Controller/PSP: Remove quotes.
This commit is contained in:
parent
2315263b60
commit
564a7138e6
1 changed files with 9 additions and 9 deletions
|
@ -26,11 +26,11 @@ spec:
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
# Allow core volume types.
|
# Allow core volume types.
|
||||||
volumes:
|
volumes:
|
||||||
- 'configMap'
|
- configMap
|
||||||
- 'emptyDir'
|
- emptyDir
|
||||||
- 'projected'
|
- projected
|
||||||
- 'secret'
|
- secret
|
||||||
- 'downwardAPI'
|
- downwardAPI
|
||||||
{{- if .Values.controller.hostNetwork }}
|
{{- if .Values.controller.hostNetwork }}
|
||||||
hostNetwork: {{ .Values.controller.hostNetwork }}
|
hostNetwork: {{ .Values.controller.hostNetwork }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -74,21 +74,21 @@ spec:
|
||||||
hostPID: false
|
hostPID: false
|
||||||
runAsUser:
|
runAsUser:
|
||||||
# Require the container to run without root privileges.
|
# Require the container to run without root privileges.
|
||||||
rule: 'MustRunAsNonRoot'
|
rule: MustRunAsNonRoot
|
||||||
supplementalGroups:
|
supplementalGroups:
|
||||||
rule: 'MustRunAs'
|
rule: MustRunAs
|
||||||
ranges:
|
ranges:
|
||||||
# Forbid adding the root group.
|
# Forbid adding the root group.
|
||||||
- min: 1
|
- min: 1
|
||||||
max: 65535
|
max: 65535
|
||||||
fsGroup:
|
fsGroup:
|
||||||
rule: 'MustRunAs'
|
rule: MustRunAs
|
||||||
ranges:
|
ranges:
|
||||||
# Forbid adding the root group.
|
# Forbid adding the root group.
|
||||||
- min: 1
|
- min: 1
|
||||||
max: 65535
|
max: 65535
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
seLinux:
|
seLinux:
|
||||||
rule: 'RunAsAny'
|
rule: RunAsAny
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
Loading…
Reference in a new issue