• Kubernetes Submit Queue's avatar
    Merge pull request #43946 from jhorwit2/jah/host-path-psp · b5eadb5d
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 46489, 46281, 46463, 46114, 43946)
    
    Allow PSP's to specify a whitelist of allowed paths for host volume
    
    **What this PR does / why we need it**:
    
    This PR adds the ability to whitelist paths for the host volume to ensure pods cannot access directories they aren't supposed to. E.g. `/var/lib/kubelet`, `/etc/kubernetes/*`, etc. 
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #29326
    
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    Allow PSP's to specify a whitelist of allowed paths for host volume based on path prefixes
    ```
    b5eadb5d
Name
Last commit
Last update
..
admin Loading commit data...
api-reference Loading commit data...
design Loading commit data...
devel Loading commit data...
getting-started-guides Loading commit data...
images Loading commit data...
man/man1 Loading commit data...
proposals Loading commit data...
user-guide Loading commit data...
yaml/kubectl Loading commit data...
.generated_docs Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
api.md Loading commit data...
reporting-security-issues.md Loading commit data...