• Kubernetes Submit Queue's avatar
    Merge pull request #45975 from php-coder/psp_and_projected_volume · 9f5849a0
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 45346, 45903, 45958, 46042, 45975)
    
    examples/podsecuritypolicy/rbac: allow to use projected volumes in restricted PSP
    
    **What this PR does / why we need it**:
    This PR modifies `restricted` PSP to allow `projected` volume type. No need to modify `privileged` PSP because it already allows all volume types.
    
    It should not add any harm because `projected` uses configmaps, downward API, and secrets that are already permitted.
    
    **Special notes for your reviewer**:
    This was inspired by similar change in the OpenShift: https://github.com/openshift/origin/pull/14147
    
    **Release note**:
    ```release-note
    NONE
    ```
    
    PTAL @pweil- @derekwaynecarr 
    CC @mfojtik
    9f5849a0
Name
Last commit
Last update
..
cluster-dns Loading commit data...
cockroachdb Loading commit data...
elasticsearch Loading commit data...
explorer Loading commit data...
guestbook Loading commit data...
guestbook-go Loading commit data...
https-nginx Loading commit data...
javaee Loading commit data...
javaweb-tomcat-sidecar Loading commit data...
job Loading commit data...
kubectl-container Loading commit data...
meteor Loading commit data...
mysql-cinder-pd Loading commit data...
mysql-wordpress-pd Loading commit data...
newrelic Loading commit data...
nodesjs-mongodb Loading commit data...
oms Loading commit data...
openshift-origin Loading commit data...
persistent-volume-provisioning Loading commit data...
phabricator Loading commit data...
podsecuritypolicy/rbac Loading commit data...
runtime-constraints Loading commit data...
selenium Loading commit data...
sharing-clusters Loading commit data...
spark Loading commit data...
storage Loading commit data...
storm Loading commit data...
sysdig-cloud Loading commit data...
volumes Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
doc.go Loading commit data...
examples_test.go Loading commit data...
guidelines.md Loading commit data...
pod Loading commit data...
scheduler-policy-config-with-extender.json Loading commit data...
scheduler-policy-config.json Loading commit data...
simple-nginx.md Loading commit data...