Update pod-security-policy.md

fix the translation of "PodSecurityPolicies which allow the pod as-is, without changing defaults or mutating the pod, are preferred"
This commit is contained in:
huangshanhui
2021-03-30 10:53:44 +08:00
committed by GitHub
parent 3ccdb3426a
commit 6da498d196
@@ -316,8 +316,7 @@ controller selects policies according to the following criteria:
2. If the pod must be defaulted or mutated, the first PodSecurityPolicy 2. If the pod must be defaulted or mutated, the first PodSecurityPolicy
(ordered by name) to allow the pod is selected. (ordered by name) to allow the pod is selected.
--> -->
1. 优先考虑允许 Pod 不经修改地创建或更新的 PodSecurityPolicy,这些策略 1. 优先考虑允许pod保持原样,不会更改Pod字段的默认值或其他配置的PodSecurityPolicy
不会更改 Pod 字段的默认值或者其他配置。
这类非更改性质的 PodSecurityPolicy 对象之间的顺序无关紧要。 这类非更改性质的 PodSecurityPolicy 对象之间的顺序无关紧要。
2. 如果必须要为 Pod 设置默认值或者其他配置,(按名称顺序)选择第一个允许 2. 如果必须要为 Pod 设置默认值或者其他配置,(按名称顺序)选择第一个允许
Pod 操作的 PodSecurityPolicy 对象。 Pod 操作的 PodSecurityPolicy 对象。