File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -72,14 +72,14 @@ Linux node swap support in Kubernetes.
72
72
[ User namespaces] ( /docs/concepts/workloads/pods/user-namespaces ) is a Linux-only feature that better
73
73
isolates pods to prevent or mitigate several CVEs rated high/critical, including
74
74
[ CVE-2024 -21626] ( https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv ) ,
75
- published in January 2024. In Kubernetes 1.30, support for user namespaces is migrating to beta, and
76
- now supports pods with and without volumes, custom UID/GID ranges and more!
75
+ published in January 2024. In Kubernetes 1.30, support for user namespaces is migrating to beta and
76
+ now supports pods with and without volumes, custom UID/GID ranges, and more!
77
77
78
78
### Structured authorization configuration ([ KEP-3221] ( https://kep.k8s.io/3221 ) )
79
79
80
80
Support for [ structured authorization
81
81
configuration] ( /docs/reference/access-authn-authz/authorization/#configuring-the-api-server-using-an-authorization-config-file ) .)
82
- is moving to beta, and will be enabled by default. This feature enables the creation of
82
+ is moving to beta and will be enabled by default. This feature enables the creation of
83
83
authorization chains with multiple webhooks with well-defined parameters that validate requests in a
84
84
particular order and allows fine-grained control – such as explicit Deny on failures. The
85
85
configuration file approach even allows you to specify [ CEL] ( /docs/reference/using-api/cel/ ) rules
You can’t perform that action at this time.
0 commit comments