Skip to content

Instantly share code, notes, and snippets.

@georgegoh

georgegoh/gist:d3ccd5662a3709b179a585d488cec012

Created July 23, 2021 02:03
Show Gist options
  • Save georgegoh/d3ccd5662a3709b179a585d488cec012 to your computer and use it in GitHub Desktop.
Save georgegoh/d3ccd5662a3709b179a585d488cec012 to your computer and use it in GitHub Desktop.
Download ZIP
vSphere w/ Tanzu comes with default PSPs. This gist allows any service account to run pods with restricted privileges by using the supplied `vmware-system-restricted` policy.
Raw
gistfile1.txt
# (vSphere w/ Tanzu) allow any service account to run pods with restricted privileges.
kubectl create clusterrolebinding all:psp:restricted \
--clusterrole=psp:vmware-system-restricted \
--group=system:serviceaccounts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment