Update auto-generated files.

api/swagger-spec/api-v1.json

@@ -22773,7 +22773,8 @@
      "allowHostPorts",
      "allowHostPID",
      "allowHostIPC",
-     "readOnlyRootFilesystem"
+     "readOnlyRootFilesystem",
+     "allowedFlexDrivers"
     ],
     "properties": {
      "kind": {
@@ -22885,6 +22886,12 @@
        "type": "string"
       },
       "description": "SeccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations.  An unset (nil) or empty value means that no profiles may be specifid by the pod or container.\tThe wildcard '*' may be used to allow all profiles.  When used to generate a value for a pod the first non-wildcard profile will be used as the default."
+     },
+     "allowedFlexDrivers": {
+      "type": "array",
+      "items": {
+       "type": "string"
+      }
      }
     }
    },

pkg/openapi/zz_generated.openapi.go

@@ -9329,8 +9329,22 @@ func GetOpenAPIDefinitions(ref openapi.ReferenceCallback) map[string]openapi.Ope
 								},
 							},
 						},
+						"allowedFlexDrivers": {
+							SchemaProps: spec.SchemaProps{
+								Description: "AllowedFlexDrivers is a whitelist of allowed Flexvolume drivers. Empty or nil indicates that all drivers may be used.",
+								Type:        []string{"array"},
+								Items: &spec.SchemaOrArray{
+									Schema: &spec.Schema{
+										SchemaProps: spec.SchemaProps{
+											Type:   []string{"string"},
+											Format: "",
+										},
+									},
+								},
+							},
+						},
 					},
-					Required: []string{"priority", "allowPrivilegedContainer", "defaultAddCapabilities", "requiredDropCapabilities", "allowedCapabilities", "allowHostDirVolumePlugin", "volumes", "allowHostNetwork", "allowHostPorts", "allowHostPID", "allowHostIPC", "readOnlyRootFilesystem"},
+					Required: []string{"priority", "allowPrivilegedContainer", "defaultAddCapabilities", "requiredDropCapabilities", "allowedCapabilities", "allowHostDirVolumePlugin", "volumes", "allowHostNetwork", "allowHostPorts", "allowHostPID", "allowHostIPC", "readOnlyRootFilesystem", "allowedFlexDrivers"},
 				},
 			},
 			Dependencies: []string{

pkg/security/apis/security/v1/swagger_doc.go

@@ -149,6 +149,7 @@ var map_SecurityContextConstraints = map[string]string{
 	"users":                    "The users who have permissions to use this security context constraints",
 	"groups":                   "The groups that have permission to use this security context constraints",
 	"seccompProfiles":          "SeccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations.  An unset (nil) or empty value means that no profiles may be specifid by the pod or container.\tThe wildcard '*' may be used to allow all profiles.  When used to generate a value for a pod the first non-wildcard profile will be used as the default.",
+	"allowedFlexDrivers":       "AllowedFlexDrivers is a whitelist of allowed Flexvolume drivers. Empty or nil indicates that all drivers may be used.",
 }
 
 func (SecurityContextConstraints) SwaggerDoc() map[string]string {

pkg/security/apis/security/v1/zz_generated.conversion.go

@@ -445,6 +445,7 @@ func autoConvert_v1_SecurityContextConstraints_To_security_SecurityContextConstr
 	out.Users = *(*[]string)(unsafe.Pointer(&in.Users))
 	out.Groups = *(*[]string)(unsafe.Pointer(&in.Groups))
 	out.SeccompProfiles = *(*[]string)(unsafe.Pointer(&in.SeccompProfiles))
+	out.AllowedFlexDrivers = *(*[]string)(unsafe.Pointer(&in.AllowedFlexDrivers))
 	return nil
 }
 
@@ -467,6 +468,11 @@ func autoConvert_security_SecurityContextConstraints_To_v1_SecurityContextConstr
 	} else {
 		out.AllowedCapabilities = *(*[]api_v1.Capability)(unsafe.Pointer(&in.AllowedCapabilities))
 	}
+	if in.AllowedFlexDrivers == nil {
+		out.AllowedFlexDrivers = make([]string, 0)
+	} else {
+		out.AllowedFlexDrivers = *(*[]string)(unsafe.Pointer(&in.AllowedFlexDrivers))
+	}
 	if in.Volumes == nil {
 		out.Volumes = make([]FSType, 0)
 	} else {

pkg/security/apis/security/v1/zz_generated.deepcopy.go

@@ -301,6 +301,11 @@ func DeepCopy_v1_SecurityContextConstraints(in interface{}, out interface{}, c *
 			*out = make([]string, len(*in))
 			copy(*out, *in)
 		}
+		if in.AllowedFlexDrivers != nil {
+			in, out := &in.AllowedFlexDrivers, &out.AllowedFlexDrivers
+			*out = make([]string, len(*in))
+			copy(*out, *in)
+		}
 		return nil
 	}
 }

pkg/security/apis/security/zz_generated.deepcopy.go

@@ -269,6 +269,11 @@ func DeepCopy_security_SecurityContextConstraints(in interface{}, out interface{
 			*out = make([]api.Capability, len(*in))
 			copy(*out, *in)
 		}
+		if in.AllowedFlexDrivers != nil {
+			in, out := &in.AllowedFlexDrivers, &out.AllowedFlexDrivers
+			*out = make([]string, len(*in))
+			copy(*out, *in)
+		}
 		if in.Volumes != nil {
 			in, out := &in.Volumes, &out.Volumes
 			*out = make([]FSType, len(*in))