Skip to content

Commit 7e90855

Browse files
authored
Merge pull request #47246 from haircommander/container_engine_t-1.31
PSS: add container_engine_t to allowed list of selinux types
2 parents c97ec9a + 06aff01 commit 7e90855

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

content/en/docs/concepts/security/pod-security-standards.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,6 +213,7 @@ fail validation.
213213
<li><code>container_t</code></li>
214214
<li><code>container_init_t</code></li>
215215
<li><code>container_kvm_t</code></li>
216+
<li><code>container_engine_t</code> (since Kubernetes 1.31)</li>
216217
</ul>
217218
<hr />
218219
<p><strong>Restricted Fields</strong></p>

content/en/docs/reference/access-authn-authz/psp-to-pod-security-standards.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -130,7 +130,7 @@ under the `.spec` field path.
130130
<ul>
131131
<li><code>user</code> is unset (<code>""</code> / undefined / nil)</li>
132132
<li><code>role</code> is unset (<code>""</code> / undefined / nil)</li>
133-
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t</code></li>
133+
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t, container_engine_t</code></li>
134134
<li><code>level</code> is anything</li>
135135
</ul>
136136
</td>

0 commit comments

Comments
 (0)