{ allowedCSIDrivers =
    [] : List ./../types/io.k8s.api.policy.v1beta1.AllowedCSIDriver.dhall
, allowedCapabilities = [] : List Text
, allowedFlexVolumes =
    [] : List ./../types/io.k8s.api.policy.v1beta1.AllowedFlexVolume.dhall
, allowedHostPaths =
    [] : List ./../types/io.k8s.api.policy.v1beta1.AllowedHostPath.dhall
, allowedProcMountTypes = [] : List Text
, allowedUnsafeSysctls = [] : List Text
, defaultAddCapabilities = [] : List Text
, forbiddenSysctls = [] : List Text
, fsGroup = ./io.k8s.api.policy.v1beta1.FSGroupStrategyOptions.dhall
, hostPorts = [] : List ./../types/io.k8s.api.policy.v1beta1.HostPortRange.dhall
, requiredDropCapabilities = [] : List Text
, runAsUser = ./io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions.dhall
, seLinux = ./io.k8s.api.policy.v1beta1.SELinuxStrategyOptions.dhall
, supplementalGroups =
    ./io.k8s.api.policy.v1beta1.SupplementalGroupsStrategyOptions.dhall
, volumes = [] : List Text
, allowPrivilegeEscalation = None Bool
, defaultAllowPrivilegeEscalation = None Bool
, hostIPC = None Bool
, hostNetwork = None Bool
, hostPID = None Bool
, privileged = None Bool
, readOnlyRootFilesystem = None Bool
, runAsGroup =
    None ./../types/io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions.dhall
, runtimeClass =
    None ./../types/io.k8s.api.policy.v1beta1.RuntimeClassStrategyOptions.dhall
}