v1.PodSecurityPolicySelfSubjectReview

Description

PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec

Object Schema

Expand or mouse-over a field for more information about it.

  1. apiVersion:
  2. kind:
  3. spec:
  4. template:
  5. metadata:
  6. annotations:
  7. [string]:
  8. clusterName:
  9. creationTimestamp:
  10. deletionGracePeriodSeconds:
  11. deletionTimestamp:
  12. finalizers:
  13. - [string]:
  14. generateName:
  15. generation:
  16. initializers:
  17. pending:
  18. - name:
  19. result:
  20. apiVersion:
  21. code:
  22. details:
  23. causes:
  24. - field:
  25. message:
  26. reason:
  27. group:
  28. kind:
  29. name:
  30. retryAfterSeconds:
  31. uid:
  32. kind:
  33. message:
  34. metadata:
  35. resourceVersion:
  36. selfLink:
  37. reason:
  38. status:
  39. labels:
  40. [string]:
  41. name:
  42. namespace:
  43. ownerReferences:
  44. - apiVersion:
  45. blockOwnerDeletion:
  46. controller:
  47. kind:
  48. name:
  49. uid:
  50. resourceVersion:
  51. selfLink:
  52. uid:
  53. spec:
  54. activeDeadlineSeconds:
  55. affinity:
  56. nodeAffinity:
  57. preferredDuringSchedulingIgnoredDuringExecution:
  58. - preference:
  59. - matchExpressions:
  60. - - key:
  61. operator:
  62. values:
  63. - [string]:
  64. weight:
  65. requiredDuringSchedulingIgnoredDuringExecution:
  66. nodeSelectorTerms:
  67. - matchExpressions:
  68. - - key:
  69. operator:
  70. values:
  71. - [string]:
  72. podAffinity:
  73. preferredDuringSchedulingIgnoredDuringExecution:
  74. - podAffinityTerm:
  75. - labelSelector:
  76. - matchExpressions:
  77. - - key:
  78. operator:
  79. values:
  80. - [string]:
  81. matchLabels:
  82. [string]:
  83. namespaces:
  84. - [string]:
  85. topologyKey:
  86. weight:
  87. requiredDuringSchedulingIgnoredDuringExecution:
  88. - labelSelector:
  89. - matchExpressions:
  90. - - key:
  91. operator:
  92. values:
  93. - [string]:
  94. matchLabels:
  95. [string]:
  96. namespaces:
  97. - [string]:
  98. topologyKey:
  99. podAntiAffinity:
  100. preferredDuringSchedulingIgnoredDuringExecution:
  101. - podAffinityTerm:
  102. - labelSelector:
  103. - matchExpressions:
  104. - - key:
  105. operator:
  106. values:
  107. - [string]:
  108. matchLabels:
  109. [string]:
  110. namespaces:
  111. - [string]:
  112. topologyKey:
  113. weight:
  114. requiredDuringSchedulingIgnoredDuringExecution:
  115. - labelSelector:
  116. - matchExpressions:
  117. - - key:
  118. operator:
  119. values:
  120. - [string]:
  121. matchLabels:
  122. [string]:
  123. namespaces:
  124. - [string]:
  125. topologyKey:
  126. automountServiceAccountToken:
  127. containers:
  128. - args:
  129. - - [string]:
  130. command:
  131. - [string]:
  132. env:
  133. - name:
  134. value:
  135. valueFrom:
  136. configMapKeyRef:
  137. key:
  138. name:
  139. optional:
  140. fieldRef:
  141. apiVersion:
  142. fieldPath:
  143. resourceFieldRef:
  144. containerName:
  145. divisor:
  146. resource:
  147. secretKeyRef:
  148. key:
  149. name:
  150. optional:
  151. envFrom:
  152. - configMapRef:
  153. - name:
  154. optional:
  155. prefix:
  156. secretRef:
  157. name:
  158. optional:
  159. image:
  160. imagePullPolicy:
  161. lifecycle:
  162. postStart:
  163. exec:
  164. command:
  165. - [string]:
  166. httpGet:
  167. host:
  168. httpHeaders:
  169. - name:
  170. value:
  171. path:
  172. port:
  173. scheme:
  174. tcpSocket:
  175. host:
  176. port:
  177. preStop:
  178. exec:
  179. command:
  180. - [string]:
  181. httpGet:
  182. host:
  183. httpHeaders:
  184. - name:
  185. value:
  186. path:
  187. port:
  188. scheme:
  189. tcpSocket:
  190. host:
  191. port:
  192. livenessProbe:
  193. exec:
  194. command:
  195. - [string]:
  196. failureThreshold:
  197. httpGet:
  198. host:
  199. httpHeaders:
  200. - name:
  201. value:
  202. path:
  203. port:
  204. scheme:
  205. initialDelaySeconds:
  206. periodSeconds:
  207. successThreshold:
  208. tcpSocket:
  209. host:
  210. port:
  211. timeoutSeconds:
  212. name:
  213. ports:
  214. - containerPort:
  215. hostIP:
  216. hostPort:
  217. name:
  218. protocol:
  219. readinessProbe:
  220. exec:
  221. command:
  222. - [string]:
  223. failureThreshold:
  224. httpGet:
  225. host:
  226. httpHeaders:
  227. - name:
  228. value:
  229. path:
  230. port:
  231. scheme:
  232. initialDelaySeconds:
  233. periodSeconds:
  234. successThreshold:
  235. tcpSocket:
  236. host:
  237. port:
  238. timeoutSeconds:
  239. resources:
  240. limits:
  241. [string]:
  242. requests:
  243. [string]:
  244. securityContext:
  245. capabilities:
  246. add:
  247. - [string]:
  248. drop:
  249. - [string]:
  250. privileged:
  251. readOnlyRootFilesystem:
  252. runAsNonRoot:
  253. runAsUser:
  254. seLinuxOptions:
  255. level:
  256. role:
  257. type:
  258. user:
  259. stdin:
  260. stdinOnce:
  261. terminationMessagePath:
  262. terminationMessagePolicy:
  263. tty:
  264. volumeMounts:
  265. - mountPath:
  266. name:
  267. readOnly:
  268. subPath:
  269. workingDir:
  270. dnsPolicy:
  271. hostAliases:
  272. - hostnames:
  273. - - [string]:
  274. ip:
  275. hostIPC:
  276. hostNetwork:
  277. hostPID:
  278. hostname:
  279. imagePullSecrets:
  280. - name:
  281. initContainers:
  282. - args:
  283. - - [string]:
  284. command:
  285. - [string]:
  286. env:
  287. - name:
  288. value:
  289. valueFrom:
  290. configMapKeyRef:
  291. key:
  292. name:
  293. optional:
  294. fieldRef:
  295. apiVersion:
  296. fieldPath:
  297. resourceFieldRef:
  298. containerName:
  299. divisor:
  300. resource:
  301. secretKeyRef:
  302. key:
  303. name:
  304. optional:
  305. envFrom:
  306. - configMapRef:
  307. - name:
  308. optional:
  309. prefix:
  310. secretRef:
  311. name:
  312. optional:
  313. image:
  314. imagePullPolicy:
  315. lifecycle:
  316. postStart:
  317. exec:
  318. command:
  319. - [string]:
  320. httpGet:
  321. host:
  322. httpHeaders:
  323. - name:
  324. value:
  325. path:
  326. port:
  327. scheme:
  328. tcpSocket:
  329. host:
  330. port:
  331. preStop:
  332. exec:
  333. command:
  334. - [string]:
  335. httpGet:
  336. host:
  337. httpHeaders:
  338. - name:
  339. value:
  340. path:
  341. port:
  342. scheme:
  343. tcpSocket:
  344. host:
  345. port:
  346. livenessProbe:
  347. exec:
  348. command:
  349. - [string]:
  350. failureThreshold:
  351. httpGet:
  352. host:
  353. httpHeaders:
  354. - name:
  355. value:
  356. path:
  357. port:
  358. scheme:
  359. initialDelaySeconds:
  360. periodSeconds:
  361. successThreshold:
  362. tcpSocket:
  363. host:
  364. port:
  365. timeoutSeconds:
  366. name:
  367. ports:
  368. - containerPort:
  369. hostIP:
  370. hostPort:
  371. name:
  372. protocol:
  373. readinessProbe:
  374. exec:
  375. command:
  376. - [string]:
  377. failureThreshold:
  378. httpGet:
  379. host:
  380. httpHeaders:
  381. - name:
  382. value:
  383. path:
  384. port:
  385. scheme:
  386. initialDelaySeconds:
  387. periodSeconds:
  388. successThreshold:
  389. tcpSocket:
  390. host:
  391. port:
  392. timeoutSeconds:
  393. resources:
  394. limits:
  395. [string]:
  396. requests:
  397. [string]:
  398. securityContext:
  399. capabilities:
  400. add:
  401. - [string]:
  402. drop:
  403. - [string]:
  404. privileged:
  405. readOnlyRootFilesystem:
  406. runAsNonRoot:
  407. runAsUser:
  408. seLinuxOptions:
  409. level:
  410. role:
  411. type:
  412. user:
  413. stdin:
  414. stdinOnce:
  415. terminationMessagePath:
  416. terminationMessagePolicy:
  417. tty:
  418. volumeMounts:
  419. - mountPath:
  420. name:
  421. readOnly:
  422. subPath:
  423. workingDir:
  424. nodeName:
  425. nodeSelector:
  426. [string]:
  427. restartPolicy:
  428. schedulerName:
  429. securityContext:
  430. fsGroup:
  431. runAsNonRoot:
  432. runAsUser:
  433. seLinuxOptions:
  434. level:
  435. role:
  436. type:
  437. user:
  438. supplementalGroups:
  439. - [integer]:
  440. serviceAccount:
  441. serviceAccountName:
  442. subdomain:
  443. terminationGracePeriodSeconds:
  444. tolerations:
  445. - effect:
  446. key:
  447. operator:
  448. tolerationSeconds:
  449. value:
  450. volumes:
  451. - awsElasticBlockStore:
  452. - fsType:
  453. partition:
  454. readOnly:
  455. volumeID:
  456. azureDisk:
  457. cachingMode:
  458. diskName:
  459. diskURI:
  460. fsType:
  461. kind:
  462. readOnly:
  463. azureFile:
  464. readOnly:
  465. secretName:
  466. shareName:
  467. cephfs:
  468. monitors:
  469. - [string]:
  470. path:
  471. readOnly:
  472. secretFile:
  473. secretRef:
  474. name:
  475. user:
  476. cinder:
  477. fsType:
  478. readOnly:
  479. volumeID:
  480. configMap:
  481. defaultMode:
  482. items:
  483. - key:
  484. mode:
  485. path:
  486. name:
  487. optional:
  488. downwardAPI:
  489. defaultMode:
  490. items:
  491. - fieldRef:
  492. - apiVersion:
  493. fieldPath:
  494. mode:
  495. path:
  496. resourceFieldRef:
  497. containerName:
  498. divisor:
  499. resource:
  500. emptyDir:
  501. medium:
  502. sizeLimit:
  503. fc:
  504. fsType:
  505. lun:
  506. readOnly:
  507. targetWWNs:
  508. - [string]:
  509. flexVolume:
  510. driver:
  511. fsType:
  512. options:
  513. [string]:
  514. readOnly:
  515. secretRef:
  516. name:
  517. flocker:
  518. datasetName:
  519. datasetUUID:
  520. gcePersistentDisk:
  521. fsType:
  522. partition:
  523. pdName:
  524. readOnly:
  525. glusterfs:
  526. endpoints:
  527. path:
  528. readOnly:
  529. hostPath:
  530. path:
  531. iscsi:
  532. chapAuthDiscovery:
  533. chapAuthSession:
  534. fsType:
  535. iqn:
  536. iscsiInterface:
  537. lun:
  538. portals:
  539. - [string]:
  540. readOnly:
  541. secretRef:
  542. name:
  543. targetPortal:
  544. name:
  545. nfs:
  546. path:
  547. readOnly:
  548. server:
  549. persistentVolumeClaim:
  550. claimName:
  551. readOnly:
  552. photonPersistentDisk:
  553. fsType:
  554. pdID:
  555. portworxVolume:
  556. fsType:
  557. readOnly:
  558. volumeID:
  559. projected:
  560. defaultMode:
  561. sources:
  562. - configMap:
  563. - items:
  564. - - key:
  565. mode:
  566. path:
  567. name:
  568. optional:
  569. downwardAPI:
  570. items:
  571. - fieldRef:
  572. - apiVersion:
  573. fieldPath:
  574. mode:
  575. path:
  576. resourceFieldRef:
  577. containerName:
  578. divisor:
  579. resource:
  580. secret:
  581. items:
  582. - key:
  583. mode:
  584. path:
  585. name:
  586. optional:
  587. quobyte:
  588. group:
  589. readOnly:
  590. registry:
  591. user:
  592. volume:
  593. rbd:
  594. fsType:
  595. image:
  596. keyring:
  597. monitors:
  598. - [string]:
  599. pool:
  600. readOnly:
  601. secretRef:
  602. name:
  603. user:
  604. scaleIO:
  605. fsType:
  606. gateway:
  607. protectionDomain:
  608. readOnly:
  609. secretRef:
  610. name:
  611. sslEnabled:
  612. storageMode:
  613. storagePool:
  614. system:
  615. volumeName:
  616. secret:
  617. defaultMode:
  618. items:
  619. - key:
  620. mode:
  621. path:
  622. optional:
  623. secretName:
  624. storageos:
  625. fsType:
  626. readOnly:
  627. secretRef:
  628. name:
  629. volumeName:
  630. volumeNamespace:
  631. vsphereVolume:
  632. fsType:
  633. storagePolicyID:
  634. storagePolicyName:
  635. volumePath:
  636. status:
  637. allowedBy:
  638. apiVersion:
  639. fieldPath:
  640. kind:
  641. name:
  642. namespace:
  643. resourceVersion:
  644. uid:
  645. reason:
  646. template:
  647. metadata:
  648. annotations:
  649. [string]:
  650. clusterName:
  651. creationTimestamp:
  652. deletionGracePeriodSeconds:
  653. deletionTimestamp:
  654. finalizers:
  655. - [string]:
  656. generateName:
  657. generation:
  658. initializers:
  659. pending:
  660. - name:
  661. result:
  662. apiVersion:
  663. code:
  664. details:
  665. causes:
  666. - field:
  667. message:
  668. reason:
  669. group:
  670. kind:
  671. name:
  672. retryAfterSeconds:
  673. uid:
  674. kind:
  675. message:
  676. metadata:
  677. resourceVersion:
  678. selfLink:
  679. reason:
  680. status:
  681. labels:
  682. [string]:
  683. name:
  684. namespace:
  685. ownerReferences:
  686. - apiVersion:
  687. blockOwnerDeletion:
  688. controller:
  689. kind:
  690. name:
  691. uid:
  692. resourceVersion:
  693. selfLink:
  694. uid:
  695. spec:
  696. activeDeadlineSeconds:
  697. affinity:
  698. nodeAffinity:
  699. preferredDuringSchedulingIgnoredDuringExecution:
  700. - preference:
  701. - matchExpressions:
  702. - - key:
  703. operator:
  704. values:
  705. - [string]:
  706. weight:
  707. requiredDuringSchedulingIgnoredDuringExecution:
  708. nodeSelectorTerms:
  709. - matchExpressions:
  710. - - key:
  711. operator:
  712. values:
  713. - [string]:
  714. podAffinity:
  715. preferredDuringSchedulingIgnoredDuringExecution:
  716. - podAffinityTerm:
  717. - labelSelector:
  718. - matchExpressions:
  719. - - key:
  720. operator:
  721. values:
  722. - [string]:
  723. matchLabels:
  724. [string]:
  725. namespaces:
  726. - [string]:
  727. topologyKey:
  728. weight:
  729. requiredDuringSchedulingIgnoredDuringExecution:
  730. - labelSelector:
  731. - matchExpressions:
  732. - - key:
  733. operator:
  734. values:
  735. - [string]:
  736. matchLabels:
  737. [string]:
  738. namespaces:
  739. - [string]:
  740. topologyKey:
  741. podAntiAffinity:
  742. preferredDuringSchedulingIgnoredDuringExecution:
  743. - podAffinityTerm:
  744. - labelSelector:
  745. - matchExpressions:
  746. - - key:
  747. operator:
  748. values:
  749. - [string]:
  750. matchLabels:
  751. [string]:
  752. namespaces:
  753. - [string]:
  754. topologyKey:
  755. weight:
  756. requiredDuringSchedulingIgnoredDuringExecution:
  757. - labelSelector:
  758. - matchExpressions:
  759. - - key:
  760. operator:
  761. values:
  762. - [string]:
  763. matchLabels:
  764. [string]:
  765. namespaces:
  766. - [string]:
  767. topologyKey:
  768. automountServiceAccountToken:
  769. containers:
  770. - args:
  771. - - [string]:
  772. command:
  773. - [string]:
  774. env:
  775. - name:
  776. value:
  777. valueFrom:
  778. configMapKeyRef:
  779. key:
  780. name:
  781. optional:
  782. fieldRef:
  783. apiVersion:
  784. fieldPath:
  785. resourceFieldRef:
  786. containerName:
  787. divisor:
  788. resource:
  789. secretKeyRef:
  790. key:
  791. name:
  792. optional:
  793. envFrom:
  794. - configMapRef:
  795. - name:
  796. optional:
  797. prefix:
  798. secretRef:
  799. name:
  800. optional:
  801. image:
  802. imagePullPolicy:
  803. lifecycle:
  804. postStart:
  805. exec:
  806. command:
  807. - [string]:
  808. httpGet:
  809. host:
  810. httpHeaders:
  811. - name:
  812. value:
  813. path:
  814. port:
  815. scheme:
  816. tcpSocket:
  817. host:
  818. port:
  819. preStop:
  820. exec:
  821. command:
  822. - [string]:
  823. httpGet:
  824. host:
  825. httpHeaders:
  826. - name:
  827. value:
  828. path:
  829. port:
  830. scheme:
  831. tcpSocket:
  832. host:
  833. port:
  834. livenessProbe:
  835. exec:
  836. command:
  837. - [string]:
  838. failureThreshold:
  839. httpGet:
  840. host:
  841. httpHeaders:
  842. - name:
  843. value:
  844. path:
  845. port:
  846. scheme:
  847. initialDelaySeconds:
  848. periodSeconds:
  849. successThreshold:
  850. tcpSocket:
  851. host:
  852. port:
  853. timeoutSeconds:
  854. name:
  855. ports:
  856. - containerPort:
  857. hostIP:
  858. hostPort:
  859. name:
  860. protocol:
  861. readinessProbe:
  862. exec:
  863. command:
  864. - [string]:
  865. failureThreshold:
  866. httpGet:
  867. host:
  868. httpHeaders:
  869. - name:
  870. value:
  871. path:
  872. port:
  873. scheme:
  874. initialDelaySeconds:
  875. periodSeconds:
  876. successThreshold:
  877. tcpSocket:
  878. host:
  879. port:
  880. timeoutSeconds:
  881. resources:
  882. limits:
  883. [string]:
  884. requests:
  885. [string]:
  886. securityContext:
  887. capabilities:
  888. add:
  889. - [string]:
  890. drop:
  891. - [string]:
  892. privileged:
  893. readOnlyRootFilesystem:
  894. runAsNonRoot:
  895. runAsUser:
  896. seLinuxOptions:
  897. level:
  898. role:
  899. type:
  900. user:
  901. stdin:
  902. stdinOnce:
  903. terminationMessagePath:
  904. terminationMessagePolicy:
  905. tty:
  906. volumeMounts:
  907. - mountPath:
  908. name:
  909. readOnly:
  910. subPath:
  911. workingDir:
  912. dnsPolicy:
  913. hostAliases:
  914. - hostnames:
  915. - - [string]:
  916. ip:
  917. hostIPC:
  918. hostNetwork:
  919. hostPID:
  920. hostname:
  921. imagePullSecrets:
  922. - name:
  923. initContainers:
  924. - args:
  925. - - [string]:
  926. command:
  927. - [string]:
  928. env:
  929. - name:
  930. value:
  931. valueFrom:
  932. configMapKeyRef:
  933. key:
  934. name:
  935. optional:
  936. fieldRef:
  937. apiVersion:
  938. fieldPath:
  939. resourceFieldRef:
  940. containerName:
  941. divisor:
  942. resource:
  943. secretKeyRef:
  944. key:
  945. name:
  946. optional:
  947. envFrom:
  948. - configMapRef:
  949. - name:
  950. optional:
  951. prefix:
  952. secretRef:
  953. name:
  954. optional:
  955. image:
  956. imagePullPolicy:
  957. lifecycle:
  958. postStart:
  959. exec:
  960. command:
  961. - [string]:
  962. httpGet:
  963. host:
  964. httpHeaders:
  965. - name:
  966. value:
  967. path:
  968. port:
  969. scheme:
  970. tcpSocket:
  971. host:
  972. port:
  973. preStop:
  974. exec:
  975. command:
  976. - [string]:
  977. httpGet:
  978. host:
  979. httpHeaders:
  980. - name:
  981. value:
  982. path:
  983. port:
  984. scheme:
  985. tcpSocket:
  986. host:
  987. port:
  988. livenessProbe:
  989. exec:
  990. command:
  991. - [string]:
  992. failureThreshold:
  993. httpGet:
  994. host:
  995. httpHeaders:
  996. - name:
  997. value:
  998. path:
  999. port:
  1000. scheme:
  1001. initialDelaySeconds:
  1002. periodSeconds:
  1003. successThreshold:
  1004. tcpSocket:
  1005. host:
  1006. port:
  1007. timeoutSeconds:
  1008. name:
  1009. ports:
  1010. - containerPort:
  1011. hostIP:
  1012. hostPort:
  1013. name:
  1014. protocol:
  1015. readinessProbe:
  1016. exec:
  1017. command:
  1018. - [string]:
  1019. failureThreshold:
  1020. httpGet:
  1021. host:
  1022. httpHeaders:
  1023. - name:
  1024. value:
  1025. path:
  1026. port:
  1027. scheme:
  1028. initialDelaySeconds:
  1029. periodSeconds:
  1030. successThreshold:
  1031. tcpSocket:
  1032. host:
  1033. port:
  1034. timeoutSeconds:
  1035. resources:
  1036. limits:
  1037. [string]:
  1038. requests:
  1039. [string]:
  1040. securityContext:
  1041. capabilities:
  1042. add:
  1043. - [string]:
  1044. drop:
  1045. - [string]:
  1046. privileged:
  1047. readOnlyRootFilesystem:
  1048. runAsNonRoot:
  1049. runAsUser:
  1050. seLinuxOptions:
  1051. level:
  1052. role:
  1053. type:
  1054. user:
  1055. stdin:
  1056. stdinOnce:
  1057. terminationMessagePath:
  1058. terminationMessagePolicy:
  1059. tty:
  1060. volumeMounts:
  1061. - mountPath:
  1062. name:
  1063. readOnly:
  1064. subPath:
  1065. workingDir:
  1066. nodeName:
  1067. nodeSelector:
  1068. [string]:
  1069. restartPolicy:
  1070. schedulerName:
  1071. securityContext:
  1072. fsGroup:
  1073. runAsNonRoot:
  1074. runAsUser:
  1075. seLinuxOptions:
  1076. level:
  1077. role:
  1078. type:
  1079. user:
  1080. supplementalGroups:
  1081. - [integer]:
  1082. serviceAccount:
  1083. serviceAccountName:
  1084. subdomain:
  1085. terminationGracePeriodSeconds:
  1086. tolerations:
  1087. - effect:
  1088. key:
  1089. operator:
  1090. tolerationSeconds:
  1091. value:
  1092. volumes:
  1093. - awsElasticBlockStore:
  1094. - fsType:
  1095. partition:
  1096. readOnly:
  1097. volumeID:
  1098. azureDisk:
  1099. cachingMode:
  1100. diskName:
  1101. diskURI:
  1102. fsType:
  1103. kind:
  1104. readOnly:
  1105. azureFile:
  1106. readOnly:
  1107. secretName:
  1108. shareName:
  1109. cephfs:
  1110. monitors:
  1111. - [string]:
  1112. path:
  1113. readOnly:
  1114. secretFile:
  1115. secretRef:
  1116. name:
  1117. user:
  1118. cinder:
  1119. fsType:
  1120. readOnly:
  1121. volumeID:
  1122. configMap:
  1123. defaultMode:
  1124. items:
  1125. - key:
  1126. mode:
  1127. path:
  1128. name:
  1129. optional:
  1130. downwardAPI:
  1131. defaultMode:
  1132. items:
  1133. - fieldRef:
  1134. - apiVersion:
  1135. fieldPath:
  1136. mode:
  1137. path:
  1138. resourceFieldRef:
  1139. containerName:
  1140. divisor:
  1141. resource:
  1142. emptyDir:
  1143. medium:
  1144. sizeLimit:
  1145. fc:
  1146. fsType:
  1147. lun:
  1148. readOnly:
  1149. targetWWNs:
  1150. - [string]:
  1151. flexVolume:
  1152. driver:
  1153. fsType:
  1154. options:
  1155. [string]:
  1156. readOnly:
  1157. secretRef:
  1158. name:
  1159. flocker:
  1160. datasetName:
  1161. datasetUUID:
  1162. gcePersistentDisk:
  1163. fsType:
  1164. partition:
  1165. pdName:
  1166. readOnly:
  1167. glusterfs:
  1168. endpoints:
  1169. path:
  1170. readOnly:
  1171. hostPath:
  1172. path:
  1173. iscsi:
  1174. chapAuthDiscovery:
  1175. chapAuthSession:
  1176. fsType:
  1177. iqn:
  1178. iscsiInterface:
  1179. lun:
  1180. portals:
  1181. - [string]:
  1182. readOnly:
  1183. secretRef:
  1184. name:
  1185. targetPortal:
  1186. name:
  1187. nfs:
  1188. path:
  1189. readOnly:
  1190. server:
  1191. persistentVolumeClaim:
  1192. claimName:
  1193. readOnly:
  1194. photonPersistentDisk:
  1195. fsType:
  1196. pdID:
  1197. portworxVolume:
  1198. fsType:
  1199. readOnly:
  1200. volumeID:
  1201. projected:
  1202. defaultMode:
  1203. sources:
  1204. - configMap:
  1205. - items:
  1206. - - key:
  1207. mode:
  1208. path:
  1209. name:
  1210. optional:
  1211. downwardAPI:
  1212. items:
  1213. - fieldRef:
  1214. - apiVersion:
  1215. fieldPath:
  1216. mode:
  1217. path:
  1218. resourceFieldRef:
  1219. containerName:
  1220. divisor:
  1221. resource:
  1222. secret:
  1223. items:
  1224. - key:
  1225. mode:
  1226. path:
  1227. name:
  1228. optional:
  1229. quobyte:
  1230. group:
  1231. readOnly:
  1232. registry:
  1233. user:
  1234. volume:
  1235. rbd:
  1236. fsType:
  1237. image:
  1238. keyring:
  1239. monitors:
  1240. - [string]:
  1241. pool:
  1242. readOnly:
  1243. secretRef:
  1244. name:
  1245. user:
  1246. scaleIO:
  1247. fsType:
  1248. gateway:
  1249. protectionDomain:
  1250. readOnly:
  1251. secretRef:
  1252. name:
  1253. sslEnabled:
  1254. storageMode:
  1255. storagePool:
  1256. system:
  1257. volumeName:
  1258. secret:
  1259. defaultMode:
  1260. items:
  1261. - key:
  1262. mode:
  1263. path:
  1264. optional:
  1265. secretName:
  1266. storageos:
  1267. fsType:
  1268. readOnly:
  1269. secretRef:
  1270. name:
  1271. volumeName:
  1272. volumeNamespace:
  1273. vsphereVolume:
  1274. fsType:
  1275. storagePolicyID:
  1276. storagePolicyName:
  1277. volumePath:

Operations

Create a PodSecurityPolicySelfSubjectReview

Create a PodSecurityPolicySelfSubjectReview

HTTP request

  1. POST /oapi/v1/podsecuritypolicyselfsubjectreviews HTTP/1.1
  2. Authorization: Bearer $TOKEN
  3. Accept: application/json
  4. Connection: close
  5. Content-Type: application/json'
  6. {
  7. "kind": "PodSecurityPolicySelfSubjectReview",
  8. "apiVersion": "v1",
  9. ...
  10. }

Curl request

  1. $ curl -k \
  2. -X POST \
  3. -d @- \
  4. -H "Authorization: Bearer $TOKEN" \
  5. -H 'Accept: application/json' \
  6. -H 'Content-Type: application/json' \
  7. https://$ENDPOINT/oapi/v1/podsecuritypolicyselfsubjectreviews <<'EOF'
  8. {
  9. "kind": "PodSecurityPolicySelfSubjectReview",
  10. "apiVersion": "v1",
  11. ...
  12. }
  13. EOF

HTTP body

ParameterSchema

body

v1.PodSecurityPolicySelfSubjectReview

Query parameters

ParameterDescription

pretty

If ‘true’, then the output is pretty printed.

Responses

HTTP CodeSchema

200 OK

v1.PodSecurityPolicySelfSubjectReview

401 Unauthorized

Consumes

  • */*

Produces

  • application/json

  • application/yaml

  • application/vnd.kubernetes.protobuf

Create a PodSecurityPolicySelfSubjectReview in a namespace

Create a PodSecurityPolicySelfSubjectReview

HTTP request

  1. POST /oapi/v1/namespaces/$NAMESPACE/podsecuritypolicyselfsubjectreviews HTTP/1.1
  2. Authorization: Bearer $TOKEN
  3. Accept: application/json
  4. Connection: close
  5. Content-Type: application/json'
  6. {
  7. "kind": "PodSecurityPolicySelfSubjectReview",
  8. "apiVersion": "v1",
  9. ...
  10. }

Curl request

  1. $ curl -k \
  2. -X POST \
  3. -d @- \
  4. -H "Authorization: Bearer $TOKEN" \
  5. -H 'Accept: application/json' \
  6. -H 'Content-Type: application/json' \
  7. https://$ENDPOINT/oapi/v1/namespaces/$NAMESPACE/podsecuritypolicyselfsubjectreviews <<'EOF'
  8. {
  9. "kind": "PodSecurityPolicySelfSubjectReview",
  10. "apiVersion": "v1",
  11. ...
  12. }
  13. EOF

HTTP body

ParameterSchema

body

v1.PodSecurityPolicySelfSubjectReview

Path parameters

ParameterDescription

namespace

object name and auth scope, such as for teams and projects

Query parameters

ParameterDescription

pretty

If ‘true’, then the output is pretty printed.

Responses

HTTP CodeSchema

200 OK

v1.PodSecurityPolicySelfSubjectReview

401 Unauthorized

Consumes

  • */*

Produces

  • application/json

  • application/yaml

  • application/vnd.kubernetes.protobuf