whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs/user-guide/pod-security-policy: misc improvements.

Browse Source 
- update link
- improve wording
- update list of volumes
This commit is contained in:
Slava Semushin
2017-01-03 16:36:53 +01:00
committed by Andrew Chen
parent 7dcd4c08b0
commit e3494fd143
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/user-guide/pod-security-policy/index.md
+6 -2
View File
@@ -8,7 +8,7 @@ Objects of type `podsecuritypolicy` govern the ability
to make requests on a pod that affect the `SecurityContext` that will be to make requests on a pod that affect the `SecurityContext` that will be
applied to a pod and container. applied to a pod and container.
See [PodSecurityPolicy proposal](https://github.com/kubernetes/kubernetes/blob/{{page.githubbranch}}/docs/proposals/security-context-constraints.md) for more information. See [PodSecurityPolicy proposal](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/security-context-constraints.md) for more information.
* TOC * TOC
{:toc} {:toc}
@@ -39,7 +39,7 @@ into three categories:
restrictive value. restrictive value.
- *Controlled by an allowable set*: Fields of this type are checked - *Controlled by an allowable set*: Fields of this type are checked
against the set to ensure their value is allowed. against the set to ensure their value is allowed.
- *Controlled by a strategy*: Items that have a strategy to generate a value provide - *Controlled by a strategy*: Items that have a strategy to provide
a mechanism to generate the value and a mechanism to ensure that a a mechanism to generate the value and a mechanism to ensure that a
specified value falls into the set of allowable values. specified value falls into the set of allowable values.
@@ -102,6 +102,10 @@ to the volume sources that are defined when creating a volume:
1. downwardAPI 1. downwardAPI
1. fc 1. fc
1. configMap 1. configMap
1. vsphereVolume
1. quobyte
1. azureDisk
1. photonPersistentDisk
1. \* (allow all volumes) 1. \* (allow all volumes)
The recommended minimum set of allowed volumes for new PSPs are The recommended minimum set of allowed volumes for new PSPs are