kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #24674 from tengqm/fix-24507 

[zh] Translate docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
pull/25418/head
Kubernetes Prow Robot 2020-12-05 22:49:25 -08:00 committed by GitHub
parent d29319028f 4abcae9498
commit 434f5e96bd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 1644 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1643
content/zh/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md Normal file
View File

File diff suppressed because it is too large Load Diff

2
content/zh/docs/tasks/configure-pod-container/configure-gmsa.md
View File

@ -481,7 +481,7 @@ If you add the `lifecycle` section show above to your Pod spec, the Pod will exe
## GMSA limitations
When using the [ContainerD runtime for Windows](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd) accessing restricted network shares via the GMSA domain identity fails. The container will recieve the identity of and calls from `nltest.exe /query` will work. It is recommended to use the [Docker EE runtime](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#docker-ee) if access to network shares is required. The Windows Server team is working on resolving the issue in the Windows Kernel and will release a patch to resolve this issue in the future. Look for updates on the [Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
-->
## GMSA 的局限
## GMSA 的局限 {#gmsa-limitations}
在使用 [Windows 版本的 ContainerD 运行时](/zh/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd)
时，通过 GMSA 域身份标识访问受限制的网络共享资源时会出错。