github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

api changes for psp runasgroup policy

Browse Source
This commit is contained in:
Mayank Kumar
2018-08-03 09:43:27 -07:00
parent 4033862616
commit bc3e3afc46
34 changed files with 1588 additions and 391 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
api/openapi-spec/swagger.json generated
View File

@@ -87985,6 +87985,10 @@
"type": "string"
}
},
"runAsGroup": {
"description": "RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.",
"$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RunAsGroupStrategyOptions"
},
"runAsUser": {
"description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.",
"$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RunAsUserStrategyOptions"
@@ -88198,6 +88202,25 @@
}
}
},
"io.k8s.api.extensions.v1beta1.RunAsGroupStrategyOptions": {
"description": "RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsGroupStrategyOptions from policy API Group instead.",
"required": [
"rule"
],
"properties": {
"ranges": {
"description": "ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.",
"type": "array",
"items": {
"$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IDRange"
}
},
"rule": {
"description": "rule is the strategy that will dictate the allowable RunAsGroup values that may be set.",
"type": "string"
}
}
},
"io.k8s.api.extensions.v1beta1.RunAsUserStrategyOptions": {
"description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.",
"required": [
@@ -88893,6 +88916,10 @@
"type": "string"
}
},
"runAsGroup": {
"description": "RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.",
"$ref": "#/definitions/io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions"
},
"runAsUser": {
"description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.",
"$ref": "#/definitions/io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions"
@@ -88914,6 +88941,25 @@
}
}
},
"io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions": {
"description": "RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.",
"required": [
"rule"
],
"properties": {
"ranges": {
"description": "ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.",
"type": "array",
"items": {
"$ref": "#/definitions/io.k8s.api.policy.v1beta1.IDRange"
}
},
"rule": {
"description": "rule is the strategy that will dictate the allowable RunAsGroup values that may be set.",
"type": "string"
}
}
},
"io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions": {
"description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
"required": [

24
api/swagger-spec/extensions_v1beta1.json generated
View File

@@ -10808,6 +10808,10 @@
"$ref": "v1beta1.RunAsUserStrategyOptions",
"description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set."
},
"runAsGroup": {
"$ref": "v1beta1.RunAsGroupStrategyOptions",
"description": "RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled."
},
"supplementalGroups": {
"$ref": "v1beta1.SupplementalGroupsStrategyOptions",
"description": "supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext."
@@ -10946,6 +10950,26 @@
}
}
},
"v1beta1.RunAsGroupStrategyOptions": {
"id": "v1beta1.RunAsGroupStrategyOptions",
"description": "RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsGroupStrategyOptions from policy API Group instead.",
"required": [
"rule"
],
"properties": {
"rule": {
"type": "string",
"description": "rule is the strategy that will dictate the allowable RunAsGroup values that may be set."
},
"ranges": {
"type": "array",
"items": {
"$ref": "v1beta1.IDRange"
},
"description": "ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs."
}
}
},
"v1beta1.SupplementalGroupsStrategyOptions": {
"id": "v1beta1.SupplementalGroupsStrategyOptions",
"description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.",

24
api/swagger-spec/policy_v1beta1.json generated
View File

@@ -2578,6 +2578,10 @@
"$ref": "v1beta1.RunAsUserStrategyOptions",
"description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set."
},
"runAsGroup": {
"$ref": "v1beta1.RunAsGroupStrategyOptions",
"description": "RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled."
},
"supplementalGroups": {
"$ref": "v1beta1.SupplementalGroupsStrategyOptions",
"description": "supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext."
@@ -2742,6 +2746,26 @@
}
}
},
"v1beta1.RunAsGroupStrategyOptions": {
"id": "v1beta1.RunAsGroupStrategyOptions",
"description": "RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.",
"required": [
"rule"
],
"properties": {
"rule": {
"type": "string",
"description": "rule is the strategy that will dictate the allowable RunAsGroup values that may be set."
},
"ranges": {
"type": "array",
"items": {
"$ref": "v1beta1.IDRange"
},
"description": "ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs."
}
}
},
"v1beta1.SupplementalGroupsStrategyOptions": {
"id": "v1beta1.SupplementalGroupsStrategyOptions",
"description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",