Merge pull request #21591 from scottstout/master
Changed whitelist to allowlist and blacklist to denylist.
This commit is contained in:
@@ -189,9 +189,9 @@ Do not configure these two fields such that there is overlap, meaning that a
|
||||
given sysctl is both allowed and forbidden.
|
||||
|
||||
{{< warning >}}
|
||||
If you whitelist unsafe sysctls via the `allowedUnsafeSysctls` field
|
||||
If you allow unsafe sysctls via the `allowedUnsafeSysctls` field
|
||||
in a PodSecurityPolicy, any pod using such a sysctl will fail to start
|
||||
if the sysctl is not whitelisted via the `--allowed-unsafe-sysctls` kubelet
|
||||
if the sysctl is not allowed via the `--allowed-unsafe-sysctls` kubelet
|
||||
flag as well on that node.
|
||||
{{< /warning >}}
|
||||
|
||||
|
||||
@@ -245,7 +245,7 @@ Existing static backends that you configure with runtime flags are not affected
|
||||
|
||||
The AuditSink policy differs from the legacy audit runtime policy. This is because the API object serves different use cases. The policy will continue to evolve to serve more use cases.
|
||||
|
||||
The `level` field applies the given audit level to all requests. The `stages` field is now a whitelist of stages to record.
|
||||
The `level` field applies the given audit level to all requests. The `stages` field is now a list of allowed stages to record.
|
||||
|
||||
#### Contacting the webhook
|
||||
|
||||
|
||||
Reference in New Issue
Block a user