Update longhorn

2020-08-24 15:20:25 +02:00 · 2020-08-24 15:20:25 +02:00 · 8cc1e01af4
commit 8cc1e01af4
parent 3d54f0c30d
7 changed files with 70 additions and 7 deletions
--- a/files/longhorn/longhorn-psp-PodSecurityPolicy.yaml
+++ b/files/longhorn/longhorn-psp-PodSecurityPolicy.yaml
@ -0,0 +1,29 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: longhorn-psp
+spec:
+  privileged: true
+  allowPrivilegeEscalation: true
+  requiredDropCapabilities:
+    - NET_RAW
+  allowedCapabilities:
+    - SYS_ADMIN
+  hostNetwork: false
+  hostIPC: false
+  hostPID: true
+  runAsUser:
+    rule: RunAsAny
+  seLinux:
+    rule: RunAsAny
+  fsGroup:
+    rule: RunAsAny
+  supplementalGroups:
+    rule: RunAsAny
+  volumes:
+    - configMap
+    - downwardAPI
+    - emptyDir
+    - secret
+    - projected
+    - hostPath