Merge pull request #45975 from php-coder/psp_and_projected_volume

Automatic merge from submit-queue (batch tested with PRs 45346, 45903, 45958, 46042, 45975) examples/podsecuritypolicy/rbac: allow to use projected volumes in restricted PSP **What this PR does / why we need it**: This PR modifies `restricted` PSP to allow `projected` volume type. No need to modify `privileged` PSP because it already allows all volume types. It should not add any harm because `projected` uses configmaps, downward API, and secrets that are already permitted. **Special notes for your reviewer**: This was inspired by similar change in the OpenShift: https://github.com/openshift/origin/pull/14147 **Release note**: ```release-note NONE ``` PTAL @pweil- @derekwaynecarr CC @mfojtik

Merge pull request #45975 from php-coder/psp_and_projected_volume
9f5849a0 · Kubernetes Submit Queue · GitHub · 4f55f490 · 70b0e358 · 9f5849a0
Commit 9f5849a0 authored May 19, 2017 by Kubernetes Submit Queue Committed by GitHub May 19, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

policies.yaml examples/podsecuritypolicy/rbac/policies.yaml +1 -0

No files found.
--- a/examples/podsecuritypolicy/rbac/policies.yaml
+++ b/examples/podsecuritypolicy/rbac/policies.yaml
@@ -35,4 +35,5 @@ spec:
  - 'downwardAPI'
  - 'configMap'
  - 'persistentVolumeClaim'
+  - 'projected'