Merge pull request #99 from php-coder/psp_allow_all_caps

Update privileged PSP to allow all capabilities
2017-10-01 00:57:40 +02:00 · 2017-10-01 00:57:40 +02:00 · 6e12701077
parent 39d11226a2 01515779be
commit 6e12701077
2 changed files with 4 additions and 0 deletions
--- a/staging/podsecuritypolicy/rbac/README.md
+++ b/staging/podsecuritypolicy/rbac/README.md
@ -53,6 +53,8 @@ spec:
    rule: RunAsAny
  volumes:
  - '*'
+  allowedCapabilities:
+  - '*'
  hostPID: true
  hostIPC: true
  hostNetwork: true
--- a/staging/podsecuritypolicy/rbac/policies.yaml
+++ b/staging/podsecuritypolicy/rbac/policies.yaml
@ -14,6 +14,8 @@ spec:
    rule: RunAsAny
  volumes:
  - '*'
+  allowedCapabilities:
+  - '*'
  hostPID: true
  hostIPC: true
  hostNetwork: true