Clarify privileged Pod Security Standard description

This commit is contained in:
Jordan Liggitt
2022-05-19 14:51:51 -04:00
parent 704c007ddf
commit 03f0d23228
@@ -32,7 +32,7 @@ typically aimed at system- and infrastructure-level workloads managed by privile
The Privileged policy is defined by an absence of restrictions. For allow-by-default enforcement The Privileged policy is defined by an absence of restrictions. For allow-by-default enforcement
mechanisms (such as gatekeeper), the Privileged policy may be an absence of applied constraints mechanisms (such as gatekeeper), the Privileged policy may be an absence of applied constraints
rather than an instantiated profile. In contrast, for a deny-by-default mechanism (such as Pod rather than an instantiated profile. In contrast, for a deny-by-default mechanism (such as Pod
Security Policy) the Privileged policy should enable all controls (disable all restrictions). Security Policy) the Privileged policy should disable all restrictions.
### Baseline ### Baseline