ansible-role-k8s-storage/files/local-path/PodSecurityPolicy.yml
Adrien Reslinger 74333953a8
All checks were successful
continuous-integration/drone/push Build is passing
Deploy local-path with helm
2021-02-21 16:34:38 +01:00

24 lines
409 B
YAML

apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: local-path-policy
spec:
privileged: true
fsGroup:
rule: RunAsAny
allowedCapabilities:
- DAC_READ_SEARCH
- SYS_RESOURCE
runAsUser:
rule: RunAsAny
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- secret
- hostPath