eda4b31502
This adds a chart that will generate arbitrary Kubernetes PodSecurityPolicy objects, and ClusterRoles to provide access to them. It will also set up one (or zero) default bindings for generic "categories" of subjects, as desired: - serviceaccounts - authenticated users - unauthenticated users The default values specify a highly permissive security policy that is bound by default to serviceaccounts and authenticated users. The policy is expected to be refined over time, and should be overridden by operators per their workloads and security needs. Change-Id: I69917217f85881b2627706abce66c7044b40a448
23 lines
339 B
Plaintext
23 lines
339 B
Plaintext
# Patterns to ignore when building packages.
|
|
# This supports shell glob matching, relative path matching, and
|
|
# negation (prefixed with !). Only one pattern per line.
|
|
.DS_Store
|
|
# Common VCS dirs
|
|
.git/
|
|
.gitignore
|
|
.bzr/
|
|
.bzrignore
|
|
.hg/
|
|
.hgignore
|
|
.svn/
|
|
# Common backup files
|
|
*.swp
|
|
*.pyc
|
|
*.bak
|
|
*.tmp
|
|
*~
|
|
# Various IDEs
|
|
.project
|
|
.idea/
|
|
*.tmproj
|