• Kubernetes Submit Queue's avatar
    Merge pull request #43946 from jhorwit2/jah/host-path-psp · b5eadb5d
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 46489, 46281, 46463, 46114, 43946)
    
    Allow PSP's to specify a whitelist of allowed paths for host volume
    
    **What this PR does / why we need it**:
    
    This PR adds the ability to whitelist paths for the host volume to ensure pods cannot access directories they aren't supposed to. E.g. `/var/lib/kubelet`, `/etc/kubernetes/*`, etc. 
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #29326
    
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    Allow PSP's to specify a whitelist of allowed paths for host volume based on path prefixes
    ```
    b5eadb5d
Name
Last commit
Last update
..
src/k8s.io Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
copy.sh Loading commit data...
godeps-json-updater.go Loading commit data...
prime-apimachinery.sh Loading commit data...