diff --git a/content/zh/docs/reference/glossary/pod-security-policy.md b/content/zh/docs/reference/glossary/pod-security-policy.md index 5c8475292f..f80416fb44 100644 --- a/content/zh/docs/reference/glossary/pod-security-policy.md +++ b/content/zh/docs/reference/glossary/pod-security-policy.md @@ -2,7 +2,7 @@ title: Pod 安全策略 id: pod-security-policy date: 2018-04-12 -full_link: /zh/docs/concepts/policy/pod-security-policy/ +full_link: /zh/docs/concepts/security/pod-security-policy/ short_description: > 为 Pod 的创建和更新操作启用细粒度的授权。 @@ -17,7 +17,7 @@ tags: title: Pod Security Policy id: pod-security-policy date: 2018-04-12 -full_link: /docs/concepts/policy/pod-security-policy/ +full_link: /docs/concepts/security/pod-security-policy/ short_description: > Enables fine-grained authorization of pod creation and updates. @@ -43,4 +43,9 @@ A cluster-level resource that controls security sensitive aspects of the Pod spe Pod 安全策略是集群级别的资源,它控制着 Pod 规约中的安全性敏感的内容。 `PodSecurityPolicy`对象定义了一组条件以及相关字段的默认值,Pod 运行时必须满足这些条件。Pod 安全策略控制实现上体现为一个可选的准入控制器。 + +PodSecurityPolicy 自 Kubernetes v1.21 起已弃用,并将在 v1.25 中删除。 +我们建议迁移到 [Pod 安全准入](/zh/docs/concepts/security/pod-security-admission/)或第三方准入插件。