whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add runasgroup in psp (#10076)

Browse Source
This commit is contained in:
krmayankk
2018-09-24 21:13:32 -07:00
committed by k8s-ci-robot
parent 0d8929da3d
commit 0b80570fdd
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/concepts/policy/pod-security-policy.md
+11
View File
@@ -491,6 +491,17 @@ image. No default provided. Setting `allowPrivilegeEscalation=false` is strongly
recommended with this strategy. recommended with this strategy.
- *RunAsAny* - No default provided. Allows any `runAsUser` to be specified. - *RunAsAny* - No default provided. Allows any `runAsUser` to be specified.
**RunAsGroup** - Controls the what primary group ID containers run as.
- *MustRunAs* - Requires at least one `range` to be specified. Uses the
minimum value of the first range as the default. Validates against all ranges.
- *MustRunAsNonRoot* - Requires that the pod be submitted with a non-zero
`runAsUser` or have the `USER` directive defined (using a numeric GID) in the
image. No default provided. Setting `allowPrivilegeEscalation=false` is strongly
recommended with this strategy.
- *RunAsAny* - No default provided. Allows any `runAsGroup` to be specified.
**SupplementalGroups** - Controls which group IDs containers add. **SupplementalGroups** - Controls which group IDs containers add.
- *MustRunAs* - Requires at least one `range` to be specified. Uses the - *MustRunAs* - Requires at least one `range` to be specified. Uses the