[zh-cn] Resync psp-to-pss page
parent
1eca905f3d
commit
c5f5cf73bf
|
@ -14,15 +14,16 @@ weight: 95
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
The tables below enumerate the configuration parameters on
|
The tables below enumerate the configuration parameters on
|
||||||
[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) objects, whether the field mutates
|
[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) objects, whether the field mutates
|
||||||
and/or validates pods, and how the configuration values map to the
|
and/or validates pods, and how the configuration values map to the
|
||||||
[Pod Security Standards](/docs/concepts/security/pod-security-standards/).
|
[Pod Security Standards](/docs/concepts/security/pod-security-standards/).
|
||||||
-->
|
-->
|
||||||
下面的表格列举了 [PodSecurityPolicy](/zh/docs/concepts/security/pod-security-policy/)
|
下面的表格列举了 [PodSecurityPolicy](/zh-cn/docs/concepts/security/pod-security-policy/)
|
||||||
对象上的配置参数,这些字段是否会变更或检查 Pod 配置,以及这些配置值如何映射到
|
对象上的配置参数,这些字段是否会变更或检查 Pod 配置,以及这些配置值如何映射到
|
||||||
[Pod 安全性标准(Pod Security Standards)](/zh/docs/concepts/security/pod-security-standards/)
|
[Pod 安全性标准(Pod Security Standards)](/zh-cn/docs/concepts/security/pod-security-standards/)
|
||||||
之上。
|
之上。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
|
@ -34,31 +35,29 @@ Anything outside the allowed values for those profiles would fall under the
|
||||||
means all values are allowed under all Pod Security Standards.
|
means all values are allowed under all Pod Security Standards.
|
||||||
-->
|
-->
|
||||||
对于每个可应用的参数,表格中给出了
|
对于每个可应用的参数,表格中给出了
|
||||||
[Baseline](/zh/docs/concepts/security/pod-security-standards/#baseline) 和
|
[Baseline](/zh-cn/docs/concepts/security/pod-security-standards/#baseline) 和
|
||||||
[Restricted](/zh/docs/concepts/security/pod-security-standards/#restricted)
|
[Restricted](/zh-cn/docs/concepts/security/pod-security-standards/#restricted)
|
||||||
配置下可接受的取值。
|
配置下可接受的取值。
|
||||||
对这两种配置而言不可接受的取值均归入
|
对这两种配置而言不可接受的取值均归入
|
||||||
[Privileged](/zh/docs/concepts/security/pod-security-standards/#privileged)
|
[Privileged](/zh-cn/docs/concepts/security/pod-security-standards/#privileged)
|
||||||
配置下。“无意见”意味着对所有 Pod 安全性标准而言所有取值都可接受。
|
配置下。“无意见”意味着对所有 Pod 安全性标准而言所有取值都可接受。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
For a step-by-step migration guide, see
|
For a step-by-step migration guide, see
|
||||||
[Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller](/docs/tasks/configure-pod-container/migrate-from-psp/).
|
[Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller](/docs/tasks/configure-pod-container/migrate-from-psp/).
|
||||||
-->
|
-->
|
||||||
如果想要了解如何一步步完成迁移,可参阅
|
如果想要了解如何一步步完成迁移,可参阅[从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器](/zh-cn/docs/tasks/configure-pod-container/migrate-from-psp/)。
|
||||||
[从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器](/zh/docs/tasks/configure-pod-container/migrate-from-psp/)。
|
|
||||||
|
|
||||||
<!-- body -->
|
<!-- body -->
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
## PodSecurityPolicy Spec
|
## PodSecurityPolicy Spec
|
||||||
-->
|
|
||||||
## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
|
|
||||||
|
|
||||||
<!--
|
|
||||||
The fields enumerated in this table are part of the `PodSecurityPolicySpec`, which is specified
|
The fields enumerated in this table are part of the `PodSecurityPolicySpec`, which is specified
|
||||||
under the `.spec` field path.
|
under the `.spec` field path.
|
||||||
-->
|
-->
|
||||||
|
## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
|
||||||
|
|
||||||
下面表格中所列举的字段是 `PodSecurityPolicySpec` 的一部分,是通过 `.spec`
|
下面表格中所列举的字段是 `PodSecurityPolicySpec` 的一部分,是通过 `.spec`
|
||||||
字段路径来设置的。
|
字段路径来设置的。
|
||||||
|
|
||||||
|
@ -280,15 +279,14 @@ under the `.spec` field path.
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
## PodSecurityPolicy annotations
|
## PodSecurityPolicy annotations
|
||||||
-->
|
|
||||||
## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
|
|
||||||
|
|
||||||
<!--
|
|
||||||
The [annotations](/docs/concepts/overview/working-with-objects/annotations/) enumerated in this
|
The [annotations](/docs/concepts/overview/working-with-objects/annotations/) enumerated in this
|
||||||
table can be specified under `.metadata.annotations` on the PodSecurityPolicy object.
|
table can be specified under `.metadata.annotations` on the PodSecurityPolicy object.
|
||||||
-->
|
-->
|
||||||
下面表格中所列举的[注解](/zh/docs/concepts/overview/working-with-objects/annotations/)
|
## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
|
||||||
可以通过 `.metadata.annotations` 设置到 PodSecurityPolicy 对象之上。
|
|
||||||
|
下面表格中所列举的[注解](/zh-cn/docs/concepts/overview/working-with-objects/annotations/)可以通过
|
||||||
|
`.metadata.annotations` 设置到 PodSecurityPolicy 对象之上。
|
||||||
|
|
||||||
<table class="no-word-break">
|
<table class="no-word-break">
|
||||||
<caption style="display:none"><!-- Mapping PodSecurityPolicy annotations to Pod Security Standards-->将 PodSecurityPolicy 注解映射到 Pod 安全性标准</caption>
|
<caption style="display:none"><!-- Mapping PodSecurityPolicy annotations to Pod Security Standards-->将 PodSecurityPolicy 注解映射到 Pod 安全性标准</caption>
|
||||||
|
|
Loading…
Reference in New Issue