Rewrite PodSecurityPolicy guide

This commit is contained in:
Tim Allclair
2017-11-19 17:52:31 -08:00
parent a99a42fcd3
commit 5d39cfeae4
5 changed files with 568 additions and 236 deletions
+17
View File
@@ -0,0 +1,17 @@
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: example
spec:
privileged: false # Don't allow privileged pods!
# The rest fills in some required fields.
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
runAsUser:
rule: RunAsAny
fsGroup:
rule: RunAsAny
volumes:
- '*'