[zh-cn] Resync psp-to-pss page

pull/34783/head
Qiming Teng 2022-07-03 11:25:41 +08:00
parent 1eca905f3d
commit c5f5cf73bf
1 changed files with 13 additions and 15 deletions

View File

@ -14,15 +14,16 @@ weight: 95
--> -->
<!-- overview --> <!-- overview -->
<!-- <!--
The tables below enumerate the configuration parameters on The tables below enumerate the configuration parameters on
[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) objects, whether the field mutates [PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) objects, whether the field mutates
and/or validates pods, and how the configuration values map to the and/or validates pods, and how the configuration values map to the
[Pod Security Standards](/docs/concepts/security/pod-security-standards/). [Pod Security Standards](/docs/concepts/security/pod-security-standards/).
--> -->
下面的表格列举了 [PodSecurityPolicy](/zh/docs/concepts/security/pod-security-policy/) 下面的表格列举了 [PodSecurityPolicy](/zh-cn/docs/concepts/security/pod-security-policy/)
对象上的配置参数,这些字段是否会变更或检查 Pod 配置,以及这些配置值如何映射到 对象上的配置参数,这些字段是否会变更或检查 Pod 配置,以及这些配置值如何映射到
[Pod 安全性标准Pod Security Standards](/zh/docs/concepts/security/pod-security-standards/) [Pod 安全性标准Pod Security Standards](/zh-cn/docs/concepts/security/pod-security-standards/)
之上。 之上。
<!-- <!--
@ -34,31 +35,29 @@ Anything outside the allowed values for those profiles would fall under the
means all values are allowed under all Pod Security Standards. means all values are allowed under all Pod Security Standards.
--> -->
对于每个可应用的参数,表格中给出了 对于每个可应用的参数,表格中给出了
[Baseline](/zh/docs/concepts/security/pod-security-standards/#baseline) 和 [Baseline](/zh-cn/docs/concepts/security/pod-security-standards/#baseline) 和
[Restricted](/zh/docs/concepts/security/pod-security-standards/#restricted) [Restricted](/zh-cn/docs/concepts/security/pod-security-standards/#restricted)
配置下可接受的取值。 配置下可接受的取值。
对这两种配置而言不可接受的取值均归入 对这两种配置而言不可接受的取值均归入
[Privileged](/zh/docs/concepts/security/pod-security-standards/#privileged) [Privileged](/zh-cn/docs/concepts/security/pod-security-standards/#privileged)
配置下。“无意见”意味着对所有 Pod 安全性标准而言所有取值都可接受。 配置下。“无意见”意味着对所有 Pod 安全性标准而言所有取值都可接受。
<!-- <!--
For a step-by-step migration guide, see For a step-by-step migration guide, see
[Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller](/docs/tasks/configure-pod-container/migrate-from-psp/). [Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller](/docs/tasks/configure-pod-container/migrate-from-psp/).
--> -->
如果想要了解如何一步步完成迁移,可参阅 如果想要了解如何一步步完成迁移,可参阅[从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器](/zh-cn/docs/tasks/configure-pod-container/migrate-from-psp/)。
[从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器](/zh/docs/tasks/configure-pod-container/migrate-from-psp/)。
<!-- body --> <!-- body -->
<!-- <!--
## PodSecurityPolicy Spec ## PodSecurityPolicy Spec
-->
## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
<!--
The fields enumerated in this table are part of the `PodSecurityPolicySpec`, which is specified The fields enumerated in this table are part of the `PodSecurityPolicySpec`, which is specified
under the `.spec` field path. under the `.spec` field path.
--> -->
## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
下面表格中所列举的字段是 `PodSecurityPolicySpec` 的一部分,是通过 `.spec` 下面表格中所列举的字段是 `PodSecurityPolicySpec` 的一部分,是通过 `.spec`
字段路径来设置的。 字段路径来设置的。
@ -280,15 +279,14 @@ under the `.spec` field path.
<!-- <!--
## PodSecurityPolicy annotations ## PodSecurityPolicy annotations
-->
## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
<!--
The [annotations](/docs/concepts/overview/working-with-objects/annotations/) enumerated in this The [annotations](/docs/concepts/overview/working-with-objects/annotations/) enumerated in this
table can be specified under `.metadata.annotations` on the PodSecurityPolicy object. table can be specified under `.metadata.annotations` on the PodSecurityPolicy object.
--> -->
下面表格中所列举的[注解](/zh/docs/concepts/overview/working-with-objects/annotations/) ## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
可以通过 `.metadata.annotations` 设置到 PodSecurityPolicy 对象之上。
下面表格中所列举的[注解](/zh-cn/docs/concepts/overview/working-with-objects/annotations/)可以通过
`.metadata.annotations` 设置到 PodSecurityPolicy 对象之上。
<table class="no-word-break"> <table class="no-word-break">
<caption style="display:none"><!-- Mapping PodSecurityPolicy annotations to Pod Security Standards-->将 PodSecurityPolicy 注解映射到 Pod 安全性标准</caption> <caption style="display:none"><!-- Mapping PodSecurityPolicy annotations to Pod Security Standards-->将 PodSecurityPolicy 注解映射到 Pod 安全性标准</caption>