github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

PodSecurity: restrictedVolumes: regenerate files

Browse Source
This commit is contained in:
Jordan Liggitt 2021-07-07 22:26:47 -04:00
parent 676240a342
commit edb7cdb02a
483 changed files with 1288 additions and 1265 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes0.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- gcePersistentDisk:
pdName: testing
name: volume-gcepersistentdisk
pdName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes1.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- awsElasticBlockStore:
volumeID: testing
name: volume-awselasticblockstore
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes10.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- flocker:
datasetName: testing
name: volume-flocker
datasetName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes11.yaml vendored
View File

@ -14,5 +14,5 @@ spec:
volumes:
- fc:
wwids:
- testing
name: volume-fc
- test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes12.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- azureFile:
secretName: testing
shareName: testing
name: volume-azurefile
secretName: test
shareName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes13.yaml vendored
View File

@ -12,6 +12,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-vsphere
- name: volume1
vsphereVolume:
volumePath: testing
volumePath: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes14.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-quobyte
- name: volume1
quobyte:
registry: localhost:1234
volume: testing
volume: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes15.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- azureDisk:
diskName: testing
diskName: test
diskURI: https://test.blob.core.windows.net/test/test.vhd
name: volume-azuredisk
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes16.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-portworxvolume
- name: volume1
portworxVolume:
fsType: ext4
volumeID: testing
volumeID: test

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes17.yaml vendored
View File

@ -12,9 +12,9 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-scaleio
- name: volume1
scaleIO:
gateway: localhost
secretRef: null
system: testing
volumeName: testing
system: test
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes18.yaml vendored
View File

@ -12,6 +12,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-storageos
- name: volume1
storageos:
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes19.yaml vendored
View File

@ -14,4 +14,4 @@ spec:
volumes:
- hostPath:
path: /dev/null
name: volume-hostpath
name: volume1

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes2.yaml vendored
View File

@ -14,4 +14,4 @@ spec:
volumes:
- gitRepo:
repository: github.com/kubernetes/kubernetes
name: volume-gitrepo
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes3.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-nfs
- name: volume1
nfs:
path: /testing
server: testing
path: /test
server: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes4.yaml vendored
View File

@ -15,5 +15,5 @@ spec:
- iscsi:
iqn: iqn.2001-04.com.example:storage.kube.sys1.xyz
lun: 0
targetPortal: testing
name: volume-iscsi
targetPortal: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes5.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- glusterfs:
endpoints: testing
path: testing
name: volume-glusterfs
endpoints: test
path: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes6.yaml vendored
View File

@ -12,8 +12,8 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-rbd
- name: volume1
rbd:
image: testing
image: test
monitors:
- testing
- test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes7.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- flexVolume:
driver: testing
name: volume-flexvolume
driver: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes8.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- cinder:
volumeID: testing
name: volume-cinder
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/fail/restrictedvolumes9.yaml vendored
View File

@ -14,5 +14,5 @@ spec:
volumes:
- cephfs:
monitors:
- testing
name: volume-cephfs
- test
name: volume1

27
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.0/pass/restrictedvolumes0.yaml vendored
View File

@ -12,23 +12,24 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- configMap:
name: volume-configmap-test
name: volume-configmap
- name: volume0
- emptyDir: {}
name: volume1
- name: volume2
secret:
secretName: test
- name: volume3
persistentVolumeClaim:
claimName: test
- downwardAPI:
items:
- fieldRef:
fieldPath: metadata.labels
path: labels
name: volume-downwardapi
- emptyDir: {}
name: volume-emptydir
- name: volume-pvc
persistentVolumeClaim:
claimName: test
- name: volume-projects
name: volume4
- configMap:
name: test
name: volume5
- name: volume6
projected:
sources: []
- name: volume-secret
secret:
secretName: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes0.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- gcePersistentDisk:
pdName: testing
name: volume-gcepersistentdisk
pdName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes1.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- awsElasticBlockStore:
volumeID: testing
name: volume-awselasticblockstore
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes10.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- flocker:
datasetName: testing
name: volume-flocker
datasetName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes11.yaml vendored
View File

@ -14,5 +14,5 @@ spec:
volumes:
- fc:
wwids:
- testing
name: volume-fc
- test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes12.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- azureFile:
secretName: testing
shareName: testing
name: volume-azurefile
secretName: test
shareName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes13.yaml vendored
View File

@ -12,6 +12,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-vsphere
- name: volume1
vsphereVolume:
volumePath: testing
volumePath: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes14.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-quobyte
- name: volume1
quobyte:
registry: localhost:1234
volume: testing
volume: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes15.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- azureDisk:
diskName: testing
diskName: test
diskURI: https://test.blob.core.windows.net/test/test.vhd
name: volume-azuredisk
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes16.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-portworxvolume
- name: volume1
portworxVolume:
fsType: ext4
volumeID: testing
volumeID: test

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes17.yaml vendored
View File

@ -12,9 +12,9 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-scaleio
- name: volume1
scaleIO:
gateway: localhost
secretRef: null
system: testing
volumeName: testing
system: test
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes18.yaml vendored
View File

@ -12,6 +12,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-storageos
- name: volume1
storageos:
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes19.yaml vendored
View File

@ -14,4 +14,4 @@ spec:
volumes:
- hostPath:
path: /dev/null
name: volume-hostpath
name: volume1

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes2.yaml vendored
View File

@ -14,4 +14,4 @@ spec:
volumes:
- gitRepo:
repository: github.com/kubernetes/kubernetes
name: volume-gitrepo
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes3.yaml vendored
View File

@ -12,7 +12,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-nfs
- name: volume1
nfs:
path: /testing
server: testing
path: /test
server: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes4.yaml vendored
View File

@ -15,5 +15,5 @@ spec:
- iscsi:
iqn: iqn.2001-04.com.example:storage.kube.sys1.xyz
lun: 0
targetPortal: testing
name: volume-iscsi
targetPortal: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes5.yaml vendored
View File

@ -13,6 +13,6 @@ spec:
runAsNonRoot: true
volumes:
- glusterfs:
endpoints: testing
path: testing
name: volume-glusterfs
endpoints: test
path: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes6.yaml vendored
View File

@ -12,8 +12,8 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-rbd
- name: volume1
rbd:
image: testing
image: test
monitors:
- testing
- test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes7.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- flexVolume:
driver: testing
name: volume-flexvolume
driver: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes8.yaml vendored
View File

@ -13,5 +13,5 @@ spec:
runAsNonRoot: true
volumes:
- cinder:
volumeID: testing
name: volume-cinder
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/fail/restrictedvolumes9.yaml vendored
View File

@ -14,5 +14,5 @@ spec:
volumes:
- cephfs:
monitors:
- testing
name: volume-cephfs
- test
name: volume1

27
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.1/pass/restrictedvolumes0.yaml vendored
View File

@ -12,23 +12,24 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- configMap:
name: volume-configmap-test
name: volume-configmap
- name: volume0
- emptyDir: {}
name: volume1
- name: volume2
secret:
secretName: test
- name: volume3
persistentVolumeClaim:
claimName: test
- downwardAPI:
items:
- fieldRef:
fieldPath: metadata.labels
path: labels
name: volume-downwardapi
- emptyDir: {}
name: volume-emptydir
- name: volume-pvc
persistentVolumeClaim:
claimName: test
- name: volume-projects
name: volume4
- configMap:
name: test
name: volume5
- name: volume6
projected:
sources: []
- name: volume-secret
secret:
secretName: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes0.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- gcePersistentDisk:
pdName: testing
name: volume-gcepersistentdisk
pdName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes1.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- awsElasticBlockStore:
volumeID: testing
name: volume-awselasticblockstore
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes10.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- flocker:
datasetName: testing
name: volume-flocker
datasetName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes11.yaml vendored
View File

@ -18,5 +18,5 @@ spec:
volumes:
- fc:
wwids:
- testing
name: volume-fc
- test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes12.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureFile:
secretName: testing
shareName: testing
name: volume-azurefile
secretName: test
shareName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes13.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-vsphere
- name: volume1
vsphereVolume:
volumePath: testing
volumePath: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes14.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-quobyte
- name: volume1
quobyte:
registry: localhost:1234
volume: testing
volume: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes15.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureDisk:
diskName: testing
diskName: test
diskURI: https://test.blob.core.windows.net/test/test.vhd
name: volume-azuredisk
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes16.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-portworxvolume
- name: volume1
portworxVolume:
fsType: ext4
volumeID: testing
volumeID: test

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes17.yaml vendored
View File

@ -16,9 +16,9 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-scaleio
- name: volume1
scaleIO:
gateway: localhost
secretRef: null
system: testing
volumeName: testing
system: test
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes18.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-storageos
- name: volume1
storageos:
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes19.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- hostPath:
path: /dev/null
name: volume-hostpath
name: volume1

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes2.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- gitRepo:
repository: github.com/kubernetes/kubernetes
name: volume-gitrepo
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes3.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-nfs
- name: volume1
nfs:
path: /testing
server: testing
path: /test
server: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes4.yaml vendored
View File

@ -19,5 +19,5 @@ spec:
- iscsi:
iqn: iqn.2001-04.com.example:storage.kube.sys1.xyz
lun: 0
targetPortal: testing
name: volume-iscsi
targetPortal: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes5.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- glusterfs:
endpoints: testing
path: testing
name: volume-glusterfs
endpoints: test
path: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes6.yaml vendored
View File

@ -16,8 +16,8 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-rbd
- name: volume1
rbd:
image: testing
image: test
monitors:
- testing
- test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes7.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- flexVolume:
driver: testing
name: volume-flexvolume
driver: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes8.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- cinder:
volumeID: testing
name: volume-cinder
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/fail/restrictedvolumes9.yaml vendored
View File

@ -18,5 +18,5 @@ spec:
volumes:
- cephfs:
monitors:
- testing
name: volume-cephfs
- test
name: volume1

27
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.10/pass/restrictedvolumes0.yaml vendored
View File

@ -16,23 +16,24 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- configMap:
name: volume-configmap-test
name: volume-configmap
- name: volume0
- emptyDir: {}
name: volume1
- name: volume2
secret:
secretName: test
- name: volume3
persistentVolumeClaim:
claimName: test
- downwardAPI:
items:
- fieldRef:
fieldPath: metadata.labels
path: labels
name: volume-downwardapi
- emptyDir: {}
name: volume-emptydir
- name: volume-pvc
persistentVolumeClaim:
claimName: test
- name: volume-projects
name: volume4
- configMap:
name: test
name: volume5
- name: volume6
projected:
sources: []
- name: volume-secret
secret:
secretName: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes0.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- gcePersistentDisk:
pdName: testing
name: volume-gcepersistentdisk
pdName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes1.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- awsElasticBlockStore:
volumeID: testing
name: volume-awselasticblockstore
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes10.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- flocker:
datasetName: testing
name: volume-flocker
datasetName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes11.yaml vendored
View File

@ -18,5 +18,5 @@ spec:
volumes:
- fc:
wwids:
- testing
name: volume-fc
- test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes12.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureFile:
secretName: testing
shareName: testing
name: volume-azurefile
secretName: test
shareName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes13.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-vsphere
- name: volume1
vsphereVolume:
volumePath: testing
volumePath: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes14.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-quobyte
- name: volume1
quobyte:
registry: localhost:1234
volume: testing
volume: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes15.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureDisk:
diskName: testing
diskName: test
diskURI: https://test.blob.core.windows.net/test/test.vhd
name: volume-azuredisk
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes16.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-portworxvolume
- name: volume1
portworxVolume:
fsType: ext4
volumeID: testing
volumeID: test

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes17.yaml vendored
View File

@ -16,9 +16,9 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-scaleio
- name: volume1
scaleIO:
gateway: localhost
secretRef: null
system: testing
volumeName: testing
system: test
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes18.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-storageos
- name: volume1
storageos:
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes19.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- hostPath:
path: /dev/null
name: volume-hostpath
name: volume1

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes2.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- gitRepo:
repository: github.com/kubernetes/kubernetes
name: volume-gitrepo
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes3.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-nfs
- name: volume1
nfs:
path: /testing
server: testing
path: /test
server: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes4.yaml vendored
View File

@ -19,5 +19,5 @@ spec:
- iscsi:
iqn: iqn.2001-04.com.example:storage.kube.sys1.xyz
lun: 0
targetPortal: testing
name: volume-iscsi
targetPortal: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes5.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- glusterfs:
endpoints: testing
path: testing
name: volume-glusterfs
endpoints: test
path: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes6.yaml vendored
View File

@ -16,8 +16,8 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-rbd
- name: volume1
rbd:
image: testing
image: test
monitors:
- testing
- test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes7.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- flexVolume:
driver: testing
name: volume-flexvolume
driver: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes8.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- cinder:
volumeID: testing
name: volume-cinder
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/fail/restrictedvolumes9.yaml vendored
View File

@ -18,5 +18,5 @@ spec:
volumes:
- cephfs:
monitors:
- testing
name: volume-cephfs
- test
name: volume1

27
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.11/pass/restrictedvolumes0.yaml vendored
View File

@ -16,23 +16,24 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- configMap:
name: volume-configmap-test
name: volume-configmap
- name: volume0
- emptyDir: {}
name: volume1
- name: volume2
secret:
secretName: test
- name: volume3
persistentVolumeClaim:
claimName: test
- downwardAPI:
items:
- fieldRef:
fieldPath: metadata.labels
path: labels
name: volume-downwardapi
- emptyDir: {}
name: volume-emptydir
- name: volume-pvc
persistentVolumeClaim:
claimName: test
- name: volume-projects
name: volume4
- configMap:
name: test
name: volume5
- name: volume6
projected:
sources: []
- name: volume-secret
secret:
secretName: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes0.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- gcePersistentDisk:
pdName: testing
name: volume-gcepersistentdisk
pdName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes1.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- awsElasticBlockStore:
volumeID: testing
name: volume-awselasticblockstore
volumeID: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes10.yaml vendored
View File

@ -17,5 +17,5 @@ spec:
runAsNonRoot: true
volumes:
- flocker:
datasetName: testing
name: volume-flocker
datasetName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes11.yaml vendored
View File

@ -18,5 +18,5 @@ spec:
volumes:
- fc:
wwids:
- testing
name: volume-fc
- test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes12.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureFile:
secretName: testing
shareName: testing
name: volume-azurefile
secretName: test
shareName: test
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes13.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-vsphere
- name: volume1
vsphereVolume:
volumePath: testing
volumePath: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes14.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-quobyte
- name: volume1
quobyte:
registry: localhost:1234
volume: testing
volume: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes15.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- azureDisk:
diskName: testing
diskName: test
diskURI: https://test.blob.core.windows.net/test/test.vhd
name: volume-azuredisk
name: volume1

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes16.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-portworxvolume
- name: volume1
portworxVolume:
fsType: ext4
volumeID: testing
volumeID: test

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes17.yaml vendored
View File

@ -16,9 +16,9 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-scaleio
- name: volume1
scaleIO:
gateway: localhost
secretRef: null
system: testing
volumeName: testing
system: test
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes18.yaml vendored
View File

@ -16,6 +16,6 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-storageos
- name: volume1
storageos:
volumeName: test

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes19.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- hostPath:
path: /dev/null
name: volume-hostpath
name: volume1

2
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes2.yaml vendored
View File

@ -18,4 +18,4 @@ spec:
volumes:
- gitRepo:
repository: github.com/kubernetes/kubernetes
name: volume-gitrepo
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes3.yaml vendored
View File

@ -16,7 +16,7 @@ spec:
securityContext:
runAsNonRoot: true
volumes:
- name: volume-nfs
- name: volume1
nfs:
path: /testing
server: testing
path: /test
server: test

4
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes4.yaml vendored
View File

@ -19,5 +19,5 @@ spec:
- iscsi:
iqn: iqn.2001-04.com.example:storage.kube.sys1.xyz
lun: 0
targetPortal: testing
name: volume-iscsi
targetPortal: test
name: volume1

6
staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.12/fail/restrictedvolumes5.yaml vendored
View File

@ -17,6 +17,6 @@ spec:
runAsNonRoot: true
volumes:
- glusterfs:
endpoints: testing
path: testing
name: volume-glusterfs
endpoints: test
path: test
name: volume1

Some files were not shown because too many files have changed in this diff Show More