Skip to content

Instantly share code, notes, and snippets.

@bharatmicrosystems

bharatmicrosystems/disallow-privileged-pod.yaml

Created July 7, 2020 13:31
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save bharatmicrosystems/df0db6612708eb650af94f5780e95b18 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save bharatmicrosystems/df0db6612708eb650af94f5780e95b18 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
disallow-privileged-pod.yaml
cat <<EOF | kubectl apply -f -
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: disallow-privileged-pod
spec:
privileged: false #This disallows any privileged pods
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
runAsUser:
rule: RunAsAny
fsGroup:
rule: RunAsAny
volumes:
- '*'
EOF
podsecuritypolicy.policy/disallow-privileged-pod created
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment