docs/admin: clarify SecurityContextDeny and when it should be used

This commit is contained in:
Eric Chiang
2017-03-27 10:39:27 -07:00
committed by Andrew Chen
parent 216734a813
commit df099406ed
+1 -1
View File
@@ -197,7 +197,7 @@ We strongly recommend using this plug-in if you intend to make use of Kubernetes
### SecurityContextDeny
This plug-in will deny any pod with a [SecurityContext](/docs/user-guide/security-context) that defines options that were not available on the `Container`.
This plug-in will deny any pod that attempts to set certain escalating [SecurityContext](/docs/user-guide/security-context) fields. This should be enabled if a cluster doesn't utilize [pod security policies](/docs/user-guide/pod-security-policy) to restrict the set of values a security context can take.
### ResourceQuota