Update privileged PSP to allow all capabilities.

2017-09-20 15:01:31 +02:00 · 2017-09-20 15:01:31 +02:00 · 01515779be
parent 39d11226a2
commit 01515779be
2 changed files with 4 additions and 0 deletions
--- a/staging/podsecuritypolicy/rbac/README.md
+++ b/staging/podsecuritypolicy/rbac/README.md
@ -53,6 +53,8 @@ spec:
    rule: RunAsAny
  volumes:
  - '*'
+  allowedCapabilities:
+  - '*'
  hostPID: true
  hostIPC: true
  hostNetwork: true
--- a/staging/podsecuritypolicy/rbac/policies.yaml
+++ b/staging/podsecuritypolicy/rbac/policies.yaml
@ -14,6 +14,8 @@ spec:
    rule: RunAsAny
  volumes:
  - '*'
+  allowedCapabilities:
+  - '*'
  hostPID: true
  hostIPC: true
  hostNetwork: true