"description":"AllowedFlexVolume represents a single Flexvolume that is allowed to be used.",
"description":"AllowedFlexVolume represents a single Flexvolume that is allowed to be used. Deprecated: use AllowedFlexVolume from policy API Group instead.",
"required":[
"required":[
"driver"
"driver"
],
],
...
@@ -80115,7 +80115,7 @@
...
@@ -80115,7 +80115,7 @@
}
}
},
},
"io.k8s.api.extensions.v1beta1.AllowedHostPath":{
"io.k8s.api.extensions.v1beta1.AllowedHostPath":{
"description":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.",
"description":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined. Deprecated: use AllowedHostPath from policy API Group instead.",
"properties":{
"properties":{
"pathPrefix":{
"pathPrefix":{
"description":"pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.\n\nExamples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`",
"description":"pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.\n\nExamples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`",
"description":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy.",
"description":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use FSGroupStrategyOptions from policy API Group instead.",
"properties":{
"properties":{
"ranges":{
"ranges":{
"description":"ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.",
"description":"ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.",
...
@@ -80627,7 +80627,7 @@
...
@@ -80627,7 +80627,7 @@
}
}
},
},
"io.k8s.api.extensions.v1beta1.HostPortRange":{
"io.k8s.api.extensions.v1beta1.HostPortRange":{
"description":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.",
"description":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined. Deprecated: use HostPortRange from policy API Group instead.",
"required":[
"required":[
"min",
"min",
"max"
"max"
...
@@ -80646,7 +80646,7 @@
...
@@ -80646,7 +80646,7 @@
}
}
},
},
"io.k8s.api.extensions.v1beta1.IDRange":{
"io.k8s.api.extensions.v1beta1.IDRange":{
"description":"IDRange provides a min/max of an allowed range of IDs.",
"description":"IDRange provides a min/max of an allowed range of IDs. Deprecated: use IDRange from policy API Group instead.",
"description":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
"description":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated: use PodSecurityPolicy from policy API Group instead.",
"properties":{
"properties":{
"apiVersion":{
"apiVersion":{
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
"description":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.",
"description":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.",
"description":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use SELinuxStrategyOptions from policy API Group instead.",
"description":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",
"description":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.",
"properties":{
"properties":{
"ranges":{
"ranges":{
"description":"ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.",
"description":"ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.",
"description":"PodSecurityPolicyList is a list of PodSecurityPolicy objects.",
"description":"PodSecurityPolicyList is a list of PodSecurityPolicy objects. Deprecated: use PodSecurityPolicyList from policy API Group instead.",
"required":[
"required":[
"items"
"items"
],
],
...
@@ -10216,7 +10216,7 @@
...
@@ -10216,7 +10216,7 @@
},
},
"v1beta1.PodSecurityPolicy":{
"v1beta1.PodSecurityPolicy":{
"id":"v1beta1.PodSecurityPolicy",
"id":"v1beta1.PodSecurityPolicy",
"description":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
"description":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated: use PodSecurityPolicy from policy API Group instead.",
"properties":{
"properties":{
"kind":{
"kind":{
"type":"string",
"type":"string",
...
@@ -10238,7 +10238,7 @@
...
@@ -10238,7 +10238,7 @@
},
},
"v1beta1.PodSecurityPolicySpec":{
"v1beta1.PodSecurityPolicySpec":{
"id":"v1beta1.PodSecurityPolicySpec",
"id":"v1beta1.PodSecurityPolicySpec",
"description":"PodSecurityPolicySpec defines the policy enforced.",
"description":"PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.",
"required":[
"required":[
"seLinux",
"seLinux",
"runAsUser",
"runAsUser",
...
@@ -10347,7 +10347,7 @@
...
@@ -10347,7 +10347,7 @@
},
},
"v1beta1.HostPortRange":{
"v1beta1.HostPortRange":{
"id":"v1beta1.HostPortRange",
"id":"v1beta1.HostPortRange",
"description":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.",
"description":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined. Deprecated: use HostPortRange from policy API Group instead.",
"required":[
"required":[
"min",
"min",
"max"
"max"
...
@@ -10367,7 +10367,7 @@
...
@@ -10367,7 +10367,7 @@
},
},
"v1beta1.SELinuxStrategyOptions":{
"v1beta1.SELinuxStrategyOptions":{
"id":"v1beta1.SELinuxStrategyOptions",
"id":"v1beta1.SELinuxStrategyOptions",
"description":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.",
"description":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use SELinuxStrategyOptions from policy API Group instead.",
"required":[
"required":[
"rule"
"rule"
],
],
...
@@ -10384,7 +10384,7 @@
...
@@ -10384,7 +10384,7 @@
},
},
"v1beta1.RunAsUserStrategyOptions":{
"v1beta1.RunAsUserStrategyOptions":{
"id":"v1beta1.RunAsUserStrategyOptions",
"id":"v1beta1.RunAsUserStrategyOptions",
"description":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
"description":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.",
"required":[
"required":[
"rule"
"rule"
],
],
...
@@ -10404,7 +10404,7 @@
...
@@ -10404,7 +10404,7 @@
},
},
"v1beta1.IDRange":{
"v1beta1.IDRange":{
"id":"v1beta1.IDRange",
"id":"v1beta1.IDRange",
"description":"IDRange provides a min/max of an allowed range of IDs.",
"description":"IDRange provides a min/max of an allowed range of IDs. Deprecated: use IDRange from policy API Group instead.",
"required":[
"required":[
"min",
"min",
"max"
"max"
...
@@ -10424,7 +10424,7 @@
...
@@ -10424,7 +10424,7 @@
},
},
"v1beta1.SupplementalGroupsStrategyOptions":{
"v1beta1.SupplementalGroupsStrategyOptions":{
"id":"v1beta1.SupplementalGroupsStrategyOptions",
"id":"v1beta1.SupplementalGroupsStrategyOptions",
"description":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",
"description":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.",
"properties":{
"properties":{
"rule":{
"rule":{
"type":"string",
"type":"string",
...
@@ -10441,7 +10441,7 @@
...
@@ -10441,7 +10441,7 @@
},
},
"v1beta1.FSGroupStrategyOptions":{
"v1beta1.FSGroupStrategyOptions":{
"id":"v1beta1.FSGroupStrategyOptions",
"id":"v1beta1.FSGroupStrategyOptions",
"description":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy.",
"description":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use FSGroupStrategyOptions from policy API Group instead.",
"properties":{
"properties":{
"rule":{
"rule":{
"type":"string",
"type":"string",
...
@@ -10458,7 +10458,7 @@
...
@@ -10458,7 +10458,7 @@
},
},
"v1beta1.AllowedHostPath":{
"v1beta1.AllowedHostPath":{
"id":"v1beta1.AllowedHostPath",
"id":"v1beta1.AllowedHostPath",
"description":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.",
"description":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined. Deprecated: use AllowedHostPath from policy API Group instead.",
"properties":{
"properties":{
"pathPrefix":{
"pathPrefix":{
"type":"string",
"type":"string",
...
@@ -10468,7 +10468,7 @@
...
@@ -10468,7 +10468,7 @@
},
},
"v1beta1.AllowedFlexVolume":{
"v1beta1.AllowedFlexVolume":{
"id":"v1beta1.AllowedFlexVolume",
"id":"v1beta1.AllowedFlexVolume",
"description":"AllowedFlexVolume represents a single Flexvolume that is allowed to be used.",
"description":"AllowedFlexVolume represents a single Flexvolume that is allowed to be used. Deprecated: use AllowedFlexVolume from policy API Group instead.",
<p>AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.</p>
<p>AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined. Deprecated: use AllowedHostPath from policy API Group instead.</p>
<p>FSGroupStrategyOptions defines the strategy type and options used to create the strategy.</p>
<p>FSGroupStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use FSGroupStrategyOptions from policy API Group instead.</p>
<p>SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.</p>
<p>SELinuxStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use SELinuxStrategyOptions from policy API Group instead.</p>
<p>RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.</p>
<p>RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.</p>
<p>SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.</p>
<p>SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.</p>
<p>PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.</p>
<p>PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated: use PodSecurityPolicy from policy API Group instead.</p>
<p>HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.</p>
<p>HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined. Deprecated: use HostPortRange from policy API Group instead.</p>
"":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.",
"":"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined. Deprecated: use AllowedHostPath from policy API Group instead.",
"pathPrefix":"pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.\n\nExamples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`",
"pathPrefix":"pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.\n\nExamples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`",
"":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy.",
"":"FSGroupStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use FSGroupStrategyOptions from policy API Group instead.",
"rule":"rule is the strategy that will dictate what FSGroup is used in the SecurityContext.",
"rule":"rule is the strategy that will dictate what FSGroup is used in the SecurityContext.",
"ranges":"ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.",
"ranges":"ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.",
"":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.",
"":"HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined. Deprecated: use HostPortRange from policy API Group instead.",
"min":"min is the start of the range, inclusive.",
"min":"min is the start of the range, inclusive.",
"":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.",
"":"PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated: use PodSecurityPolicy from policy API Group instead.",
"metadata":"Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata",
"metadata":"Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata",
"":"PodSecurityPolicySpec defines the policy enforced.",
"":"PodSecurityPolicySpec defines the policy enforced. Deprecated: use PodSecurityPolicySpec from policy API Group instead.",
"privileged":"privileged determines if a pod can request to be run as privileged.",
"privileged":"privileged determines if a pod can request to be run as privileged.",
"defaultAddCapabilities":"defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.",
"defaultAddCapabilities":"defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.",
"requiredDropCapabilities":"requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.",
"requiredDropCapabilities":"requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.",
"":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.",
"":"RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.",
"rule":"rule is the strategy that will dictate the allowable RunAsUser values that may be set.",
"rule":"rule is the strategy that will dictate the allowable RunAsUser values that may be set.",
"ranges":"ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.",
"ranges":"ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.",
"":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.",
"":"SELinuxStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use SELinuxStrategyOptions from policy API Group instead.",
"rule":"rule is the strategy that will dictate the allowable labels that may be set.",
"rule":"rule is the strategy that will dictate the allowable labels that may be set.",
"seLinuxOptions":"seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
"seLinuxOptions":"seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/",
"":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.",
"":"SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.",
"rule":"rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.",
"rule":"rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.",
"ranges":"ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.",
"ranges":"ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.",