From 8c3eb6e414bbfda4c7dbb4ccab04ee9459b61702 Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Thu, 19 Aug 2021 09:51:54 -0400 Subject: [PATCH 1/2] Clarify audit annotation destination --- content/en/docs/concepts/security/pod-security-admission.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/concepts/security/pod-security-admission.md b/content/en/docs/concepts/security/pod-security-admission.md index 09387521ab..0ecea6d3ee 100644 --- a/content/en/docs/concepts/security/pod-security-admission.md +++ b/content/en/docs/concepts/security/pod-security-admission.md @@ -63,7 +63,7 @@ takes if a potential violation is detected: Mode | Description :---------|:------------ **`enforce`** | Policy violations will cause the pod to be rejected. -**`audit`** | Policy violations will trigger the addition of an audit annotation, but are otherwise allowed. +**`audit`** | Policy violations will trigger the addition of an audit annotation to the event recorded in the [audit log](/docs/tasks/debug-application-cluster/audit/), but are otherwise allowed. **`warn`** | Policy violations will trigger a user-facing warning, but are otherwise allowed. {{< /table >}} From 315e290107052cad4e19e6ab010042dac824746e Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Thu, 19 Aug 2021 10:04:34 -0400 Subject: [PATCH 2/2] Avoid word-break on narrow page widths --- content/en/docs/concepts/security/pod-security-admission.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/en/docs/concepts/security/pod-security-admission.md b/content/en/docs/concepts/security/pod-security-admission.md index 0ecea6d3ee..8df9d5616a 100644 --- a/content/en/docs/concepts/security/pod-security-admission.md +++ b/content/en/docs/concepts/security/pod-security-admission.md @@ -62,9 +62,9 @@ takes if a potential violation is detected: {{< table caption="Pod Security Admission modes" >}} Mode | Description :---------|:------------ -**`enforce`** | Policy violations will cause the pod to be rejected. -**`audit`** | Policy violations will trigger the addition of an audit annotation to the event recorded in the [audit log](/docs/tasks/debug-application-cluster/audit/), but are otherwise allowed. -**`warn`** | Policy violations will trigger a user-facing warning, but are otherwise allowed. +**enforce** | Policy violations will cause the pod to be rejected. +**audit** | Policy violations will trigger the addition of an audit annotation to the event recorded in the [audit log](/docs/tasks/debug-application-cluster/audit/), but are otherwise allowed. +**warn** | Policy violations will trigger a user-facing warning, but are otherwise allowed. {{< /table >}} A namespace can configure any or all modes, or even set a different level for different modes.