K8S Pod Security Policy

Replacing an k8s_pod_security_policy object will update the object by replacing the existing spec with the provided one. For read-then-write operations a resourceVersion mismatch will occur if the object was modified between the read and write.

Tools

Tool	Description
`f5xc-api-managedkubernetes-k8s-pod-security-policy-create`	Create Configuration Specification.
`f5xc-api-managedkubernetes-k8s-pod-security-policy-get`	GET Configuration Specification.
`f5xc-api-managedkubernetes-k8s-pod-security-policy-list`	List K8s Pod Security Policy.
`f5xc-api-managedkubernetes-k8s-pod-security-policy-update`	Replace Configuration Specification.
`f5xc-api-managedkubernetes-k8s-pod-security-policy-delete`	DELETE K8s Pod Security Policy.

Parameters

Path Parameters

Parameter	Description	Example
`metadata.namespace`	Namespace	`-`
`name`	Name	`-`
`namespace`	Namespace	`-`
`metadata.name`	Name	`-`

Query Parameters

Parameter	Description	Example
`response_format`	The format in which the configuration object is to be fetched. This could be for example	`-`
`label_filter`	A LabelSelectorType expression that every item in list response will satisfy.	`-`
`report_fields`	The report_fields parameter	`-`
`report_status_fields`	The report_status_fields parameter	`-`

Configuration Choices

This resource includes mutually exclusive configuration options:

config_method_choice

Option	Description	Recommended
`spec.psp_spec`	-
`spec.yaml`	-

allowed_capabilities_choice

Option	Description	Recommended
`spec.psp_spec.allowed_capabilities`	-
`spec.psp_spec.no_allowed_capabilities`	-

default_capabilities_choice

Option	Description	Recommended
`spec.psp_spec.default_capabilities`	-
`spec.psp_spec.no_default_capabilities`	-

drop_capabilities_choice

Option	Description	Recommended
`spec.psp_spec.drop_capabilities`	-
`spec.psp_spec.no_drop_capabilities`	-

fs_group_choice

Option	Description	Recommended
`spec.psp_spec.fs_group_strategy_options`	-
`spec.psp_spec.no_fs_groups`	-

group_choice

Option	Description	Recommended
`spec.psp_spec.no_run_as_group`	-
`spec.psp_spec.run_as_group`	-

runtime_class_choice

Option	Description	Recommended
`spec.psp_spec.no_runtime_class`	-

se_linux_choice

Option	Description	Recommended
`spec.psp_spec.no_se_linux_options`	-

supplemental_group_choice

Option	Description	Recommended
`spec.psp_spec.no_supplemental_groups`	-
`spec.psp_spec.supplemental_groups`	-

user_choice

Option	Description	Recommended
`spec.psp_spec.no_run_as_user`	-
`spec.psp_spec.run_as_user`	-

Example Usage

Ask Claude to help you work with K8S Pod Security Policy resources:

Create K8S Pod Security Policy

“Create a k8s-pod-security-policy named ‘example’ in the ‘production’ namespace”

List K8S Pod Security Policys

“List all k8s-pod-security-policys in the ‘production’ namespace”

Get K8S Pod Security Policy Details

“Get details of the k8s-pod-security-policy named ‘example’ in namespace ‘production‘“

CURL Examples

# List resources
curl -X GET "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/k8s_pod_security_policys" \
  -H "Authorization: APIToken ${F5XC_API_TOKEN}" \
  -H "Content-Type: application/json"

# Get specific resource
curl -X GET "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/k8s_pod_security_policys/<name>" \
  -H "Authorization: APIToken ${F5XC_API_TOKEN}" \
  -H "Content-Type: application/json"

# Create resource
curl -X POST "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/k8s_pod_security_policys" \
  -H "Authorization: APIToken ${F5XC_API_TOKEN}" \
  -H "Content-Type: application/json" \
  -d @k8s_pod_security_policy.json

# Delete resource
curl -X DELETE "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/k8s_pod_security_policys/<name>" \
  -H "Authorization: APIToken ${F5XC_API_TOKEN}"