first commit

2019-12-01 00:52:25 +01:00 · 2019-12-01 00:52:25 +01:00 · 5c5e8dcba1
commit 5c5e8dcba1
11 changed files with 451 additions and 0 deletions
--- a/config/01-podsecuritypolicy.yaml
+++ b/config/01-podsecuritypolicy.yaml
@ -0,0 +1,29 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: pvc-reaper
+spec:
+  privileged: false
+  allowPrivilegeEscalation: false
+  requiredDropCapabilities:
+  - ALL
+  readOnlyRootFilesystem: true
+  volumes:
+  - 'secret'
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'RunAsAny'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+    - min: 1
+      max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+    - min: 1
+      max: 65535