Rewrite PodSecurityPolicy guide

kubernetes · Dec 1, 2017 · 5d39cfe · 5d39cfe
1 parent a99a42f
commit 5d39cfe
Show file tree

Hide file tree

Showing 5 changed files with 538 additions and 206 deletions.
diff --git a/docs/concepts/policy/psp.yaml → docs/concepts/policy/example-psp.yaml b/docs/concepts/policy/psp.yaml → docs/concepts/policy/example-psp.yaml
@@ -1,8 +1,10 @@
 apiVersion: extensions/v1beta1
 kind: PodSecurityPolicy
 metadata:
-  name: permissive
+  name: example
 spec:
+  privileged: false  # Don't allow privileged pods!
+  # The rest fills in some required fields.
   seLinux:
     rule: RunAsAny
   supplementalGroups:
@@ -11,10 +13,5 @@ spec:
     rule: RunAsAny
   fsGroup:
     rule: RunAsAny
-  hostPorts:
-  - min: 8000
-    max: 8080
   volumes:
   - '*'
-  allowedCapabilities:
-  - '*'