code: func AllowsHostVolumePath(psp *policy.PodSecurityPolicy, hostPath string) (pathIsAllowed, mustBeReadOnly bool) {
  	if psp == nil {
  		return false, false
  	}
  
  	// If no allowed paths are specified then allow any path
  	if len(psp.Spec.AllowedHostPaths) == 0 {
  		return true, false
  	}
  
  	for _, allowedPath := range psp.Spec.AllowedHostPaths {
  		if hasPathPrefix(hostPath, allowedPath.PathPrefix) {
  			if !allowedPath.ReadOnly {
  				return true, allowedPath.ReadOnly
  			}
  			pathIsAllowed = true
  			mustBeReadOnly = true
  		}
  	}
  
  	return pathIsAllowed, mustBeReadOnly
  }
docs: // AllowsHostVolumePath is a utility for checking if a PSP allows the host volume path.
  // This only checks the path. You should still check to make sure the host volume fs type is allowed.