Skip to content

Instantly share code, notes, and snippets.

@shazadbrohi
Created November 2, 2020 23:07
Show Gist options
  • Save shazadbrohi/d633a3cf04f69dfb91d1fdd663446a29 to your computer and use it in GitHub Desktop.
Save shazadbrohi/d633a3cf04f69dfb91d1fdd663446a29 to your computer and use it in GitHub Desktop.
A privileged pod security policy resource
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: privileged-psp
spec:
allowPrivilegeEscalation: true
allowedCapabilities:
- '*'
fsGroup:
rule: RunAsAny
hostIPC: true
hostNetwork: true
hostPID: true
hostPorts:
- max: 65535
min: 0
privileged: true
runAsUser:
rule: RunAsAny
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- '*'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment