="tableblock">false</p></td>
-<td class="tableblock halign-left valign-top"><p class="tableblock">string array</p></td>
-<td class="tableblock halign-left valign-top"></td>
-</tr>
 </tbody>
 </table>
 

pkg/apis/extensions/types.go

@@ -898,10 +898,6 @@ type PodSecurityPolicySpec struct {
 	// will not be forced to.
 	// +optional
 	ReadOnlyRootFilesystem bool
-	// AllowedHostPaths is a white list of allowed host path prefixes. Empty indicates that all
-	// host paths may be used.
-	// +optional
-	AllowedHostPaths []string
 }
 
 // HostPortRange defines a range of host ports that will be enabled by a policy