From e3494fd1430f77545cf819bb457039d0173e6de2 Mon Sep 17 00:00:00 2001 From: Slava Semushin Date: Tue, 3 Jan 2017 16:36:53 +0100 Subject: [PATCH] docs/user-guide/pod-security-policy: misc improvements. - update link - improve wording - update list of volumes --- docs/user-guide/pod-security-policy/index.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/docs/user-guide/pod-security-policy/index.md b/docs/user-guide/pod-security-policy/index.md index 6a756c4766..da1c6514d6 100644 --- a/docs/user-guide/pod-security-policy/index.md +++ b/docs/user-guide/pod-security-policy/index.md @@ -8,7 +8,7 @@ Objects of type `podsecuritypolicy` govern the ability to make requests on a pod that affect the `SecurityContext` that will be applied to a pod and container. -See [PodSecurityPolicy proposal](https://github.com/kubernetes/kubernetes/blob/{{page.githubbranch}}/docs/proposals/security-context-constraints.md) for more information. +See [PodSecurityPolicy proposal](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/security-context-constraints.md) for more information. * TOC {:toc} @@ -39,7 +39,7 @@ into three categories: restrictive value. - *Controlled by an allowable set*: Fields of this type are checked against the set to ensure their value is allowed. -- *Controlled by a strategy*: Items that have a strategy to generate a value provide +- *Controlled by a strategy*: Items that have a strategy to provide a mechanism to generate the value and a mechanism to ensure that a specified value falls into the set of allowable values. @@ -102,6 +102,10 @@ to the volume sources that are defined when creating a volume: 1. downwardAPI 1. fc 1. configMap +1. vsphereVolume +1. quobyte +1. azureDisk +1. photonPersistentDisk 1. \* (allow all volumes) The recommended minimum set of allowed volumes for new PSPs are