v1.PodSecurityPolicyReview

Description

PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the PodTemplateSpec in question.

Object Schema

Expand or mouse-over a field for more information about it.

  1. apiVersion:
  2. kind:
  3. spec:
  4. serviceAccountNames:
  5. - [string]:
  6. template:
  7. metadata:
  8. annotations:
  9. [string]:
  10. clusterName:
  11. creationTimestamp:
  12. deletionGracePeriodSeconds:
  13. deletionTimestamp:
  14. finalizers:
  15. - [string]:
  16. generateName:
  17. generation:
  18. initializers:
  19. pending:
  20. - name:
  21. result:
  22. apiVersion:
  23. code:
  24. details:
  25. causes:
  26. - field:
  27. message:
  28. reason:
  29. group:
  30. kind:
  31. name:
  32. retryAfterSeconds:
  33. uid:
  34. kind:
  35. message:
  36. metadata:
  37. resourceVersion:
  38. selfLink:
  39. reason:
  40. status:
  41. labels:
  42. [string]:
  43. name:
  44. namespace:
  45. ownerReferences:
  46. - apiVersion:
  47. blockOwnerDeletion:
  48. controller:
  49. kind:
  50. name:
  51. uid:
  52. resourceVersion:
  53. selfLink:
  54. uid:
  55. spec:
  56. activeDeadlineSeconds:
  57. affinity:
  58. nodeAffinity:
  59. preferredDuringSchedulingIgnoredDuringExecution:
  60. - preference:
  61. - matchExpressions:
  62. - - key:
  63. operator:
  64. values:
  65. - [string]:
  66. weight:
  67. requiredDuringSchedulingIgnoredDuringExecution:
  68. nodeSelectorTerms:
  69. - matchExpressions:
  70. - - key:
  71. operator:
  72. values:
  73. - [string]:
  74. podAffinity:
  75. preferredDuringSchedulingIgnoredDuringExecution:
  76. - podAffinityTerm:
  77. - labelSelector:
  78. - matchExpressions:
  79. - - key:
  80. operator:
  81. values:
  82. - [string]:
  83. matchLabels:
  84. [string]:
  85. namespaces:
  86. - [string]:
  87. topologyKey:
  88. weight:
  89. requiredDuringSchedulingIgnoredDuringExecution:
  90. - labelSelector:
  91. - matchExpressions:
  92. - - key:
  93. operator:
  94. values:
  95. - [string]:
  96. matchLabels:
  97. [string]:
  98. namespaces:
  99. - [string]:
  100. topologyKey:
  101. podAntiAffinity:
  102. preferredDuringSchedulingIgnoredDuringExecution:
  103. - podAffinityTerm:
  104. - labelSelector:
  105. - matchExpressions:
  106. - - key:
  107. operator:
  108. values:
  109. - [string]:
  110. matchLabels:
  111. [string]:
  112. namespaces:
  113. - [string]:
  114. topologyKey:
  115. weight:
  116. requiredDuringSchedulingIgnoredDuringExecution:
  117. - labelSelector:
  118. - matchExpressions:
  119. - - key:
  120. operator:
  121. values:
  122. - [string]:
  123. matchLabels:
  124. [string]:
  125. namespaces:
  126. - [string]:
  127. topologyKey:
  128. automountServiceAccountToken:
  129. containers:
  130. - args:
  131. - - [string]:
  132. command:
  133. - [string]:
  134. env:
  135. - name:
  136. value:
  137. valueFrom:
  138. configMapKeyRef:
  139. key:
  140. name:
  141. optional:
  142. fieldRef:
  143. apiVersion:
  144. fieldPath:
  145. resourceFieldRef:
  146. containerName:
  147. divisor:
  148. resource:
  149. secretKeyRef:
  150. key:
  151. name:
  152. optional:
  153. envFrom:
  154. - configMapRef:
  155. - name:
  156. optional:
  157. prefix:
  158. secretRef:
  159. name:
  160. optional:
  161. image:
  162. imagePullPolicy:
  163. lifecycle:
  164. postStart:
  165. exec:
  166. command:
  167. - [string]:
  168. httpGet:
  169. host:
  170. httpHeaders:
  171. - name:
  172. value:
  173. path:
  174. port:
  175. scheme:
  176. tcpSocket:
  177. host:
  178. port:
  179. preStop:
  180. exec:
  181. command:
  182. - [string]:
  183. httpGet:
  184. host:
  185. httpHeaders:
  186. - name:
  187. value:
  188. path:
  189. port:
  190. scheme:
  191. tcpSocket:
  192. host:
  193. port:
  194. livenessProbe:
  195. exec:
  196. command:
  197. - [string]:
  198. failureThreshold:
  199. httpGet:
  200. host:
  201. httpHeaders:
  202. - name:
  203. value:
  204. path:
  205. port:
  206. scheme:
  207. initialDelaySeconds:
  208. periodSeconds:
  209. successThreshold:
  210. tcpSocket:
  211. host:
  212. port:
  213. timeoutSeconds:
  214. name:
  215. ports:
  216. - containerPort:
  217. hostIP:
  218. hostPort:
  219. name:
  220. protocol:
  221. readinessProbe:
  222. exec:
  223. command:
  224. - [string]:
  225. failureThreshold:
  226. httpGet:
  227. host:
  228. httpHeaders:
  229. - name:
  230. value:
  231. path:
  232. port:
  233. scheme:
  234. initialDelaySeconds:
  235. periodSeconds:
  236. successThreshold:
  237. tcpSocket:
  238. host:
  239. port:
  240. timeoutSeconds:
  241. resources:
  242. limits:
  243. [string]:
  244. requests:
  245. [string]:
  246. securityContext:
  247. capabilities:
  248. add:
  249. - [string]:
  250. drop:
  251. - [string]:
  252. privileged:
  253. readOnlyRootFilesystem:
  254. runAsNonRoot:
  255. runAsUser:
  256. seLinuxOptions:
  257. level:
  258. role:
  259. type:
  260. user:
  261. stdin:
  262. stdinOnce:
  263. terminationMessagePath:
  264. terminationMessagePolicy:
  265. tty:
  266. volumeMounts:
  267. - mountPath:
  268. name:
  269. readOnly:
  270. subPath:
  271. workingDir:
  272. dnsPolicy:
  273. hostAliases:
  274. - hostnames:
  275. - - [string]:
  276. ip:
  277. hostIPC:
  278. hostNetwork:
  279. hostPID:
  280. hostname:
  281. imagePullSecrets:
  282. - name:
  283. initContainers:
  284. - args:
  285. - - [string]:
  286. command:
  287. - [string]:
  288. env:
  289. - name:
  290. value:
  291. valueFrom:
  292. configMapKeyRef:
  293. key:
  294. name:
  295. optional:
  296. fieldRef:
  297. apiVersion:
  298. fieldPath:
  299. resourceFieldRef:
  300. containerName:
  301. divisor:
  302. resource:
  303. secretKeyRef:
  304. key:
  305. name:
  306. optional:
  307. envFrom:
  308. - configMapRef:
  309. - name:
  310. optional:
  311. prefix:
  312. secretRef:
  313. name:
  314. optional:
  315. image:
  316. imagePullPolicy:
  317. lifecycle:
  318. postStart:
  319. exec:
  320. command:
  321. - [string]:
  322. httpGet:
  323. host:
  324. httpHeaders:
  325. - name:
  326. value:
  327. path:
  328. port:
  329. scheme:
  330. tcpSocket:
  331. host:
  332. port:
  333. preStop:
  334. exec:
  335. command:
  336. - [string]:
  337. httpGet:
  338. host:
  339. httpHeaders:
  340. - name:
  341. value:
  342. path:
  343. port:
  344. scheme:
  345. tcpSocket:
  346. host:
  347. port:
  348. livenessProbe:
  349. exec:
  350. command:
  351. - [string]:
  352. failureThreshold:
  353. httpGet:
  354. host:
  355. httpHeaders:
  356. - name:
  357. value:
  358. path:
  359. port:
  360. scheme:
  361. initialDelaySeconds:
  362. periodSeconds:
  363. successThreshold:
  364. tcpSocket:
  365. host:
  366. port:
  367. timeoutSeconds:
  368. name:
  369. ports:
  370. - containerPort:
  371. hostIP:
  372. hostPort:
  373. name:
  374. protocol:
  375. readinessProbe:
  376. exec:
  377. command:
  378. - [string]:
  379. failureThreshold:
  380. httpGet:
  381. host:
  382. httpHeaders:
  383. - name:
  384. value:
  385. path:
  386. port:
  387. scheme:
  388. initialDelaySeconds:
  389. periodSeconds:
  390. successThreshold:
  391. tcpSocket:
  392. host:
  393. port:
  394. timeoutSeconds:
  395. resources:
  396. limits:
  397. [string]:
  398. requests:
  399. [string]:
  400. securityContext:
  401. capabilities:
  402. add:
  403. - [string]:
  404. drop:
  405. - [string]:
  406. privileged:
  407. readOnlyRootFilesystem:
  408. runAsNonRoot:
  409. runAsUser:
  410. seLinuxOptions:
  411. level:
  412. role:
  413. type:
  414. user:
  415. stdin:
  416. stdinOnce:
  417. terminationMessagePath:
  418. terminationMessagePolicy:
  419. tty:
  420. volumeMounts:
  421. - mountPath:
  422. name:
  423. readOnly:
  424. subPath:
  425. workingDir:
  426. nodeName:
  427. nodeSelector:
  428. [string]:
  429. restartPolicy:
  430. schedulerName:
  431. securityContext:
  432. fsGroup:
  433. runAsNonRoot:
  434. runAsUser:
  435. seLinuxOptions:
  436. level:
  437. role:
  438. type:
  439. user:
  440. supplementalGroups:
  441. - [integer]:
  442. serviceAccount:
  443. serviceAccountName:
  444. subdomain:
  445. terminationGracePeriodSeconds:
  446. tolerations:
  447. - effect:
  448. key:
  449. operator:
  450. tolerationSeconds:
  451. value:
  452. volumes:
  453. - awsElasticBlockStore:
  454. - fsType:
  455. partition:
  456. readOnly:
  457. volumeID:
  458. azureDisk:
  459. cachingMode:
  460. diskName:
  461. diskURI:
  462. fsType:
  463. kind:
  464. readOnly:
  465. azureFile:
  466. readOnly:
  467. secretName:
  468. shareName:
  469. cephfs:
  470. monitors:
  471. - [string]:
  472. path:
  473. readOnly:
  474. secretFile:
  475. secretRef:
  476. name:
  477. user:
  478. cinder:
  479. fsType:
  480. readOnly:
  481. volumeID:
  482. configMap:
  483. defaultMode:
  484. items:
  485. - key:
  486. mode:
  487. path:
  488. name:
  489. optional:
  490. downwardAPI:
  491. defaultMode:
  492. items:
  493. - fieldRef:
  494. - apiVersion:
  495. fieldPath:
  496. mode:
  497. path:
  498. resourceFieldRef:
  499. containerName:
  500. divisor:
  501. resource:
  502. emptyDir:
  503. medium:
  504. sizeLimit:
  505. fc:
  506. fsType:
  507. lun:
  508. readOnly:
  509. targetWWNs:
  510. - [string]:
  511. flexVolume:
  512. driver:
  513. fsType:
  514. options:
  515. [string]:
  516. readOnly:
  517. secretRef:
  518. name:
  519. flocker:
  520. datasetName:
  521. datasetUUID:
  522. gcePersistentDisk:
  523. fsType:
  524. partition:
  525. pdName:
  526. readOnly:
  527. glusterfs:
  528. endpoints:
  529. path:
  530. readOnly:
  531. hostPath:
  532. path:
  533. iscsi:
  534. chapAuthDiscovery:
  535. chapAuthSession:
  536. fsType:
  537. iqn:
  538. iscsiInterface:
  539. lun:
  540. portals:
  541. - [string]:
  542. readOnly:
  543. secretRef:
  544. name:
  545. targetPortal:
  546. name:
  547. nfs:
  548. path:
  549. readOnly:
  550. server:
  551. persistentVolumeClaim:
  552. claimName:
  553. readOnly:
  554. photonPersistentDisk:
  555. fsType:
  556. pdID:
  557. portworxVolume:
  558. fsType:
  559. readOnly:
  560. volumeID:
  561. projected:
  562. defaultMode:
  563. sources:
  564. - configMap:
  565. - items:
  566. - - key:
  567. mode:
  568. path:
  569. name:
  570. optional:
  571. downwardAPI:
  572. items:
  573. - fieldRef:
  574. - apiVersion:
  575. fieldPath:
  576. mode:
  577. path:
  578. resourceFieldRef:
  579. containerName:
  580. divisor:
  581. resource:
  582. secret:
  583. items:
  584. - key:
  585. mode:
  586. path:
  587. name:
  588. optional:
  589. quobyte:
  590. group:
  591. readOnly:
  592. registry:
  593. user:
  594. volume:
  595. rbd:
  596. fsType:
  597. image:
  598. keyring:
  599. monitors:
  600. - [string]:
  601. pool:
  602. readOnly:
  603. secretRef:
  604. name:
  605. user:
  606. scaleIO:
  607. fsType:
  608. gateway:
  609. protectionDomain:
  610. readOnly:
  611. secretRef:
  612. name:
  613. sslEnabled:
  614. storageMode:
  615. storagePool:
  616. system:
  617. volumeName:
  618. secret:
  619. defaultMode:
  620. items:
  621. - key:
  622. mode:
  623. path:
  624. optional:
  625. secretName:
  626. storageos:
  627. fsType:
  628. readOnly:
  629. secretRef:
  630. name:
  631. volumeName:
  632. volumeNamespace:
  633. vsphereVolume:
  634. fsType:
  635. storagePolicyID:
  636. storagePolicyName:
  637. volumePath:
  638. status:
  639. allowedServiceAccounts:
  640. - allowedBy:
  641. - apiVersion:
  642. fieldPath:
  643. kind:
  644. name:
  645. namespace:
  646. resourceVersion:
  647. uid:
  648. name:
  649. reason:
  650. template:
  651. metadata:
  652. annotations:
  653. [string]:
  654. clusterName:
  655. creationTimestamp:
  656. deletionGracePeriodSeconds:
  657. deletionTimestamp:
  658. finalizers:
  659. - [string]:
  660. generateName:
  661. generation:
  662. initializers:
  663. pending:
  664. - name:
  665. result:
  666. apiVersion:
  667. code:
  668. details:
  669. causes:
  670. - field:
  671. message:
  672. reason:
  673. group:
  674. kind:
  675. name:
  676. retryAfterSeconds:
  677. uid:
  678. kind:
  679. message:
  680. metadata:
  681. resourceVersion:
  682. selfLink:
  683. reason:
  684. status:
  685. labels:
  686. [string]:
  687. name:
  688. namespace:
  689. ownerReferences:
  690. - apiVersion:
  691. blockOwnerDeletion:
  692. controller:
  693. kind:
  694. name:
  695. uid:
  696. resourceVersion:
  697. selfLink:
  698. uid:
  699. spec:
  700. activeDeadlineSeconds:
  701. affinity:
  702. nodeAffinity:
  703. preferredDuringSchedulingIgnoredDuringExecution:
  704. - preference:
  705. - matchExpressions:
  706. - - key:
  707. operator:
  708. values:
  709. - [string]:
  710. weight:
  711. requiredDuringSchedulingIgnoredDuringExecution:
  712. nodeSelectorTerms:
  713. - matchExpressions:
  714. - - key:
  715. operator:
  716. values:
  717. - [string]:
  718. podAffinity:
  719. preferredDuringSchedulingIgnoredDuringExecution:
  720. - podAffinityTerm:
  721. - labelSelector:
  722. - matchExpressions:
  723. - - key:
  724. operator:
  725. values:
  726. - [string]:
  727. matchLabels:
  728. [string]:
  729. namespaces:
  730. - [string]:
  731. topologyKey:
  732. weight:
  733. requiredDuringSchedulingIgnoredDuringExecution:
  734. - labelSelector:
  735. - matchExpressions:
  736. - - key:
  737. operator:
  738. values:
  739. - [string]:
  740. matchLabels:
  741. [string]:
  742. namespaces:
  743. - [string]:
  744. topologyKey:
  745. podAntiAffinity:
  746. preferredDuringSchedulingIgnoredDuringExecution:
  747. - podAffinityTerm:
  748. - labelSelector:
  749. - matchExpressions:
  750. - - key:
  751. operator:
  752. values:
  753. - [string]:
  754. matchLabels:
  755. [string]:
  756. namespaces:
  757. - [string]:
  758. topologyKey:
  759. weight:
  760. requiredDuringSchedulingIgnoredDuringExecution:
  761. - labelSelector:
  762. - matchExpressions:
  763. - - key:
  764. operator:
  765. values:
  766. - [string]:
  767. matchLabels:
  768. [string]:
  769. namespaces:
  770. - [string]:
  771. topologyKey:
  772. automountServiceAccountToken:
  773. containers:
  774. - args:
  775. - - [string]:
  776. command:
  777. - [string]:
  778. env:
  779. - name:
  780. value:
  781. valueFrom:
  782. configMapKeyRef:
  783. key:
  784. name:
  785. optional:
  786. fieldRef:
  787. apiVersion:
  788. fieldPath:
  789. resourceFieldRef:
  790. containerName:
  791. divisor:
  792. resource:
  793. secretKeyRef:
  794. key:
  795. name:
  796. optional:
  797. envFrom:
  798. - configMapRef:
  799. - name:
  800. optional:
  801. prefix:
  802. secretRef:
  803. name:
  804. optional:
  805. image:
  806. imagePullPolicy:
  807. lifecycle:
  808. postStart:
  809. exec:
  810. command:
  811. - [string]:
  812. httpGet:
  813. host:
  814. httpHeaders:
  815. - name:
  816. value:
  817. path:
  818. port:
  819. scheme:
  820. tcpSocket:
  821. host:
  822. port:
  823. preStop:
  824. exec:
  825. command:
  826. - [string]:
  827. httpGet:
  828. host:
  829. httpHeaders:
  830. - name:
  831. value:
  832. path:
  833. port:
  834. scheme:
  835. tcpSocket:
  836. host:
  837. port:
  838. livenessProbe:
  839. exec:
  840. command:
  841. - [string]:
  842. failureThreshold:
  843. httpGet:
  844. host:
  845. httpHeaders:
  846. - name:
  847. value:
  848. path:
  849. port:
  850. scheme:
  851. initialDelaySeconds:
  852. periodSeconds:
  853. successThreshold:
  854. tcpSocket:
  855. host:
  856. port:
  857. timeoutSeconds:
  858. name:
  859. ports:
  860. - containerPort:
  861. hostIP:
  862. hostPort:
  863. name:
  864. protocol:
  865. readinessProbe:
  866. exec:
  867. command:
  868. - [string]:
  869. failureThreshold:
  870. httpGet:
  871. host:
  872. httpHeaders:
  873. - name:
  874. value:
  875. path:
  876. port:
  877. scheme:
  878. initialDelaySeconds:
  879. periodSeconds:
  880. successThreshold:
  881. tcpSocket:
  882. host:
  883. port:
  884. timeoutSeconds:
  885. resources:
  886. limits:
  887. [string]:
  888. requests:
  889. [string]:
  890. securityContext:
  891. capabilities:
  892. add:
  893. - [string]:
  894. drop:
  895. - [string]:
  896. privileged:
  897. readOnlyRootFilesystem:
  898. runAsNonRoot:
  899. runAsUser:
  900. seLinuxOptions:
  901. level:
  902. role:
  903. type:
  904. user:
  905. stdin:
  906. stdinOnce:
  907. terminationMessagePath:
  908. terminationMessagePolicy:
  909. tty:
  910. volumeMounts:
  911. - mountPath:
  912. name:
  913. readOnly:
  914. subPath:
  915. workingDir:
  916. dnsPolicy:
  917. hostAliases:
  918. - hostnames:
  919. - - [string]:
  920. ip:
  921. hostIPC:
  922. hostNetwork:
  923. hostPID:
  924. hostname:
  925. imagePullSecrets:
  926. - name:
  927. initContainers:
  928. - args:
  929. - - [string]:
  930. command:
  931. - [string]:
  932. env:
  933. - name:
  934. value:
  935. valueFrom:
  936. configMapKeyRef:
  937. key:
  938. name:
  939. optional:
  940. fieldRef:
  941. apiVersion:
  942. fieldPath:
  943. resourceFieldRef:
  944. containerName:
  945. divisor:
  946. resource:
  947. secretKeyRef:
  948. key:
  949. name:
  950. optional:
  951. envFrom:
  952. - configMapRef:
  953. - name:
  954. optional:
  955. prefix:
  956. secretRef:
  957. name:
  958. optional:
  959. image:
  960. imagePullPolicy:
  961. lifecycle:
  962. postStart:
  963. exec:
  964. command:
  965. - [string]:
  966. httpGet:
  967. host:
  968. httpHeaders:
  969. - name:
  970. value:
  971. path:
  972. port:
  973. scheme:
  974. tcpSocket:
  975. host:
  976. port:
  977. preStop:
  978. exec:
  979. command:
  980. - [string]:
  981. httpGet:
  982. host:
  983. httpHeaders:
  984. - name:
  985. value:
  986. path:
  987. port:
  988. scheme:
  989. tcpSocket:
  990. host:
  991. port:
  992. livenessProbe:
  993. exec:
  994. command:
  995. - [string]:
  996. failureThreshold:
  997. httpGet:
  998. host:
  999. httpHeaders:
  1000. - name:
  1001. value:
  1002. path:
  1003. port:
  1004. scheme:
  1005. initialDelaySeconds:
  1006. periodSeconds:
  1007. successThreshold:
  1008. tcpSocket:
  1009. host:
  1010. port:
  1011. timeoutSeconds:
  1012. name:
  1013. ports:
  1014. - containerPort:
  1015. hostIP:
  1016. hostPort:
  1017. name:
  1018. protocol:
  1019. readinessProbe:
  1020. exec:
  1021. command:
  1022. - [string]:
  1023. failureThreshold:
  1024. httpGet:
  1025. host:
  1026. httpHeaders:
  1027. - name:
  1028. value:
  1029. path:
  1030. port:
  1031. scheme:
  1032. initialDelaySeconds:
  1033. periodSeconds:
  1034. successThreshold:
  1035. tcpSocket:
  1036. host:
  1037. port:
  1038. timeoutSeconds:
  1039. resources:
  1040. limits:
  1041. [string]:
  1042. requests:
  1043. [string]:
  1044. securityContext:
  1045. capabilities:
  1046. add:
  1047. - [string]:
  1048. drop:
  1049. - [string]:
  1050. privileged:
  1051. readOnlyRootFilesystem:
  1052. runAsNonRoot:
  1053. runAsUser:
  1054. seLinuxOptions:
  1055. level:
  1056. role:
  1057. type:
  1058. user:
  1059. stdin:
  1060. stdinOnce:
  1061. terminationMessagePath:
  1062. terminationMessagePolicy:
  1063. tty:
  1064. volumeMounts:
  1065. - mountPath:
  1066. name:
  1067. readOnly:
  1068. subPath:
  1069. workingDir:
  1070. nodeName:
  1071. nodeSelector:
  1072. [string]:
  1073. restartPolicy:
  1074. schedulerName:
  1075. securityContext:
  1076. fsGroup:
  1077. runAsNonRoot:
  1078. runAsUser:
  1079. seLinuxOptions:
  1080. level:
  1081. role:
  1082. type:
  1083. user:
  1084. supplementalGroups:
  1085. - [integer]:
  1086. serviceAccount:
  1087. serviceAccountName:
  1088. subdomain:
  1089. terminationGracePeriodSeconds:
  1090. tolerations:
  1091. - effect:
  1092. key:
  1093. operator:
  1094. tolerationSeconds:
  1095. value:
  1096. volumes:
  1097. - awsElasticBlockStore:
  1098. - fsType:
  1099. partition:
  1100. readOnly:
  1101. volumeID:
  1102. azureDisk:
  1103. cachingMode:
  1104. diskName:
  1105. diskURI:
  1106. fsType:
  1107. kind:
  1108. readOnly:
  1109. azureFile:
  1110. readOnly:
  1111. secretName:
  1112. shareName:
  1113. cephfs:
  1114. monitors:
  1115. - [string]:
  1116. path:
  1117. readOnly:
  1118. secretFile:
  1119. secretRef:
  1120. name:
  1121. user:
  1122. cinder:
  1123. fsType:
  1124. readOnly:
  1125. volumeID:
  1126. configMap:
  1127. defaultMode:
  1128. items:
  1129. - key:
  1130. mode:
  1131. path:
  1132. name:
  1133. optional:
  1134. downwardAPI:
  1135. defaultMode:
  1136. items:
  1137. - fieldRef:
  1138. - apiVersion:
  1139. fieldPath:
  1140. mode:
  1141. path:
  1142. resourceFieldRef:
  1143. containerName:
  1144. divisor:
  1145. resource:
  1146. emptyDir:
  1147. medium:
  1148. sizeLimit:
  1149. fc:
  1150. fsType:
  1151. lun:
  1152. readOnly:
  1153. targetWWNs:
  1154. - [string]:
  1155. flexVolume:
  1156. driver:
  1157. fsType:
  1158. options:
  1159. [string]:
  1160. readOnly:
  1161. secretRef:
  1162. name:
  1163. flocker:
  1164. datasetName:
  1165. datasetUUID:
  1166. gcePersistentDisk:
  1167. fsType:
  1168. partition:
  1169. pdName:
  1170. readOnly:
  1171. glusterfs:
  1172. endpoints:
  1173. path:
  1174. readOnly:
  1175. hostPath:
  1176. path:
  1177. iscsi:
  1178. chapAuthDiscovery:
  1179. chapAuthSession:
  1180. fsType:
  1181. iqn:
  1182. iscsiInterface:
  1183. lun:
  1184. portals:
  1185. - [string]:
  1186. readOnly:
  1187. secretRef:
  1188. name:
  1189. targetPortal:
  1190. name:
  1191. nfs:
  1192. path:
  1193. readOnly:
  1194. server:
  1195. persistentVolumeClaim:
  1196. claimName:
  1197. readOnly:
  1198. photonPersistentDisk:
  1199. fsType:
  1200. pdID:
  1201. portworxVolume:
  1202. fsType:
  1203. readOnly:
  1204. volumeID:
  1205. projected:
  1206. defaultMode:
  1207. sources:
  1208. - configMap:
  1209. - items:
  1210. - - key:
  1211. mode:
  1212. path:
  1213. name:
  1214. optional:
  1215. downwardAPI:
  1216. items:
  1217. - fieldRef:
  1218. - apiVersion:
  1219. fieldPath:
  1220. mode:
  1221. path:
  1222. resourceFieldRef:
  1223. containerName:
  1224. divisor:
  1225. resource:
  1226. secret:
  1227. items:
  1228. - key:
  1229. mode:
  1230. path:
  1231. name:
  1232. optional:
  1233. quobyte:
  1234. group:
  1235. readOnly:
  1236. registry:
  1237. user:
  1238. volume:
  1239. rbd:
  1240. fsType:
  1241. image:
  1242. keyring:
  1243. monitors:
  1244. - [string]:
  1245. pool:
  1246. readOnly:
  1247. secretRef:
  1248. name:
  1249. user:
  1250. scaleIO:
  1251. fsType:
  1252. gateway:
  1253. protectionDomain:
  1254. readOnly:
  1255. secretRef:
  1256. name:
  1257. sslEnabled:
  1258. storageMode:
  1259. storagePool:
  1260. system:
  1261. volumeName:
  1262. secret:
  1263. defaultMode:
  1264. items:
  1265. - key:
  1266. mode:
  1267. path:
  1268. optional:
  1269. secretName:
  1270. storageos:
  1271. fsType:
  1272. readOnly:
  1273. secretRef:
  1274. name:
  1275. volumeName:
  1276. volumeNamespace:
  1277. vsphereVolume:
  1278. fsType:
  1279. storagePolicyID:
  1280. storagePolicyName:
  1281. volumePath:

Operations

Create a PodSecurityPolicyReview

Create a PodSecurityPolicyReview

HTTP request

  1. POST /oapi/v1/podsecuritypolicyreviews HTTP/1.1
  2. Authorization: Bearer $TOKEN
  3. Accept: application/json
  4. Connection: close
  5. Content-Type: application/json'
  6. {
  7. "kind": "PodSecurityPolicyReview",
  8. "apiVersion": "v1",
  9. ...
  10. }

Curl request

  1. $ curl -k \
  2. -X POST \
  3. -d @- \
  4. -H "Authorization: Bearer $TOKEN" \
  5. -H 'Accept: application/json' \
  6. -H 'Content-Type: application/json' \
  7. https://$ENDPOINT/oapi/v1/podsecuritypolicyreviews <<'EOF'
  8. {
  9. "kind": "PodSecurityPolicyReview",
  10. "apiVersion": "v1",
  11. ...
  12. }
  13. EOF

HTTP body

ParameterSchema

body

v1.PodSecurityPolicyReview

Query parameters

ParameterDescription

pretty

If ‘true’, then the output is pretty printed.

Responses

HTTP CodeSchema

200 OK

v1.PodSecurityPolicyReview

401 Unauthorized

Consumes

  • */*

Produces

  • application/json

  • application/yaml

  • application/vnd.kubernetes.protobuf

Create a PodSecurityPolicyReview in a namespace

Create a PodSecurityPolicyReview

HTTP request

  1. POST /oapi/v1/namespaces/$NAMESPACE/podsecuritypolicyreviews HTTP/1.1
  2. Authorization: Bearer $TOKEN
  3. Accept: application/json
  4. Connection: close
  5. Content-Type: application/json'
  6. {
  7. "kind": "PodSecurityPolicyReview",
  8. "apiVersion": "v1",
  9. ...
  10. }

Curl request

  1. $ curl -k \
  2. -X POST \
  3. -d @- \
  4. -H "Authorization: Bearer $TOKEN" \
  5. -H 'Accept: application/json' \
  6. -H 'Content-Type: application/json' \
  7. https://$ENDPOINT/oapi/v1/namespaces/$NAMESPACE/podsecuritypolicyreviews <<'EOF'
  8. {
  9. "kind": "PodSecurityPolicyReview",
  10. "apiVersion": "v1",
  11. ...
  12. }
  13. EOF

HTTP body

ParameterSchema

body

v1.PodSecurityPolicyReview

Path parameters

ParameterDescription

namespace

object name and auth scope, such as for teams and projects

Query parameters

ParameterDescription

pretty

If ‘true’, then the output is pretty printed.

Responses

HTTP CodeSchema

200 OK

v1.PodSecurityPolicyReview

401 Unauthorized

Consumes

  • */*

Produces

  • application/json

  • application/yaml

  • application/vnd.kubernetes.protobuf