华为云UCS-k8spspallowedusers:策略实例示例
时间：2025-02-12 15:05:17
下载华为云UCS用户手册完整版
复制链接到剪贴板
分享文章到微博
分享文章到朋友圈
策略实例示例
以下策略实例展示了策略定义生效的资源类型，parameters中定义了对runAsUser、runAsGroup、supplementalGroups和fsGroup等字段的约束。
apiVersion: constraints.gatekeeper.sh/v1beta1kind: K8sPSPAllowedUsersmetadata: name: psp-pods-allowed-user-rangesspec: match: kinds: - apiGroups: [""] kinds: ["Pod"] parameters: runAsUser: rule: MustRunAs # MustRunAsNonRoot # RunAsAny ranges: - min: 100 max: 200 runAsGroup: rule: MustRunAs # MayRunAs # RunAsAny ranges: - min: 100 max: 200 supplementalGroups: rule: MustRunAs # MayRunAs # RunAsAny ranges: - min: 100 max: 200 fsGroup: rule: MustRunAs # MayRunAs # RunAsAny ranges: - min: 100 max: 200
support.huaweicloud.com/usermanual-ucs/ucs_01_0216.html
