kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #45000 from Arhell/zh-typo 

[zh] Resolve typos
pull/45023/head
Kubernetes Prow Robot 2024-02-04 19:37:29 -08:00 committed by GitHub
parent 779ceebead 8e162cb324
commit 5a115ba1af
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
content/zh-cn/docs/concepts/security/rbac-good-practices.md
View File

@ -151,7 +151,7 @@ Kubernetes 默认提供访问权限并非是每个集群都需要的。
It is vital to periodically review the Kubernetes RBAC settings for redundant entries and It is vital to periodically review the Kubernetes RBAC settings for redundant entries and
possible privilege escalations. possible privilege escalations.
If an attacker is able to create a user account with the same name as a deleted user, If an attacker is able to create a user account with the same name as a deleted user,
they can automatically inherit all the rights of the deleted user, especially the they can automatically inherit all the rights of the deleted user, specially the
rights assigned to that user. rights assigned to that user.
--> -->
### 定期检查 {#periodic-review} ### 定期检查 {#periodic-review}
@ -260,8 +260,8 @@ You should only allow access to create PersistentVolume objects for:
你应该只允许以下实体具有创建 PersistentVolume 对象的访问权限： 你应该只允许以下实体具有创建 PersistentVolume 对象的访问权限：
<!-- <!--
- users (cluster operators) that need this access for their work, and who you trust, - Users (cluster operators) that need this access for their work, and who you trust,
- the Kubernetes control plane components which creates PersistentVolumes based on PersistentVolumeClaims - The Kubernetes control plane components which creates PersistentVolumes based on PersistentVolumeClaims
that are configured for automatic provisioning. that are configured for automatic provisioning.
This is usually setup by the Kubernetes provider or by the operator when installing a CSI driver. This is usually setup by the Kubernetes provider or by the operator when installing a CSI driver.
--> -->