kubernetes/docs/api-reference
Kubernetes Submit Queue f73101066a
Merge pull request #58647 from oracle/for/upstream/master/hostpath-psp-readonly
Automatic merge from submit-queue (batch tested with PRs 64344, 64709, 64717, 63631, 58647). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add support for enforcing read only host paths in PSPs. 

**What this PR does / why we need it**:

This PR adds support for the PSP to enforce that host paths are readonly. 

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #57371
xref https://github.com/kubernetes/features/issues/5

**Special notes for your reviewer**:

**Release note**:

```release-note
PodSecurityPolicy now supports restricting hostPath volume mounts to be readOnly and under specific path prefixes
```

/cc @ericchiang @liggitt
2018-06-05 02:16:21 -07:00
..
admissionregistration.k8s.io Run hack/update-all.sh 2018-04-13 10:19:58 -07:00
apps generated files 2018-06-05 09:44:10 +08:00
authentication.k8s.io Update deletionTimestamp with information about finalizer effect 2017-11-03 10:48:48 +08:00
authorization.k8s.io autogenerated 2017-11-03 13:46:29 -07:00
autoscaling Autogenerated code for HPA external metrics 2018-02-22 14:45:06 +01:00
batch generated files 2018-06-05 09:44:10 +08:00
certificates.k8s.io/v1beta1 generated 2018-05-18 18:42:39 -07:00
events.k8s.io/v1beta1 fix all the typos across the project 2018-02-11 11:04:14 +08:00
extensions/v1beta1 Merge pull request #58647 from oracle/for/upstream/master/hostpath-psp-readonly 2018-06-05 02:16:21 -07:00
networking.k8s.io/v1 Regenerate files 2018-02-28 08:27:39 -05:00
policy/v1beta1 Add support for enforcing read only host paths in PSPs. 2018-06-04 19:10:37 -04:00
rbac.authorization.k8s.io Indicate clusterrolebinding, rolebinding subjects are optional fields 2018-03-02 16:04:57 +09:00
scheduling.k8s.io Remove some completed TODOs 2018-05-22 11:02:57 -07:00
settings.k8s.io/v1alpha1 Updated generated files 2018-06-02 22:20:39 -04:00
storage.k8s.io generated files 2018-06-05 09:44:10 +08:00
v1 generated files 2018-06-05 09:44:10 +08:00
OWNERS Create api-{approvers,reviewers} alias 2017-10-18 10:54:28 -07:00