• Kubernetes Submit Queue's avatar
    Merge pull request #45975 from php-coder/psp_and_projected_volume · 9f5849a0
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 45346, 45903, 45958, 46042, 45975)
    
    examples/podsecuritypolicy/rbac: allow to use projected volumes in restricted PSP
    
    **What this PR does / why we need it**:
    This PR modifies `restricted` PSP to allow `projected` volume type. No need to modify `privileged` PSP because it already allows all volume types.
    
    It should not add any harm because `projected` uses configmaps, downward API, and secrets that are already permitted.
    
    **Special notes for your reviewer**:
    This was inspired by similar change in the OpenShift: https://github.com/openshift/origin/pull/14147
    
    **Release note**:
    ```release-note
    NONE
    ```
    
    PTAL @pweil- @derekwaynecarr 
    CC @mfojtik
    9f5849a0
Name
Last commit
Last update
.github Loading commit data...
Godeps Loading commit data...
api Loading commit data...
build Loading commit data...
cluster Loading commit data...
cmd Loading commit data...
docs Loading commit data...
examples Loading commit data...
federation Loading commit data...
hack Loading commit data...
hooks Loading commit data...
logo Loading commit data...
pkg Loading commit data...
plugin Loading commit data...
staging Loading commit data...
test Loading commit data...
third_party Loading commit data...
translations Loading commit data...
vendor Loading commit data...
.bazelrc Loading commit data...
.gazelcfg.json Loading commit data...
.generated_files Loading commit data...
.gitattributes Loading commit data...
.gitignore Loading commit data...
BUILD.bazel Loading commit data...
CHANGELOG.md Loading commit data...
CONTRIBUTING.md Loading commit data...
LICENSE Loading commit data...
Makefile Loading commit data...
Makefile.generated_files Loading commit data...
OWNERS Loading commit data...
OWNERS_ALIASES Loading commit data...
README.md Loading commit data...
Vagrantfile Loading commit data...
WORKSPACE Loading commit data...
code-of-conduct.md Loading commit data...
labels.yaml Loading commit data...