v1beta1.PodSecurityPolicy

You are viewing documentation for a release that is no longer supported. The latest supported version of version 3 is [3.11]. For the most recent version 4, see [4]

You are viewing documentation for a release that is no longer supported. The latest supported version of version 3 is [3.11]. For the most recent version 4, see [4]

Description

Pod Security Policy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

Object Schema

Expand or mouse-over a field for more information about it.

apiVersion:
kind:
metadata:
  annotations:
    [string]:
  clusterName:
  creationTimestamp:
  deletionGracePeriodSeconds:
  deletionTimestamp:
  finalizers:
  - [string]:
  generateName:
  generation:
  initializers:
    pending:
    - name:
    result:
      apiVersion:
      code:
      details:
        causes:
        - field:
          message:
          reason:
        group:
        kind:
        name:
        retryAfterSeconds:
        uid:
      kind:
      message:
      metadata:
        resourceVersion:
        selfLink:
      reason:
      status:
  labels:
    [string]:
  name:
  namespace:
  ownerReferences:
  - apiVersion:
    blockOwnerDeletion:
    controller:
    kind:
    name:
    uid:
  resourceVersion:
  selfLink:
  uid:
spec:
  allowedCapabilities:
  - [string]:
  defaultAddCapabilities:
  - [string]:
  fsGroup:
    ranges:
    - max:
      min:
    rule:
  hostIPC:
  hostNetwork:
  hostPID:
  hostPorts:
  - max:
    min:
  privileged:
  readOnlyRootFilesystem:
  requiredDropCapabilities:
  - [string]:
  runAsUser:
    ranges:
    - max:
      min:
    rule:
  seLinux:
    rule:
    seLinuxOptions:
      level:
      role:
      type:
      user:
  supplementalGroups:
    ranges:
    - max:
      min:
    rule:
  volumes:
  - [string]:

Operations

Create a PodSecurityPolicy

Create a PodSecurityPolicy

HTTP request

POST /apis/extensions/v1beta1/podsecuritypolicies HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
  "kind": "PodSecurityPolicy",
  "apiVersion": "extensions/v1beta1",
  ...
}

Curl request

$ curl -k \
    -X POST \
    -d @- \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    -H 'Content-Type: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies <<'EOF'
{
  "kind": "PodSecurityPolicy",
  "apiVersion": "extensions/v1beta1",
  ...
}
EOF

HTTP body

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

Get a PodSecurityPolicy

Read the specified PodSecurityPolicy

HTTP request

GET /apis/extensions/v1beta1/podsecuritypolicies/$NAME HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close

Curl request

$ curl -k \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies/$NAME

Path parameters

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

Get all PodSecurityPolicies

List or watch objects of kind PodSecurityPolicy

HTTP request

GET /apis/extensions/v1beta1/podsecuritypolicies HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close

Curl request

$ curl -k \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

• application/json;stream=watch

• application/vnd.kubernetes.protobuf;stream=watch

Watch a PodSecurityPolicy

Watch changes to an object of kind PodSecurityPolicy

HTTP request

GET /apis/extensions/v1beta1/watch/podsecuritypolicies/$NAME HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close

Curl request

$ curl -k \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/watch/podsecuritypolicies/$NAME

Path parameters

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

• application/json;stream=watch

• application/vnd.kubernetes.protobuf;stream=watch

Watch all PodSecurityPolicies

Watch individual changes to a list of PodSecurityPolicy

HTTP request

GET /apis/extensions/v1beta1/watch/podsecuritypolicies HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close

Curl request

$ curl -k \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/watch/podsecuritypolicies

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

• application/json;stream=watch

• application/vnd.kubernetes.protobuf;stream=watch

Update a PodSecurityPolicy

Replace the specified PodSecurityPolicy

HTTP request

PUT /apis/extensions/v1beta1/podsecuritypolicies/$NAME HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
  "kind": "PodSecurityPolicy",
  "apiVersion": "extensions/v1beta1",
  ...
}

Curl request

$ curl -k \
    -X PUT \
    -d @- \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    -H 'Content-Type: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies/$NAME <<'EOF'
{
  "kind": "PodSecurityPolicy",
  "apiVersion": "extensions/v1beta1",
  ...
}
EOF

HTTP body

Path parameters

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

Patch a PodSecurityPolicy

Partially update the specified PodSecurityPolicy

HTTP request

PATCH /apis/extensions/v1beta1/podsecuritypolicies/$NAME HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json-patch+json'
{
  ...
}

Curl request

$ curl -k \
    -X PATCH \
    -d @- \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    -H 'Content-Type: application/json-patch+json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies/$NAME <<'EOF'
{
  ...
}
EOF

HTTP body

Path parameters

Query parameters

Responses

Consumes

• application/json-patch+json

• application/merge-patch+json

• application/strategic-merge-patch+json

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

Delete a PodSecurityPolicy

Delete a PodSecurityPolicy

HTTP request

DELETE /apis/extensions/v1beta1/podsecuritypolicies/$NAME HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
  ...
}

Curl request

$ curl -k \
    -X DELETE \
    -d @- \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    -H 'Content-Type: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies/$NAME <<'EOF'
{
  ...
}
EOF

HTTP body

Path parameters

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf

Delete all PodSecurityPolicies

Delete collection of PodSecurityPolicy

HTTP request

DELETE /apis/extensions/v1beta1/podsecuritypolicies HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close

Curl request

$ curl -k \
    -X DELETE \
    -H "Authorization: Bearer $TOKEN" \
    -H 'Accept: application/json' \
    https://$ENDPOINT/apis/extensions/v1beta1/podsecuritypolicies

Query parameters

Responses

Consumes

• */*

Produces

• application/json

• application/yaml

• application/vnd.kubernetes.protobuf