Merge pull request #3354 from jgsqware/adding-psp-support

example k8s: add support for PodSecurityPolicy

examples/k8s/cluster-role.yaml

@@ -51,3 +51,11 @@ rules:
   verbs:
   - list
   - watch
+- apigroups:
+  - extensions
+  resourcenames:
+  - weave-scope
+  resources:
+  - podsecuritypolicies
+  verbs:
+  - use

examples/k8s/psp.yaml

@@ -0,0 +1,21 @@
+apiVersion: extensions/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: weave-scope
+spec:
+  privileged: true
+  hostPID: true
+  hostNetwork: true
+  allowedCapabilities:
+  - 'NET_ADMIN'
+  fsGroup:
+    rule: RunAsAny
+  runAsUser:
+    rule: RunAsAny
+  seLinux:
+    rule: RunAsAny
+  supplementalGroups:
+    rule: RunAsAny
+  volumes:
+  - secret
+  - hostPath