File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
content/zh-cn/docs/concepts/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -151,7 +151,7 @@ Kubernetes 默认提供访问权限并非是每个集群都需要的。
151
151
It is vital to periodically review the Kubernetes RBAC settings for redundant entries and
152
152
possible privilege escalations.
153
153
If an attacker is able to create a user account with the same name as a deleted user,
154
- they can automatically inherit all the rights of the deleted user, especially the
154
+ they can automatically inherit all the rights of the deleted user, specially the
155
155
rights assigned to that user.
156
156
-->
157
157
### 定期检查 {#periodic-review}
@@ -260,8 +260,8 @@ You should only allow access to create PersistentVolume objects for:
260
260
你应该只允许以下实体具有创建 PersistentVolume 对象的访问权限:
261
261
262
262
<!--
263
- - users (cluster operators) that need this access for their work, and who you trust,
264
- - the Kubernetes control plane components which creates PersistentVolumes based on PersistentVolumeClaims
263
+ - Users (cluster operators) that need this access for their work, and who you trust,
264
+ - The Kubernetes control plane components which creates PersistentVolumes based on PersistentVolumeClaims
265
265
that are configured for automatic provisioning.
266
266
This is usually setup by the Kubernetes provider or by the operator when installing a CSI driver.
267
267
-->
You can’t perform that action at this time.
0 commit comments