Skip to content

Replacement for the Kubernetes Pod Security Policy that controls the usage of volumes

License

Notifications You must be signed in to change notification settings

kubewarden/volumes-psp-policy

Repository files navigation

Kubewarden Policy Repository Stable

psp-volumes-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of volumes in pods.

Settings

The policy takes the list of the allowed volume types using the allowedTypes setting. Example:

allowedTypes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- secret
- projected

The default value of allowedTypes is [ ]. The special value * can be used to allow all kind of volumes.

No other value can be specified together with *. For example, allowedTypes: ['*', 'configMap'] is not a valid configuration setting.