Pod Security Policy doc improvements (#3010)
* docs/user-guide/pod-security-policy: minor improvements. * docs/user-guide/pod-security-policy: convert JSON to YAML. * docs/user-guide/pod-security-policy: mention kubectl get/edit commands.
This commit is contained in:
committed by
Andrew Chen
parent
10b8dc7856
commit
43a94011fa
@@ -1,28 +1,18 @@
|
||||
{
|
||||
"kind": "PodSecurityPolicy",
|
||||
"apiVersion":"extensions/v1beta1",
|
||||
"metadata": {
|
||||
"name": "permissive"
|
||||
},
|
||||
"spec": {
|
||||
"seLinux": {
|
||||
"rule": "RunAsAny"
|
||||
},
|
||||
"supplementalGroups": {
|
||||
"rule": "RunAsAny"
|
||||
},
|
||||
"runAsUser": {
|
||||
"rule": "RunAsAny"
|
||||
},
|
||||
"fsGroup": {
|
||||
"rule": "RunAsAny"
|
||||
},
|
||||
"HostPorts": [
|
||||
{
|
||||
"min": 8000,
|
||||
"max": 8080
|
||||
}
|
||||
],
|
||||
"volumes": ["*"]
|
||||
}
|
||||
}
|
||||
apiVersion: extensions/v1beta1
|
||||
kind: PodSecurityPolicy
|
||||
metadata:
|
||||
name: permissive
|
||||
spec:
|
||||
seLinux:
|
||||
rule: RunAsAny
|
||||
supplementalGroups:
|
||||
rule: RunAsAny
|
||||
runAsUser:
|
||||
rule: RunAsAny
|
||||
fsGroup:
|
||||
rule: RunAsAny
|
||||
hostPorts:
|
||||
- min: 8000
|
||||
max: 8080
|
||||
volumes:
|
||||
- '*'
|
||||
|
||||
Reference in New Issue
Block a user