From 8f913ba982ef7d1a0868aa85afdb528edcd9732f Mon Sep 17 00:00:00 2001 From: Tim Bannister Date: Thu, 1 Apr 2021 18:15:09 +0100 Subject: [PATCH] Note PodSecurityPolicy deprecation --- content/en/docs/tasks/administer-cluster/sysctl-cluster.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md index 5660b590b0..f81623982f 100644 --- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md +++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md @@ -167,6 +167,8 @@ to schedule those pods onto the right nodes. ## PodSecurityPolicy +{{< feature-state for_k8s_version="v1.21" state="deprecated" >}} + You can further control which sysctls can be set in pods by specifying lists of sysctls or sysctl patterns in the `forbiddenSysctls` and/or `allowedUnsafeSysctls` fields of the PodSecurityPolicy. A sysctl pattern ends