Skip to content

Commit 8a44d27

Browse files
authored
Merge pull request #47500 from everpeace/fix-typo-blog-KEP-3619-SupplementalGroupsPolicy
KEP-3619: fix typo in the feature blog to be published on 2024-08-22
2 parents c6eebed + fa2365b commit 8a44d27

File tree

1 file changed

+1
-1
lines changed
  • content/en/blog/_posts/2024-08-22-Fine-grained-SupplementalGroups-control

1 file changed

+1
-1
lines changed

content/en/blog/_posts/2024-08-22-Fine-grained-SupplementalGroups-control/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ uid=1000 gid=3000 groups=3000,4000
9090

9191
You can see `Strict` policy can exclude group `50000` from `groups`!
9292

93-
Thus, ensuring `supplementalGroupsPolicy: Merge` (enforced by some policy mechanism) helps prevent the implicit supplementary groups in a Pod.
93+
Thus, ensuring `supplementalGroupsPolicy: Strict` (enforced by some policy mechanism) helps prevent the implicit supplementary groups in a Pod.
9494

9595
{{<note>}}
9696
Actually, this is not enough because container with sufficient privileges / capability can change its process identity. Please see the following section for details.

0 commit comments

Comments
 (0)