GetPodSecurityPolicyTemplate
Use this data source to retrieve information about a Rancher v2 PodSecurityPolicyTemplate.
Example Usage
using Pulumi;
using Rancher2 = Pulumi.Rancher2;
class MyStack : Stack
{
public MyStack()
{
var foo = Output.Create(Rancher2.GetPodSecurityPolicyTemplate.InvokeAsync(new Rancher2.GetPodSecurityPolicyTemplateArgs
{
Name = "foo",
}));
}
}
Coming soon!
import pulumi
import pulumi_rancher2 as rancher2
foo = rancher2.get_pod_security_policy_template(name="foo")import * as pulumi from "@pulumi/pulumi";
import * as rancher2 from "@pulumi/rancher2";
const foo = pulumi.output(rancher2.getPodSecurityPolicyTemplate({
name: "foo",
}, { async: true }));Using GetPodSecurityPolicyTemplate
function getPodSecurityPolicyTemplate(args: GetPodSecurityPolicyTemplateArgs, opts?: InvokeOptions): Promise<GetPodSecurityPolicyTemplateResult>function get_pod_security_policy_template(allow_privilege_escalation=None, allowed_capabilities=None, allowed_csi_drivers=None, allowed_flex_volumes=None, allowed_host_paths=None, allowed_proc_mount_types=None, allowed_unsafe_sysctls=None, annotations=None, default_add_capabilities=None, default_allow_privilege_escalation=None, description=None, forbidden_sysctls=None, fs_group=None, host_ipc=None, host_network=None, host_pid=None, host_ports=None, labels=None, name=None, privileged=None, read_only_root_filesystem=None, required_drop_capabilities=None, run_as_group=None, run_as_user=None, runtime_class=None, se_linux=None, supplemental_group=None, volumes=None, opts=None)func LookupPodSecurityPolicyTemplate(ctx *Context, args *LookupPodSecurityPolicyTemplateArgs, opts ...InvokeOption) (*LookupPodSecurityPolicyTemplateResult, error)Note: This function is named
LookupPodSecurityPolicyTemplatein the Go SDK.
public static class GetPodSecurityPolicyTemplate {
public static Task<GetPodSecurityPolicyTemplateResult> InvokeAsync(GetPodSecurityPolicyTemplateArgs args, InvokeOptions? opts = null)
}The following arguments are supported:
- Name string
The name of the PodSecurityPolicyTemplate (string)
- Allow
Privilege boolEscalation = (Optional)
- Allowed
Capabilities List<string> (list)
- Allowed
Csi List<GetDrivers Pod Security Policy Template Allowed Csi Driver Args> (list)
- Allowed
Flex List<GetVolumes Pod Security Policy Template Allowed Flex Volume Args> (list)
- Allowed
Host List<GetPaths Pod Security Policy Template Allowed Host Path Args> (list)
- Allowed
Proc List<string>Mount Types (list)
- Allowed
Unsafe List<string>Sysctls (list)
- Annotations Dictionary<string, object>
Annotations for PodSecurityPolicyTemplate object (map)
- Default
Add List<string>Capabilities (list)
- Default
Allow boolPrivilege Escalation (list)
- Description string
The PodSecurityPolicyTemplate description (string)
- Forbidden
Sysctls List<string> (list)
- Fs
Group GetPod Security Policy Template Fs Group Args (list maxitems:1)
- Host
Ipc bool (bool)
- Host
Network bool - Host
Pid bool (bool)
- Host
Ports List<GetPod Security Policy Template Host Port Args> (list)
- Labels Dictionary<string, object>
Labels for PodSecurityPolicyTemplate object (map)
- Privileged bool
(bool)
- Read
Only boolRoot Filesystem (bool)
- Required
Drop List<string>Capabilities (list)
- Run
As GetGroup Pod Security Policy Template Run As Group Args (list maxitems:1)
- Run
As GetUser Pod Security Policy Template Run As User Args (list maxitems:1)
- Runtime
Class GetPod Security Policy Template Runtime Class Args (list maxitems:1)
- Se
Linux GetPod Security Policy Template Se Linux Args (list maxitems:1)
- Supplemental
Group GetPod Security Policy Template Supplemental Group Args (list maxitems:1)
- Volumes List<string>
(list)
- Name string
The name of the PodSecurityPolicyTemplate (string)
- Allow
Privilege boolEscalation = (Optional)
- Allowed
Capabilities []string (list)
- Allowed
Csi []GetDrivers Pod Security Policy Template Allowed Csi Driver (list)
- Allowed
Flex []GetVolumes Pod Security Policy Template Allowed Flex Volume (list)
- Allowed
Host []GetPaths Pod Security Policy Template Allowed Host Path (list)
- Allowed
Proc []stringMount Types (list)
- Allowed
Unsafe []stringSysctls (list)
- Annotations map[string]interface{}
Annotations for PodSecurityPolicyTemplate object (map)
- Default
Add []stringCapabilities (list)
- Default
Allow boolPrivilege Escalation (list)
- Description string
The PodSecurityPolicyTemplate description (string)
- Forbidden
Sysctls []string (list)
- Fs
Group GetPod Security Policy Template Fs Group (list maxitems:1)
- Host
Ipc bool (bool)
- Host
Network bool - Host
Pid bool (bool)
- Host
Ports []GetPod Security Policy Template Host Port (list)
- Labels map[string]interface{}
Labels for PodSecurityPolicyTemplate object (map)
- Privileged bool
(bool)
- Read
Only boolRoot Filesystem (bool)
- Required
Drop []stringCapabilities (list)
- Run
As GetGroup Pod Security Policy Template Run As Group (list maxitems:1)
- Run
As GetUser Pod Security Policy Template Run As User (list maxitems:1)
- Runtime
Class GetPod Security Policy Template Runtime Class (list maxitems:1)
- Se
Linux GetPod Security Policy Template Se Linux (list maxitems:1)
- Supplemental
Group GetPod Security Policy Template Supplemental Group (list maxitems:1)
- Volumes []string
(list)
- name string
The name of the PodSecurityPolicyTemplate (string)
- allow
Privilege booleanEscalation = (Optional)
- allowed
Capabilities string[] (list)
- allowed
Csi GetDrivers Pod Security Policy Template Allowed Csi Driver[] (list)
- allowed
Flex GetVolumes Pod Security Policy Template Allowed Flex Volume[] (list)
- allowed
Host GetPaths Pod Security Policy Template Allowed Host Path[] (list)
- allowed
Proc string[]Mount Types (list)
- allowed
Unsafe string[]Sysctls (list)
- annotations {[key: string]: any}
Annotations for PodSecurityPolicyTemplate object (map)
- default
Add string[]Capabilities (list)
- default
Allow booleanPrivilege Escalation (list)
- description string
The PodSecurityPolicyTemplate description (string)
- forbidden
Sysctls string[] (list)
- fs
Group GetPod Security Policy Template Fs Group (list maxitems:1)
- host
Ipc boolean (bool)
- host
Network boolean - host
Pid boolean (bool)
- host
Ports GetPod Security Policy Template Host Port[] (list)
- labels {[key: string]: any}
Labels for PodSecurityPolicyTemplate object (map)
- privileged boolean
(bool)
- read
Only booleanRoot Filesystem (bool)
- required
Drop string[]Capabilities (list)
- run
As GetGroup Pod Security Policy Template Run As Group (list maxitems:1)
- run
As GetUser Pod Security Policy Template Run As User (list maxitems:1)
- runtime
Class GetPod Security Policy Template Runtime Class (list maxitems:1)
- se
Linux GetPod Security Policy Template Se Linux (list maxitems:1)
- supplemental
Group GetPod Security Policy Template Supplemental Group (list maxitems:1)
- volumes string[]
(list)
- name str
The name of the PodSecurityPolicyTemplate (string)
- allow_
privilege_ boolescalation = (Optional)
- allowed_
capabilities List[str] (list)
- allowed_
csi_ List[Getdrivers Pod Security Policy Template Allowed Csi Driver] (list)
- allowed_
flex_ List[Getvolumes Pod Security Policy Template Allowed Flex Volume] (list)
- allowed_
host_ List[Getpaths Pod Security Policy Template Allowed Host Path] (list)
- allowed_
proc_ List[str]mount_ types (list)
- allowed_
unsafe_ List[str]sysctls (list)
- annotations Dict[str, Any]
Annotations for PodSecurityPolicyTemplate object (map)
- default_
add_ List[str]capabilities (list)
- default_
allow_ boolprivilege_ escalation (list)
- description str
The PodSecurityPolicyTemplate description (string)
- forbidden_
sysctls List[str] (list)
- fs_
group Dict[GetPod Security Policy Template Fs Group] (list maxitems:1)
- host_
ipc bool (bool)
- host_
network bool - host_
pid bool (bool)
- host_
ports List[GetPod Security Policy Template Host Port] (list)
- labels Dict[str, Any]
Labels for PodSecurityPolicyTemplate object (map)
- privileged bool
(bool)
- read_
only_ boolroot_ filesystem (bool)
- required_
drop_ List[str]capabilities (list)
- run_
as_ Dict[Getgroup Pod Security Policy Template Run As Group] (list maxitems:1)
- run_
as_ Dict[Getuser Pod Security Policy Template Run As User] (list maxitems:1)
- runtime_
class Dict[GetPod Security Policy Template Runtime Class] (list maxitems:1)
- se_
linux Dict[GetPod Security Policy Template Se Linux] (list maxitems:1)
- supplemental_
group Dict[GetPod Security Policy Template Supplemental Group] (list maxitems:1)
- volumes List[str]
(list)
GetPodSecurityPolicyTemplate Result
The following output properties are available:
- Allow
Privilege boolEscalation - Annotations Dictionary<string, object>
- Description string
- Fs
Group GetPod Security Policy Template Fs Group - Host
Ipc bool - Host
Network bool - Host
Pid bool - Host
Ports List<GetPod Security Policy Template Host Port> - Id string
The provider-assigned unique ID for this managed resource.
- Labels Dictionary<string, object>
- Name string
- Privileged bool
- Read
Only boolRoot Filesystem - Run
As GetUser Pod Security Policy Template Run As User - Se
Linux GetPod Security Policy Template Se Linux - Supplemental
Group GetPod Security Policy Template Supplemental Group - Volumes List<string>
- Allowed
Capabilities List<string> - Allowed
Csi List<GetDrivers Pod Security Policy Template Allowed Csi Driver> - Allowed
Flex List<GetVolumes Pod Security Policy Template Allowed Flex Volume> - Allowed
Host List<GetPaths Pod Security Policy Template Allowed Host Path> - Allowed
Proc List<string>Mount Types - Allowed
Unsafe List<string>Sysctls - Default
Add List<string>Capabilities - Default
Allow boolPrivilege Escalation - Forbidden
Sysctls List<string> - Required
Drop List<string>Capabilities - Run
As GetGroup Pod Security Policy Template Run As Group - Runtime
Class GetPod Security Policy Template Runtime Class
- Allow
Privilege boolEscalation - Annotations map[string]interface{}
- Description string
- Fs
Group GetPod Security Policy Template Fs Group - Host
Ipc bool - Host
Network bool - Host
Pid bool - Host
Ports []GetPod Security Policy Template Host Port - Id string
The provider-assigned unique ID for this managed resource.
- Labels map[string]interface{}
- Name string
- Privileged bool
- Read
Only boolRoot Filesystem - Run
As GetUser Pod Security Policy Template Run As User - Se
Linux GetPod Security Policy Template Se Linux - Supplemental
Group GetPod Security Policy Template Supplemental Group - Volumes []string
- Allowed
Capabilities []string - Allowed
Csi []GetDrivers Pod Security Policy Template Allowed Csi Driver - Allowed
Flex []GetVolumes Pod Security Policy Template Allowed Flex Volume - Allowed
Host []GetPaths Pod Security Policy Template Allowed Host Path - Allowed
Proc []stringMount Types - Allowed
Unsafe []stringSysctls - Default
Add []stringCapabilities - Default
Allow boolPrivilege Escalation - Forbidden
Sysctls []string - Required
Drop []stringCapabilities - Run
As GetGroup Pod Security Policy Template Run As Group - Runtime
Class GetPod Security Policy Template Runtime Class
- allow
Privilege booleanEscalation - annotations {[key: string]: any}
- description string
- fs
Group GetPod Security Policy Template Fs Group - host
Ipc boolean - host
Network boolean - host
Pid boolean - host
Ports GetPod Security Policy Template Host Port[] - id string
The provider-assigned unique ID for this managed resource.
- labels {[key: string]: any}
- name string
- privileged boolean
- read
Only booleanRoot Filesystem - run
As GetUser Pod Security Policy Template Run As User - se
Linux GetPod Security Policy Template Se Linux - supplemental
Group GetPod Security Policy Template Supplemental Group - volumes string[]
- allowed
Capabilities string[] - allowed
Csi GetDrivers Pod Security Policy Template Allowed Csi Driver[] - allowed
Flex GetVolumes Pod Security Policy Template Allowed Flex Volume[] - allowed
Host GetPaths Pod Security Policy Template Allowed Host Path[] - allowed
Proc string[]Mount Types - allowed
Unsafe string[]Sysctls - default
Add string[]Capabilities - default
Allow booleanPrivilege Escalation - forbidden
Sysctls string[] - required
Drop string[]Capabilities - run
As GetGroup Pod Security Policy Template Run As Group - runtime
Class GetPod Security Policy Template Runtime Class
- allow_
privilege_ boolescalation - annotations Dict[str, Any]
- description str
- fs_
group Dict[GetPod Security Policy Template Fs Group] - host_
ipc bool - host_
network bool - host_
pid bool - host_
ports List[GetPod Security Policy Template Host Port] - id str
The provider-assigned unique ID for this managed resource.
- labels Dict[str, Any]
- name str
- privileged bool
- read_
only_ boolroot_ filesystem - run_
as_ Dict[Getuser Pod Security Policy Template Run As User] - se_
linux Dict[GetPod Security Policy Template Se Linux] - supplemental_
group Dict[GetPod Security Policy Template Supplemental Group] - volumes List[str]
- allowed_
capabilities List[str] - allowed_
csi_ List[Getdrivers Pod Security Policy Template Allowed Csi Driver] - allowed_
flex_ List[Getvolumes Pod Security Policy Template Allowed Flex Volume] - allowed_
host_ List[Getpaths Pod Security Policy Template Allowed Host Path] - allowed_
proc_ List[str]mount_ types - allowed_
unsafe_ List[str]sysctls - default_
add_ List[str]capabilities - default_
allow_ boolprivilege_ escalation - forbidden_
sysctls List[str] - required_
drop_ List[str]capabilities - run_
as_ Dict[Getgroup Pod Security Policy Template Run As Group] - runtime_
class Dict[GetPod Security Policy Template Runtime Class]
Supporting Types
GetPodSecurityPolicyTemplateAllowedCsiDriver
GetPodSecurityPolicyTemplateAllowedFlexVolume
GetPodSecurityPolicyTemplateAllowedHostPath
GetPodSecurityPolicyTemplateFsGroup
GetPodSecurityPolicyTemplateFsGroupRange
GetPodSecurityPolicyTemplateHostPort
GetPodSecurityPolicyTemplateRunAsGroup
GetPodSecurityPolicyTemplateRunAsGroupRange
GetPodSecurityPolicyTemplateRunAsUser
GetPodSecurityPolicyTemplateRunAsUserRange
GetPodSecurityPolicyTemplateRuntimeClass
GetPodSecurityPolicyTemplateSeLinux
GetPodSecurityPolicyTemplateSeLinuxSeLinuxOption
GetPodSecurityPolicyTemplateSupplementalGroup
GetPodSecurityPolicyTemplateSupplementalGroupRange
Package Details
- Repository
- https://github.com/pulumi/pulumi-rancher2
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
rancher2Terraform Provider.