questions-ui.yml

questions:
- default: []
  description: >-
    This policy is a replacement for the Kubernetes Pod Security Policy that
    controls the usage of `hostPath` volumes. The policy inspects both the
    containers and the init containers that are using `hostPath` volumes.
    `allowedHostPaths` is a list of host paths that are allowed to be used by
    hostPath volumes. An empty `allowedHostPaths` list means there is no
    restriction on host paths used. Each entry of `allowedHostPaths` must have:
    a `pathPrefix` field, which allows hostPath volumes to mount a path that
    begins with an allowed prefix, and a `readOnly` field indicating it must be
    mounted read-only.
  tooltip: A list of host paths that are allowed to be used by hostPath volumes.
  group: Settings
  label: Allow host path
  hide_input: true
  type: sequence[
  variable: allowedHostPaths
  sequence_questions:
    - default: ''
      description: >-
        Allows hostPath volumes to mount a path that begins with an allowed
        prefix.
      group: Settings
      label: Path prefix
      type: string
      variable: pathPrefix
    - default: false
      tooltip: Indicates if the volume must be mounted read-only.
      group: Settings
      label: Read only
      type: boolean
      variable: readOnly