From 1be866980854102455fc5d5fd6415807a03a13d3 Mon Sep 17 00:00:00 2001 From: "wei.wang" Date: Fri, 29 Apr 2022 01:24:16 +0800 Subject: [PATCH] [zh]Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md [zh]Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md Co-authored-by: Qiming Teng Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md Co-authored-by: Qiming Teng Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md Co-authored-by: Qiming Teng --- .../audit-annotations.md | 38 ++++++++++++++++++- 1 file changed, 36 insertions(+), 2 deletions(-) diff --git a/content/zh/docs/reference/labels-annotations-taints/audit-annotations.md b/content/zh/docs/reference/labels-annotations-taints/audit-annotations.md index 2ab584e4ed..a90160888b 100644 --- a/content/zh/docs/reference/labels-annotations-taints/audit-annotations.md +++ b/content/zh/docs/reference/labels-annotations-taints/audit-annotations.md @@ -88,7 +88,7 @@ that was transgressed as well as the specific policies on the fields that were violated from the PodSecurity enforcement. See [Pod Security Standards](/docs/concepts/security/pod-security-standards/) -for more information +for more information. --> ## pod-security.kubernetes.io/audit-violations {#pod-security-kubernetes-io-audit-violations} @@ -99,4 +99,38 @@ PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container 注解值给出审计策略违规的详细说明,它包含所违反的 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)级别以及 PodSecurity 执行中违反的特定策略及对应字段。 -有关详细信息,请参阅 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)。 \ No newline at end of file +有关详细信息,请参阅 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)。 + + +## authorization.k8s.io/decision {#authorization-k8s-io-decision} + +例子:`authorization.k8s.io/decision: "forbid"` + +此注解在 Kubernetes 审计日志中表示请求是否获得授权。 + +有关详细信息,请参阅[审计](/zh/docs/tasks/debug-application-cluster/audit/)。 + + +## authorization.k8s.io/reason {#authorization-k8s-io-reason} + +例子:`authorization.k8s.io/reason: "Human-readable reason for the decision"` + +此注解给出了 Kubernetes 审计日志中 [decision](#authorization-k8s-io-decision) 的原因。 + +有关详细信息,请参阅[审计](/zh/docs/tasks/debug-application-cluster/audit/)。 \ No newline at end of file