From 28e1d2a5169070803d6582e6fcd4284613f004d8 Mon Sep 17 00:00:00 2001 From: Shota Yoshimura <41785014+yosshi825@users.noreply.github.com> Date: Mon, 22 Jul 2024 14:50:57 +0900 Subject: [PATCH] Add `/sys/devices/virtual/powercap` to Masked Paths in security-context.md The document does not reflect the following: ref https://github.com/kubernetes/kubernetes/pull/125970 --- .../en/docs/tasks/configure-pod-container/security-context.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/content/en/docs/tasks/configure-pod-container/security-context.md b/content/en/docs/tasks/configure-pod-container/security-context.md index b176d20df5..bde3e3d088 100644 --- a/content/en/docs/tasks/configure-pod-container/security-context.md +++ b/content/en/docs/tasks/configure-pod-container/security-context.md @@ -498,6 +498,7 @@ them. The list of masked and read-only paths are as follows: - `/proc/sched_debug` - `/proc/scsi` - `/sys/firmware` + - `/sys/devices/virtual/powercap` - Read-Only Paths: - `/proc/bus` @@ -578,4 +579,4 @@ kubectl delete pod security-context-demo-4 * Read about [User Namespaces](/docs/concepts/workloads/pods/user-namespaces/) for Linux pods. * [Masked Paths in the OCI Runtime - Specification](https://github.com/opencontainers/runtime-spec/blob/f66aad47309/config-linux.md#masked-paths) \ No newline at end of file + Specification](https://github.com/opencontainers/runtime-spec/blob/f66aad47309/config-linux.md#masked-paths)