Skip to content

Commit 8f3790c

Browse files
committed
clarify Windows privileged containers feature enablement
1 parent 9b21522 commit 8f3790c

File tree

2 files changed

+4
-6
lines changed

2 files changed

+4
-6
lines changed

content/en/docs/concepts/security/pod-security-standards.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ fail validation.
5757
<tr>
5858
<td style="white-space: nowrap">HostProcess</td>
5959
<td>
60-
<p>Windows pods offer the ability to run <a href="/docs/tasks/configure-pod-container/create-hostprocess-pod">HostProcess containers</a> which enables privileged access to the Windows node. Privileged access to the host is disallowed in the baseline policy. {{< feature-state for_k8s_version="v1.23" state="beta" >}}</p>
60+
<p>Windows pods offer the ability to run <a href="/docs/tasks/configure-pod-container/create-hostprocess-pod">HostProcess containers</a> which enables privileged access to the Windows node. Privileged access to the host is disallowed in the baseline policy. {{< feature-state for_k8s_version="v1.26" state="stable" >}}</p>
6161
<p><strong>Restricted Fields</strong></p>
6262
<ul>
6363
<li><code>spec.securityContext.windowsOptions.hostProcess</code></li>

content/en/docs/concepts/workloads/pods/_index.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -307,12 +307,10 @@ capabilities such as manipulating the network stack or accessing hardware device
307307

308308
{{< feature-state for_k8s_version="v1.26" state="stable" >}}
309309

310-
In Windows, you can create a [Windows HostProcess pod](/docs/tasks/configure-pod-container/create-hostprocess-pod)
311-
by setting the `windowsOptions.hostProcess` flag on the security context of the pod spec. All containers in these
310+
In Windows, you can create a [Windows HostProcess pod](/docs/tasks/configure-pod-container/create-hostprocess-pod) by setting the
311+
`windowsOptions.hostProcess` flag on the security context of the pod spec. All containers in these
312312
pods must run as Windows HostProcess containers. HostProcess pods run directly on the host and can also be used
313-
to perform administrative tasks as is done with Linux privileged containers. In order to use this feature, the
314-
`WindowsHostProcessContainers` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) must be enabled.
315-
313+
to perform administrative tasks as is done with Linux privileged containers.
316314

317315
## Static Pods
318316

0 commit comments

Comments
 (0)