https://github.com/kubewarden/flexvolume-drivers-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers
https://github.com/kubewarden/flexvolume-drivers-psp-policy

hacktoberfest kubernetes kubernetes-security kubewarden-policy pod-security-policy policy-as-code webassembly

Last synced: 6 months ago
JSON representation

Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers

• Host: GitHub
• URL: https://github.com/kubewarden/flexvolume-drivers-psp-policy
• Owner: kubewarden
• License: apache-2.0
• Created: 2021-11-19T11:44:48.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2024-11-25T09:28:25.000Z (7 months ago)
• Last Synced: 2024-11-25T10:38:01.822Z (7 months ago)
• Topics: hacktoberfest, kubernetes, kubernetes-security, kubewarden-policy, pod-security-policy, policy-as-code, webassembly
• Language: Rust
• Homepage: https://kubewarden.io
• Size: 182 KB
• Stars: 1
• Watchers: 5
• Forks: 3
• Open Issues: 3
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Codeowners: CODEOWNERS

Awesome Lists containing this project

README

        
[![Kubewarden Policy Repository](https://github.com/kubewarden/community/blob/main/badges/kubewarden-policies.svg)](https://github.com/kubewarden/community/blob/main/REPOSITORIES.md#policy-scope)

[![Stable](https://img.shields.io/badge/status-stable-brightgreen?style=for-the-badge)](https://github.com/kubewarden/community/blob/main/REPOSITORIES.md#stable)

# Kubewarden policy psp-flexvolume-drivers

## Description

Replacement for the Kubernetes Pod Security Policy that controls Flex Volume drivers.

## Settings

This policy allows to provide a list of allowed Flex Volume drivers.

The configuration supports a list of allowed flex volume drivers. An example follows:

```yaml

allowedFlexVolumes:

  - driver: example/lvm

  - driver: example/cifs

```

If the pod to be evaluated has a different driver on any `flexVolume` volume, it will be rejected.