policyDefinitions/Kubernetes/allowed-host-paths/examples-good/example_good.yaml [1:21]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: nginx-host-filesystem
  labels:
    app: nginx-host-filesystem
spec:
  containers:
  - name: nginx
    image: nginx
    volumeMounts:
    - mountPath: /cache
      name: cache-volume
      readOnly: true
    resources:
      limits:
        cpu: "100m"
        memory: "30Mi"
  volumes:
  - name: cache-volume
    hostPath:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



policyDefinitions/Kubernetes/allowed-host-paths/examples-violations/violation.yaml [1:21]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: nginx-host-filesystem
  labels:
    app: nginx-host-filesystem
spec:
  containers:
  - name: nginx
    image: nginx
    volumeMounts:
    - mountPath: /cache
      name: cache-volume
      readOnly: true
    resources:
      limits:
        cpu: "100m"
        memory: "30Mi"
  volumes:
  - name: cache-volume
    hostPath:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



