whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use PSP from policy API group. (#7562)

Browse Source
This commit is contained in:
Vyacheslav Semushin
2018-03-03 20:47:53 +01:00
committed by k8s-ci-robot
parent 645986116b
commit fae89c5c7d
6 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/tutorials/clusters/apparmor.md
+2 -3
View File
@@ -317,14 +317,13 @@ node with the required profile.
### Restricting profiles with the PodSecurityPolicy
If the PodSecurityPolicy extension is enabled, cluster-wide AppArmor restrictions can be applied. To
enable the PodSecurityPolicy, two flags must be set on the `apiserver`:
enable the PodSecurityPolicy, the following flag must be set on the `apiserver`:
```
--admission-control=PodSecurityPolicy[,others...]
--runtime-config=extensions/v1beta1/podsecuritypolicy[,others...]
```
With the extension enabled, the AppArmor options can be specified as annotations on the PodSecurityPolicy:
The AppArmor options can be specified as annotations on the PodSecurityPolicy:
```yaml
apparmor.security.beta.kubernetes.io/defaultProfileName: <profile_ref>