blob: 7f78ab3305bfae5696bfbc32aa79f02376ecc525 [file] [log] [blame]
Jess Frazellecc5f0c22017-11-14 19:25:11 -05001apiVersion: extensions/v1beta1
2kind: PodSecurityPolicy
3metadata:
Jess Frazelled05d1002017-11-14 21:50:33 -05004 name: permissive
Jess Frazellecc5f0c22017-11-14 19:25:11 -05005spec:
Jess Frazelled05d1002017-11-14 21:50:33 -05006 privileged: true
7 allowPrivilegeEscalation: true
8 hostNetwork: true
9 hostPID: true
10 hostIPC: true
Jess Frazellecc5f0c22017-11-14 19:25:11 -050011 seLinux:
12 rule: RunAsAny
13 supplementalGroups:
14 rule: RunAsAny
15 runAsUser:
16 rule: RunAsAny
17 fsGroup:
18 rule: RunAsAny
19 volumes:
20 - '*'
21 allowedCapabilities:
22 - '*'
Jess Frazelle2e1c66a2017-11-14 19:29:54 -050023 hostPorts:
Jess Frazelled05d1002017-11-14 21:50:33 -050024 - min: 1
25 max: 65536