getPodSecurityPolicyTemplate
Use this data source to retrieve information about a Rancher v2 PodSecurityPolicyTemplate.
Example Usage
using Pulumi;
using Rancher2 = Pulumi.Rancher2;
class MyStack : Stack
{
public MyStack()
{
var foo = Output.Create(Rancher2.GetPodSecurityPolicyTemplate.InvokeAsync(new Rancher2.GetPodSecurityPolicyTemplateArgs
{
Name = "foo",
}));
}
}
package main
import (
"github.com/pulumi/pulumi-rancher2/sdk/v2/go/rancher2"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := rancher2.LookupPodSecurityPolicyTemplate(ctx, &rancher2.LookupPodSecurityPolicyTemplateArgs{
Name: "foo",
}, nil)
if err != nil {
return err
}
return nil
})
}
import pulumi
import pulumi_rancher2 as rancher2
foo = rancher2.get_pod_security_policy_template(name="foo")
import * as pulumi from "@pulumi/pulumi";
import * as rancher2 from "@pulumi/rancher2";
const foo = pulumi.output(rancher2.getPodSecurityPolicyTemplate({
name: "foo",
}, { async: true }));
Using getPodSecurityPolicyTemplate
function getPodSecurityPolicyTemplate(args: GetPodSecurityPolicyTemplateArgs, opts?: InvokeOptions): Promise<GetPodSecurityPolicyTemplateResult>
def get_pod_security_policy_template(allow_privilege_escalation: Optional[bool] = None, allowed_capabilities: Optional[Sequence[str]] = None, allowed_csi_drivers: Optional[Sequence[GetPodSecurityPolicyTemplateAllowedCsiDriverArgs]] = None, allowed_flex_volumes: Optional[Sequence[GetPodSecurityPolicyTemplateAllowedFlexVolumeArgs]] = None, allowed_host_paths: Optional[Sequence[GetPodSecurityPolicyTemplateAllowedHostPathArgs]] = None, allowed_proc_mount_types: Optional[Sequence[str]] = None, allowed_unsafe_sysctls: Optional[Sequence[str]] = None, annotations: Optional[Mapping[str, Any]] = None, default_add_capabilities: Optional[Sequence[str]] = None, default_allow_privilege_escalation: Optional[bool] = None, description: Optional[str] = None, forbidden_sysctls: Optional[Sequence[str]] = None, fs_group: Optional[GetPodSecurityPolicyTemplateFsGroupArgs] = None, host_ipc: Optional[bool] = None, host_network: Optional[bool] = None, host_pid: Optional[bool] = None, host_ports: Optional[Sequence[GetPodSecurityPolicyTemplateHostPortArgs]] = None, labels: Optional[Mapping[str, Any]] = None, name: Optional[str] = None, privileged: Optional[bool] = None, read_only_root_filesystem: Optional[bool] = None, required_drop_capabilities: Optional[Sequence[str]] = None, run_as_group: Optional[GetPodSecurityPolicyTemplateRunAsGroupArgs] = None, run_as_user: Optional[GetPodSecurityPolicyTemplateRunAsUserArgs] = None, runtime_class: Optional[GetPodSecurityPolicyTemplateRuntimeClassArgs] = None, se_linux: Optional[GetPodSecurityPolicyTemplateSeLinuxArgs] = None, supplemental_group: Optional[GetPodSecurityPolicyTemplateSupplementalGroupArgs] = None, volumes: Optional[Sequence[str]] = None, opts: Optional[InvokeOptions] = None) -> GetPodSecurityPolicyTemplateResult
func LookupPodSecurityPolicyTemplate(ctx *Context, args *LookupPodSecurityPolicyTemplateArgs, opts ...InvokeOption) (*LookupPodSecurityPolicyTemplateResult, error)
Note: This function is named
LookupPodSecurityPolicyTemplate
in the Go SDK.
public static class GetPodSecurityPolicyTemplate {
public static Task<GetPodSecurityPolicyTemplateResult> InvokeAsync(GetPodSecurityPolicyTemplateArgs args, InvokeOptions? opts = null)
}
The following arguments are supported:
- Name string
The name of the PodSecurityPolicyTemplate (string)
- Allow
Privilege boolEscalation = (Optional)
- Allowed
Capabilities List<string> (list)
- Allowed
Csi List<GetDrivers Pod Security Policy Template Allowed Csi Driver Args> (list)
- Allowed
Flex List<GetVolumes Pod Security Policy Template Allowed Flex Volume Args> (list)
- Allowed
Host List<GetPaths Pod Security Policy Template Allowed Host Path Args> (list)
- Allowed
Proc List<string>Mount Types (list)
- Allowed
Unsafe List<string>Sysctls (list)
- Annotations Dictionary<string, object>
Annotations for PodSecurityPolicyTemplate object (map)
- Default
Add List<string>Capabilities (list)
- Default
Allow boolPrivilege Escalation (list)
- Description string
The PodSecurityPolicyTemplate description (string)
- Forbidden
Sysctls List<string> (list)
- Fs
Group GetPod Security Policy Template Fs Group Args (list maxitems:1)
- Host
Ipc bool (bool)
- Host
Network bool - Host
Pid bool (bool)
- Host
Ports List<GetPod Security Policy Template Host Port Args> (list)
- Labels Dictionary<string, object>
Labels for PodSecurityPolicyTemplate object (map)
- Privileged bool
(bool)
- Read
Only boolRoot Filesystem (bool)
- Required
Drop List<string>Capabilities (list)
- Run
As GetGroup Pod Security Policy Template Run As Group Args (list maxitems:1)
- Run
As GetUser Pod Security Policy Template Run As User Args (list maxitems:1)
- Runtime
Class GetPod Security Policy Template Runtime Class Args (list maxitems:1)
- Se
Linux GetPod Security Policy Template Se Linux Args (list maxitems:1)
- Supplemental
Group GetPod Security Policy Template Supplemental Group Args (list maxitems:1)
- Volumes List<string>
(list)
- Name string
The name of the PodSecurityPolicyTemplate (string)
- Allow
Privilege boolEscalation = (Optional)
- Allowed
Capabilities []string (list)
- Allowed
Csi []GetDrivers Pod Security Policy Template Allowed Csi Driver (list)
- Allowed
Flex []GetVolumes Pod Security Policy Template Allowed Flex Volume (list)
- Allowed
Host []GetPaths Pod Security Policy Template Allowed Host Path (list)
- Allowed
Proc []stringMount Types (list)
- Allowed
Unsafe []stringSysctls (list)
- Annotations map[string]interface{}
Annotations for PodSecurityPolicyTemplate object (map)
- Default
Add []stringCapabilities (list)
- Default
Allow boolPrivilege Escalation (list)
- Description string
The PodSecurityPolicyTemplate description (string)
- Forbidden
Sysctls []string (list)
- Fs
Group GetPod Security Policy Template Fs Group (list maxitems:1)
- Host
Ipc bool (bool)
- Host
Network bool - Host
Pid bool (bool)
- Host
Ports []GetPod Security Policy Template Host Port (list)
- Labels map[string]interface{}
Labels for PodSecurityPolicyTemplate object (map)
- Privileged bool
(bool)
- Read
Only boolRoot Filesystem (bool)
- Required
Drop []stringCapabilities (list)
- Run
As GetGroup Pod Security Policy Template Run As Group (list maxitems:1)
- Run
As GetUser Pod Security Policy Template Run As User (list maxitems:1)
- Runtime
Class GetPod Security Policy Template Runtime Class (list maxitems:1)
- Se
Linux GetPod Security Policy Template Se Linux (list maxitems:1)
- Supplemental
Group GetPod Security Policy Template Supplemental Group (list maxitems:1)
- Volumes []string
(list)
- name string
The name of the PodSecurityPolicyTemplate (string)
- allow
Privilege booleanEscalation = (Optional)
- allowed
Capabilities string[] (list)
- allowed
Csi GetDrivers Pod Security Policy Template Allowed Csi Driver[] (list)
- allowed
Flex GetVolumes Pod Security Policy Template Allowed Flex Volume[] (list)
- allowed
Host GetPaths Pod Security Policy Template Allowed Host Path[] (list)
- allowed
Proc string[]Mount Types (list)
- allowed
Unsafe string[]Sysctls (list)
- annotations {[key: string]: any}
Annotations for PodSecurityPolicyTemplate object (map)
- default
Add string[]Capabilities (list)
- default
Allow booleanPrivilege Escalation (list)
- description string
The PodSecurityPolicyTemplate description (string)
- forbidden
Sysctls string[] (list)
- fs
Group GetPod Security Policy Template Fs Group (list maxitems:1)
- host
Ipc boolean (bool)
- host
Network boolean - host
Pid boolean (bool)
- host
Ports GetPod Security Policy Template Host Port[] (list)
- labels {[key: string]: any}
Labels for PodSecurityPolicyTemplate object (map)
- privileged boolean
(bool)
- read
Only booleanRoot Filesystem (bool)
- required
Drop string[]Capabilities (list)
- run
As GetGroup Pod Security Policy Template Run As Group (list maxitems:1)
- run
As GetUser Pod Security Policy Template Run As User (list maxitems:1)
- runtime
Class GetPod Security Policy Template Runtime Class (list maxitems:1)
- se
Linux GetPod Security Policy Template Se Linux (list maxitems:1)
- supplemental
Group GetPod Security Policy Template Supplemental Group (list maxitems:1)
- volumes string[]
(list)
- name str
The name of the PodSecurityPolicyTemplate (string)
- allow_
privilege_ boolescalation = (Optional)
- allowed_
capabilities Sequence[str] (list)
- allowed_
csi_ Sequence[Getdrivers Pod Security Policy Template Allowed Csi Driver Args] (list)
- allowed_
flex_ Sequence[Getvolumes Pod Security Policy Template Allowed Flex Volume Args] (list)
- allowed_
host_ Sequence[Getpaths Pod Security Policy Template Allowed Host Path Args] (list)
- allowed_
proc_ Sequence[str]mount_ types (list)
- allowed_
unsafe_ Sequence[str]sysctls (list)
- annotations Mapping[str, Any]
Annotations for PodSecurityPolicyTemplate object (map)
- default_
add_ Sequence[str]capabilities (list)
- default_
allow_ boolprivilege_ escalation (list)
- description str
The PodSecurityPolicyTemplate description (string)
- forbidden_
sysctls Sequence[str] (list)
- fs_
group GetPod Security Policy Template Fs Group Args (list maxitems:1)
- host_
ipc bool (bool)
- host_
network bool - host_
pid bool (bool)
- host_
ports Sequence[GetPod Security Policy Template Host Port Args] (list)
- labels Mapping[str, Any]
Labels for PodSecurityPolicyTemplate object (map)
- privileged bool
(bool)
- read_
only_ boolroot_ filesystem (bool)
- required_
drop_ Sequence[str]capabilities (list)
- run_
as_ Getgroup Pod Security Policy Template Run As Group Args (list maxitems:1)
- run_
as_ Getuser Pod Security Policy Template Run As User Args (list maxitems:1)
- runtime_
class GetPod Security Policy Template Runtime Class Args (list maxitems:1)
- se_
linux GetPod Security Policy Template Se Linux Args (list maxitems:1)
- supplemental_
group GetPod Security Policy Template Supplemental Group Args (list maxitems:1)
- volumes Sequence[str]
(list)
getPodSecurityPolicyTemplate Result
The following output properties are available:
- Allow
Privilege boolEscalation - Annotations Dictionary<string, object>
- Description string
- Fs
Group GetPod Security Policy Template Fs Group - Host
Ipc bool - Host
Network bool - Host
Pid bool - Host
Ports List<GetPod Security Policy Template Host Port> - Id string
The provider-assigned unique ID for this managed resource.
- Labels Dictionary<string, object>
- Name string
- Privileged bool
- Read
Only boolRoot Filesystem - Run
As GetUser Pod Security Policy Template Run As User - Se
Linux GetPod Security Policy Template Se Linux - Supplemental
Group GetPod Security Policy Template Supplemental Group - Volumes List<string>
- Allowed
Capabilities List<string> - Allowed
Csi List<GetDrivers Pod Security Policy Template Allowed Csi Driver> - Allowed
Flex List<GetVolumes Pod Security Policy Template Allowed Flex Volume> - Allowed
Host List<GetPaths Pod Security Policy Template Allowed Host Path> - Allowed
Proc List<string>Mount Types - Allowed
Unsafe List<string>Sysctls - Default
Add List<string>Capabilities - Default
Allow boolPrivilege Escalation - Forbidden
Sysctls List<string> - Required
Drop List<string>Capabilities - Run
As GetGroup Pod Security Policy Template Run As Group - Runtime
Class GetPod Security Policy Template Runtime Class
- Allow
Privilege boolEscalation - Annotations map[string]interface{}
- Description string
- Fs
Group GetPod Security Policy Template Fs Group - Host
Ipc bool - Host
Network bool - Host
Pid bool - Host
Ports []GetPod Security Policy Template Host Port - Id string
The provider-assigned unique ID for this managed resource.
- Labels map[string]interface{}
- Name string
- Privileged bool
- Read
Only boolRoot Filesystem - Run
As GetUser Pod Security Policy Template Run As User - Se
Linux GetPod Security Policy Template Se Linux - Supplemental
Group GetPod Security Policy Template Supplemental Group - Volumes []string
- Allowed
Capabilities []string - Allowed
Csi []GetDrivers Pod Security Policy Template Allowed Csi Driver - Allowed
Flex []GetVolumes Pod Security Policy Template Allowed Flex Volume - Allowed
Host []GetPaths Pod Security Policy Template Allowed Host Path - Allowed
Proc []stringMount Types - Allowed
Unsafe []stringSysctls - Default
Add []stringCapabilities - Default
Allow boolPrivilege Escalation - Forbidden
Sysctls []string - Required
Drop []stringCapabilities - Run
As GetGroup Pod Security Policy Template Run As Group - Runtime
Class GetPod Security Policy Template Runtime Class
- allow
Privilege booleanEscalation - annotations {[key: string]: any}
- description string
- fs
Group GetPod Security Policy Template Fs Group - host
Ipc boolean - host
Network boolean - host
Pid boolean - host
Ports GetPod Security Policy Template Host Port[] - id string
The provider-assigned unique ID for this managed resource.
- labels {[key: string]: any}
- name string
- privileged boolean
- read
Only booleanRoot Filesystem - run
As GetUser Pod Security Policy Template Run As User - se
Linux GetPod Security Policy Template Se Linux - supplemental
Group GetPod Security Policy Template Supplemental Group - volumes string[]
- allowed
Capabilities string[] - allowed
Csi GetDrivers Pod Security Policy Template Allowed Csi Driver[] - allowed
Flex GetVolumes Pod Security Policy Template Allowed Flex Volume[] - allowed
Host GetPaths Pod Security Policy Template Allowed Host Path[] - allowed
Proc string[]Mount Types - allowed
Unsafe string[]Sysctls - default
Add string[]Capabilities - default
Allow booleanPrivilege Escalation - forbidden
Sysctls string[] - required
Drop string[]Capabilities - run
As GetGroup Pod Security Policy Template Run As Group - runtime
Class GetPod Security Policy Template Runtime Class
- allow_
privilege_ boolescalation - annotations Mapping[str, Any]
- description str
- fs_
group GetPod Security Policy Template Fs Group - host_
ipc bool - host_
network bool - host_
pid bool - host_
ports Sequence[GetPod Security Policy Template Host Port] - id str
The provider-assigned unique ID for this managed resource.
- labels Mapping[str, Any]
- name str
- privileged bool
- read_
only_ boolroot_ filesystem - run_
as_ Getuser Pod Security Policy Template Run As User - se_
linux GetPod Security Policy Template Se Linux - supplemental_
group GetPod Security Policy Template Supplemental Group - volumes Sequence[str]
- allowed_
capabilities Sequence[str] - allowed_
csi_ Sequence[Getdrivers Pod Security Policy Template Allowed Csi Driver] - allowed_
flex_ Sequence[Getvolumes Pod Security Policy Template Allowed Flex Volume] - allowed_
host_ Sequence[Getpaths Pod Security Policy Template Allowed Host Path] - allowed_
proc_ Sequence[str]mount_ types - allowed_
unsafe_ Sequence[str]sysctls - default_
add_ Sequence[str]capabilities - default_
allow_ boolprivilege_ escalation - forbidden_
sysctls Sequence[str] - required_
drop_ Sequence[str]capabilities - run_
as_ Getgroup Pod Security Policy Template Run As Group - runtime_
class GetPod Security Policy Template Runtime Class
Supporting Types
GetPodSecurityPolicyTemplateAllowedCsiDriver
- Name string
The name of the PodSecurityPolicyTemplate (string)
- Name string
The name of the PodSecurityPolicyTemplate (string)
- name string
The name of the PodSecurityPolicyTemplate (string)
- name str
The name of the PodSecurityPolicyTemplate (string)
GetPodSecurityPolicyTemplateAllowedFlexVolume
- Driver string
- Driver string
- driver string
- driver str
GetPodSecurityPolicyTemplateAllowedHostPath
- Path
Prefix string - Read
Only bool
- Path
Prefix string - Read
Only bool
- path
Prefix string - read
Only boolean
- path_
prefix str - read_
only bool
GetPodSecurityPolicyTemplateFsGroup
GetPodSecurityPolicyTemplateFsGroupRange
GetPodSecurityPolicyTemplateHostPort
GetPodSecurityPolicyTemplateRunAsGroup
GetPodSecurityPolicyTemplateRunAsGroupRange
GetPodSecurityPolicyTemplateRunAsUser
GetPodSecurityPolicyTemplateRunAsUserRange
GetPodSecurityPolicyTemplateRuntimeClass
- Allowed
Runtime List<string>Class Names - Default
Runtime stringClass Name
- Allowed
Runtime []stringClass Names - Default
Runtime stringClass Name
- allowed
Runtime string[]Class Names - default
Runtime stringClass Name
- allowed_
runtime_ Sequence[str]class_ names - default_
runtime_ strclass_ name
GetPodSecurityPolicyTemplateSeLinux
GetPodSecurityPolicyTemplateSeLinuxSeLinuxOption
GetPodSecurityPolicyTemplateSupplementalGroup
GetPodSecurityPolicyTemplateSupplementalGroupRange
Package Details
- Repository
- https://github.com/pulumi/pulumi-rancher2
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
rancher2
Terraform Provider.