Skip to content

Commit 44acf9c

Browse files
authored
Merge pull request #27310 from huangshanhui/patch-2
Update pod-security-policy.md
2 parents 5a44baf + 1e64fb0 commit 44acf9c

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

content/zh/docs/concepts/policy/pod-security-policy.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -321,8 +321,7 @@ controller selects policies according to the following criteria:
321321
2. If the pod must be defaulted or mutated, the first PodSecurityPolicy
322322
(ordered by name) to allow the pod is selected.
323323
-->
324-
1. 优先考虑中允许 Pod 不经修改地创建或更新的 PodSecurityPolicy,这些策略
325-
不会更改 Pod 字段的默认值或者其他配置。
324+
1. 优先考虑允许 Pod 保持原样,不会更改 Pod 字段默认值或其他配置的 PodSecurityPolicy。
326325
这类非更改性质的 PodSecurityPolicy 对象之间的顺序无关紧要。
327326
2. 如果必须要为 Pod 设置默认值或者其他配置,(按名称顺序)选择第一个允许
328327
Pod 操作的 PodSecurityPolicy 对象。
@@ -1238,4 +1237,3 @@ By default, all safe sysctls are allowed.
12381237
- 参阅[Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)
12391238
了解策略建议。
12401239
- 阅读 [Pod 安全策略参考](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritypolicy-v1beta1-policy)了解 API 细节。
1241-

0 commit comments

Comments
 (0)