Merge pull request #32809 from tengqm/zh-resync-securing-a-cluster

[zh] Rersync securing a cluster
This commit is contained in:
Kubernetes Prow Robot
2022-04-08 21:58:06 -07:00
committed by GitHub
2 changed files with 40 additions and 14 deletions
@@ -1333,7 +1333,7 @@ This admission controller will deny any Pod that attempts to set certain escalat
fields, as shown in the
[Configure a Security Context for a Pod or Container](/docs/tasks/configure-pod-container/security-context/)
task.
If you don't use [Pod Security admission]((/docs/concepts/security/pod-security-admission/),
If you don't use [Pod Security admission](/docs/concepts/security/pod-security-admission/),
[PodSecurityPolicies](/docs/concepts/security/pod-security-policy/), nor any external enforcement mechanism,
then you could use this admission controller to restrict the set of values a security context can take.