Merge pull request #33289 from kinzhi/kinzhi50
[zh]Update content/zh/docs/reference/labels-annotations-taints/audit-annotations.md
This commit is contained in:
@@ -88,7 +88,7 @@ that was transgressed as well as the specific policies on the fields that were
|
|||||||
violated from the PodSecurity enforcement.
|
violated from the PodSecurity enforcement.
|
||||||
|
|
||||||
See [Pod Security Standards](/docs/concepts/security/pod-security-standards/)
|
See [Pod Security Standards](/docs/concepts/security/pod-security-standards/)
|
||||||
for more information
|
for more information.
|
||||||
-->
|
-->
|
||||||
## pod-security.kubernetes.io/audit-violations {#pod-security-kubernetes-io-audit-violations}
|
## pod-security.kubernetes.io/audit-violations {#pod-security-kubernetes-io-audit-violations}
|
||||||
|
|
||||||
@@ -99,4 +99,38 @@ PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container
|
|||||||
注解值给出审计策略违规的详细说明,它包含所违反的 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)级别以及
|
注解值给出审计策略违规的详细说明,它包含所违反的 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)级别以及
|
||||||
PodSecurity 执行中违反的特定策略及对应字段。
|
PodSecurity 执行中违反的特定策略及对应字段。
|
||||||
|
|
||||||
有关详细信息,请参阅 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)。
|
有关详细信息,请参阅 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)。
|
||||||
|
|
||||||
|
<!--
|
||||||
|
## authorization.k8s.io/decision
|
||||||
|
|
||||||
|
Example: `authorization.k8s.io/decision: "forbid"`
|
||||||
|
|
||||||
|
This annotation indicates whether or not a request was authorized in Kubernetes audit logs.
|
||||||
|
|
||||||
|
See [Auditing](/docs/tasks/debug-application-cluster/audit/) for more information.
|
||||||
|
-->
|
||||||
|
## authorization.k8s.io/decision {#authorization-k8s-io-decision}
|
||||||
|
|
||||||
|
例子:`authorization.k8s.io/decision: "forbid"`
|
||||||
|
|
||||||
|
此注解在 Kubernetes 审计日志中表示请求是否获得授权。
|
||||||
|
|
||||||
|
有关详细信息,请参阅[审计](/zh/docs/tasks/debug-application-cluster/audit/)。
|
||||||
|
|
||||||
|
<!--
|
||||||
|
## authorization.k8s.io/reason
|
||||||
|
|
||||||
|
Example: `authorization.k8s.io/reason: "Human-readable reason for the decision"`
|
||||||
|
|
||||||
|
This annotation gives reason for the [decision](#authorization-k8s-io-decision) in Kubernetes audit logs.
|
||||||
|
|
||||||
|
See [Auditing](/docs/tasks/debug-application-cluster/audit/) for more information.
|
||||||
|
-->
|
||||||
|
## authorization.k8s.io/reason {#authorization-k8s-io-reason}
|
||||||
|
|
||||||
|
例子:`authorization.k8s.io/reason: "Human-readable reason for the decision"`
|
||||||
|
|
||||||
|
此注解给出了 Kubernetes 审计日志中 [decision](#authorization-k8s-io-decision) 的原因。
|
||||||
|
|
||||||
|
有关详细信息,请参阅[审计](/zh/docs/tasks/debug-application-cluster/audit/)。
|
||||||
Reference in New Issue
Block a user