whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #27310 from huangshanhui/patch-2

Browse Source 
Update pod-security-policy.md
This commit is contained in:
Kubernetes Prow Robot
2021-05-29 22:56:25 -07:00
committed by GitHub
parent 5a44baf9bd 1e64fb0a48
commit 44acf9c33a
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/zh/docs/concepts/policy/pod-security-policy.md
+1 -3
View File
@@ -321,8 +321,7 @@ controller selects policies according to the following criteria:
2. If the pod must be defaulted or mutated, the first PodSecurityPolicy 2. If the pod must be defaulted or mutated, the first PodSecurityPolicy
(ordered by name) to allow the pod is selected. (ordered by name) to allow the pod is selected.
--> -->
1. 优先考虑中允许 Pod 不经修改地创建或更新的 PodSecurityPolicy，这些策略 1. 优先考虑允许 Pod 保持原样，不会更改 Pod 字段默认值或其他配置的 PodSecurityPolicy。
不会更改 Pod 字段的默认值或者其他配置。
这类非更改性质的 PodSecurityPolicy 对象之间的顺序无关紧要。 这类非更改性质的 PodSecurityPolicy 对象之间的顺序无关紧要。
2. 如果必须要为 Pod 设置默认值或者其他配置，（按名称顺序）选择第一个允许 2. 如果必须要为 Pod 设置默认值或者其他配置，（按名称顺序）选择第一个允许
Pod 操作的 PodSecurityPolicy 对象。 Pod 操作的 PodSecurityPolicy 对象。
@@ -1238,4 +1237,3 @@ By default, all safe sysctls are allowed.
- 参阅[Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/) - 参阅[Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)
了解策略建议。 了解策略建议。
- 阅读 [Pod 安全策略参考](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritypolicy-v1beta1-policy)了解 API 细节。 - 阅读 [Pod 安全策略参考](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritypolicy-v1beta1-policy)了解 API 细节。