Merge pull request #33291 from kinzhi/kinzhi52

[zh]Sync content/zh/examples/policy/restricted-psp.yaml
2022-04-30 05:37:12 -07:00
parent 20ce068d30 bf84c6a5a0
commit a66ba6a53e
1 changed files with 2 additions and 0 deletions
@@ -3,6 +3,7 @@ kind: PodSecurityPolicy
 metadata:
  name: restricted
  annotations:
+    # docker/default 标识 seccomp 的配置文件，但它与 Docker 运行时没有特别关联
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
    apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
    apparmor.security.beta.kubernetes.io/defaultProfileName:  'runtime/default'
@@ -45,3 +46,4 @@ spec:
      - min: 1
        max: 65535
  readOnlyRootFilesystem: false
+