From f8162b0ef6fac883724c8a01169428c71a144caf Mon Sep 17 00:00:00 2001 From: aimeeu Date: Wed, 2 Oct 2019 12:08:08 -0500 Subject: [PATCH] Modify apparmor.md based on PR - Fix site build (#16531) (#16650) Modify apparmor.md and delete .profile to enable the site to build with Hugo 0.57.2. Could not cherry pick PR 16531 because the Korean translation was added in 1.14. See also PRs #16104 and #16151. zh/docs/reference/setup-tools/kubeadm/generated/README.md updated to fix 'invalid YAML delimiter' compile error caused by HTML comment. Signed-off-by: Aimee Ukasick --- content/en/docs/tutorials/clusters/apparmor.md | 13 ++++++++++++- .../en/docs/tutorials/clusters/deny-write.profile | 10 ---------- .../setup-tools/kubeadm/generated/README.md | 2 -- 3 files changed, 12 insertions(+), 13 deletions(-) delete mode 100644 content/en/docs/tutorials/clusters/deny-write.profile diff --git a/content/en/docs/tutorials/clusters/apparmor.md b/content/en/docs/tutorials/clusters/apparmor.md index 1f6658fe2b..428a74363f 100644 --- a/content/en/docs/tutorials/clusters/apparmor.md +++ b/content/en/docs/tutorials/clusters/apparmor.md @@ -166,7 +166,18 @@ k8s-apparmor-example-deny-write (enforce) First, we need to load the profile we want to use onto our nodes. The profile we'll use simply denies all file writes: -{{< code language="text" file="deny-write.profile" >}} +```shell +#include + +profile k8s-apparmor-example-deny-write flags=(attach_disconnected) { + #include + + file, + + # Deny all file writes. + deny /** w, +} +``` Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our nodes. For this example we'll just use SSH to install the profiles, but other approaches are diff --git a/content/en/docs/tutorials/clusters/deny-write.profile b/content/en/docs/tutorials/clusters/deny-write.profile deleted file mode 100644 index c2653c7112..0000000000 --- a/content/en/docs/tutorials/clusters/deny-write.profile +++ /dev/null @@ -1,10 +0,0 @@ -#include - -profile k8s-apparmor-example-deny-write flags=(attach_disconnected) { - #include - - file, - - # Deny all file writes. - deny /** w, -} diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md index de9fcfa714..b718c7ef34 100644 --- a/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md +++ b/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md @@ -1,3 +1 @@ - 此目录下的所有文件都是从其他仓库自动生成的。 **不要人工编辑它们。 您必须在上游仓库中编辑它们**