From 1830e56fa22e152fc863109e8d1062680e025a66 Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Thu, 8 Aug 2019 20:19:27 -0400 Subject: [PATCH] Clarify PSP/PV interaction (#15756) --- content/en/docs/concepts/policy/pod-security-policy.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/content/en/docs/concepts/policy/pod-security-policy.md b/content/en/docs/concepts/policy/pod-security-policy.md index 086d5c9d5d..8c22d902f2 100644 --- a/content/en/docs/concepts/policy/pod-security-policy.md +++ b/content/en/docs/concepts/policy/pod-security-policy.md @@ -420,6 +420,11 @@ The **recommended minimum set** of allowed volumes for new PSPs are: - secret - projected +{{< warning >}} +PodSecurityPolicy does not limit the types of `PersistentVolume` objects that may be referenced by a `PersistentVolumeClaim`. +Only trusted users should be granted permission to create `PersistentVolume` objects. +{{< /warning >}} + **FSGroup** - Controls the supplemental group applied to some volumes. - *MustRunAs* - Requires at least one `range` to be specified. Uses the