From d82bdb4423f97dd9a4e14847ba6063617926c492 Mon Sep 17 00:00:00 2001 From: "wei.wang" Date: Sat, 14 May 2022 02:30:13 +0800 Subject: [PATCH] [zh]Update content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md [zh]Update content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md --- .../enforce-standards-namespace-labels.md | 2 +- .../enforce-standards-namespace-labels.md | 11 +++++++++-- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/content/en/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md b/content/en/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md index b96befaf2f..e7cf331a78 100644 --- a/content/en/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md +++ b/content/en/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md @@ -9,7 +9,7 @@ min-kubernetes-server-version: v1.22 Namespaces can be labeled to enforce the [Pod Security Standards](/docs/concepts/security/pod-security-standards). The three policies [privileged](/docs/concepts/security/pod-security-standards/#privileged), [baseline](/docs/concepts/security/pod-security-standards/#baseline) -and [restricted](https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted) broadly cover the security spectrum +and [restricted](/docs/concepts/security/pod-security-standards/#restricted) broadly cover the security spectrum and are implemented by the [Pod Security](/docs/concepts/security/pod-security-admission/) {{< glossary_tooltip text="admission controller" term_id="admission-controller" >}}. diff --git a/content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md b/content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md index 7d75a934a6..fd11c55005 100644 --- a/content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md +++ b/content/zh/docs/tasks/configure-pod-container/enforce-standards-namespace-labels.md @@ -13,9 +13,16 @@ min-kubernetes-server-version: v1.22 --> -你可以通过为名字空间设置标签来强制实施 [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards)。 +[特权（privileged）](/zh/docs/concepts/security/pod-security-standards/#privileged)、 +[基线（baseline）](/zh/docs/concepts/security/pod-security-standards/#baseline)和 +[受限（restricted）](/zh/docs/concepts/security/pod-security-standards/#restricted) +这三种策略涵盖了广泛安全范围，并由 [Pod 安全](/zh/docs/concepts/security/pod-security-admission/) + {{< glossary_tooltip text="准入控制器" term_id="admission-controller" >}}实现。 ## {{% heading "prerequisites" %}}