Merge pull request #2890 from krallistic/master

PSP: Added example and docu for hostPort ranges

docs/user-guide/pod-security-policy/index.md

@@ -111,6 +111,9 @@ to the volume sources that are defined when creating a volume:
 The recommended minimum set of allowed volumes for new PSPs are 
 configMap, downwardAPI, emptyDir, persistentVolumeClaim, and secret.
 
+### Host Network
+ - *HostPorts*, default `empty`. List of `HostPortRange`, defined by `min`(inclusive) and `max`(inclusive), which define the allowed host ports.
+ 
 ## Admission
 
 _Admission control_ with `PodSecurityPolicy` allows for control over the creation of resources

docs/user-guide/pod-security-policy/psp.yaml

@@ -17,6 +17,12 @@
       "fsGroup": {
           "rule": "RunAsAny"
       },
+      "HostPorts": [
+          {
+          "min": 8000,
+          "max": 8080
+          }
+      ],
       "volumes": ["*"]
   }
 }