Clarify PSP/PV interaction (#15756)

This commit is contained in:
Jordan Liggitt
2019-08-08 20:19:27 -04:00
committed by Kubernetes Prow Robot
parent 4518c983d2
commit 1830e56fa2
@@ -420,6 +420,11 @@ The **recommended minimum set** of allowed volumes for new PSPs are:
- secret
- projected
{{< warning >}}
PodSecurityPolicy does not limit the types of `PersistentVolume` objects that may be referenced by a `PersistentVolumeClaim`.
Only trusted users should be granted permission to create `PersistentVolume` objects.
{{< /warning >}}
**FSGroup** - Controls the supplemental group applied to some volumes.
- *MustRunAs* - Requires at least one `range` to be specified. Uses the