github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b81a192a84
kubernetes/api/swagger-spec
History
Kubernetes Submit Queue f73101066a
Merge pull request #58647 from oracle/for/upstream/master/hostpath-psp-readonly 
Automatic merge from submit-queue (batch tested with PRs 64344, 64709, 64717, 63631, 58647). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add support for enforcing read only host paths in PSPs. 

**What this PR does / why we need it**:

This PR adds support for the PSP to enforce that host paths are readonly. 

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #57371
xref https://github.com/kubernetes/features/issues/5

**Special notes for your reviewer**:

**Release note**:

```release-note
PodSecurityPolicy now supports restricting hostPath volume mounts to be readOnly and under specific path prefixes
```

/cc @ericchiang @liggitt
2018-06-05 02:16:21 -07:00
..
admissionregistration.k8s.io_v1alpha1.json Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
admissionregistration.k8s.io_v1beta1.json Run hack/update-all.sh 2018-04-13 10:19:58 -07:00
admissionregistration.k8s.io.json generated 2018-05-21 18:04:54 -07:00
api.json Update docs/ URLs to point to proper locations 2017-06-05 22:13:54 -07:00
apis.json generated 2018-05-21 18:04:54 -07:00
apps_v1.json generated files 2018-06-05 09:44:10 +08:00
apps_v1alpha1.json fixed some bad url 2018-01-10 22:05:00 +08:00
apps_v1beta1.json generated files 2018-06-05 09:44:10 +08:00
apps_v1beta2.json generated files 2018-06-05 09:44:10 +08:00
apps.json generated 2018-05-21 18:04:54 -07:00
authentication.k8s.io_v1.json Update deletionTimestamp with information about finalizer effect 2017-11-03 10:48:48 +08:00
authentication.k8s.io_v1beta1.json Update deletionTimestamp with information about finalizer effect 2017-11-03 10:48:48 +08:00
authentication.k8s.io.json generated 2018-05-21 18:04:54 -07:00
authorization.k8s.io_v1.json autogenerated 2017-11-03 13:46:29 -07:00
authorization.k8s.io_v1beta1.json autogenerated 2017-11-03 13:46:29 -07:00
authorization.k8s.io.json generated 2018-05-21 18:04:54 -07:00
autoscaling_v1.json Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
autoscaling_v2beta1.json Autogenerated code for HPA external metrics 2018-02-22 14:45:06 +01:00
autoscaling.json generated 2018-05-21 18:04:54 -07:00
batch_v1.json generated files 2018-06-05 09:44:10 +08:00
batch_v1beta1.json generated files 2018-06-05 09:44:10 +08:00
batch_v2alpha1.json generated files 2018-06-05 09:44:10 +08:00
batch.json generated 2018-05-21 18:04:54 -07:00
BUILD Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
certificates.k8s.io_v1beta1.json generated 2018-05-18 18:42:39 -07:00
certificates.k8s.io.json generated 2018-05-21 18:04:54 -07:00
events.k8s.io_v1beta1.json auto-generated 2018-02-11 11:04:15 +08:00
events.k8s.io.json generated 2018-05-21 18:04:54 -07:00
extensions_v1beta1.json Merge pull request #58647 from oracle/for/upstream/master/hostpath-psp-readonly 2018-06-05 02:16:21 -07:00
extensions.json generated 2018-05-21 18:04:54 -07:00
logs.json Update generated proto and swagger docs 2016-09-12 18:47:03 -07:00
networking.k8s.io_v1.json Regenerate files 2018-02-28 08:27:39 -05:00
networking.k8s.io.json generated 2018-05-21 18:04:54 -07:00
policy_v1alpha1.json Update docs/ URLs to point to proper locations 2017-06-05 22:13:54 -07:00
policy_v1beta1.json Add support for enforcing read only host paths in PSPs. 2018-06-04 19:10:37 -04:00
policy.json generated 2018-05-21 18:04:54 -07:00
rbac.authorization.k8s.io_v1.json Indicate clusterrolebinding, rolebinding subjects are optional fields 2018-03-02 16:04:57 +09:00
rbac.authorization.k8s.io_v1alpha1.json Indicate clusterrolebinding, rolebinding subjects are optional fields 2018-03-02 16:04:57 +09:00
rbac.authorization.k8s.io_v1beta1.json Indicate clusterrolebinding, rolebinding subjects are optional fields 2018-03-02 16:04:57 +09:00
rbac.authorization.k8s.io.json generated 2018-05-21 18:04:54 -07:00
resourceListing.json Generated 2018-05-12 02:01:09 -04:00
scheduling.k8s.io_v1alpha1.json autogenerated files 2018-02-18 18:20:10 -08:00
scheduling.k8s.io_v1beta1.json Generated 2018-05-12 02:01:09 -04:00
scheduling.k8s.io.json generated 2018-05-21 18:04:54 -07:00
settings.k8s.io_v1alpha1.json Updated generated files 2018-06-02 22:20:39 -04:00
settings.k8s.io.json generated 2018-05-21 18:04:54 -07:00
storage.authorization.k8s.io_v1beta1.json generated code for moving StorageClass 2016-09-06 08:41:17 -04:00
storage.k8s.io_v1.json generated files 2018-06-05 09:44:10 +08:00
storage.k8s.io_v1alpha1.json Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
storage.k8s.io_v1beta1.json generated files 2018-06-05 09:44:10 +08:00
storage.k8s.io.json generated 2018-05-21 18:04:54 -07:00
v1.json generated files 2018-06-05 09:44:10 +08:00
version.json update autogenerated 2016-08-18 14:14:52 -07:00