File tree Expand file tree Collapse file tree 2 files changed +25
-14
lines changed
content/zh/docs/concepts/policy Expand file tree Collapse file tree 2 files changed +25
-14
lines changed Original file line number Diff line number Diff line change 1
1
---
2
2
title : Pod 安全策略
3
3
content_type : concept
4
- weight : 20
4
+ weight : 30
5
5
---
6
6
<!--
7
7
reviewers:
8
8
- pweil-
9
9
- tallclair
10
10
title: Pod Security Policies
11
11
content_type: concept
12
- weight: 20
12
+ weight: 30
13
13
-->
14
14
15
15
{{< feature-state state="beta" >}}
@@ -404,12 +404,19 @@ kubectl-user create -f- <<EOF
404
404
apiVersion: v1
405
405
kind: Pod
406
406
metadata:
407
- name: pause
407
+ name: pause
408
408
spec:
409
409
containers:
410
- - name: pause
410
+ - name: pause
411
411
image: k8s.gcr.io/pause
412
412
EOF
413
+ ` ` `
414
+
415
+ <!--
416
+ The output is similar to this :
417
+ -->
418
+ 输出类似于:
419
+ ```
413
420
Error from server (Forbidden): error when creating "STDIN": pods "pause" is forbidden: unable to validate against any pod security policy: [ ]
414
421
```
415
422
@@ -487,16 +494,17 @@ kubectl-user create -f- <<EOF
487
494
apiVersion: v1
488
495
kind: Pod
489
496
metadata:
490
- name: pause
497
+ name: pause
491
498
spec:
492
499
containers:
493
- - name: pause
500
+ - name: pause
494
501
image: k8s.gcr.io/pause
495
502
EOF
496
503
```
497
-
498
- 输出:
499
-
504
+ <!--
505
+ The output is similar to this:
506
+ -->
507
+ 输出类似于:
500
508
```
501
509
pod "pause" created
502
510
```
@@ -513,18 +521,21 @@ kubectl-user create -f- <<EOF
513
521
apiVersion: v1
514
522
kind: Pod
515
523
metadata:
516
- name: privileged
524
+ name: privileged
517
525
spec:
518
526
containers:
519
- - name: pause
527
+ - name: pause
520
528
image: k8s.gcr.io/pause
521
529
securityContext:
522
530
privileged: true
523
531
EOF
524
532
```
525
533
526
- 输出为:
534
+ <!--
535
+ The output is similar to this:
536
+ -->
527
537
538
+ 输出类似于:
528
539
```
529
540
Error from server (Forbidden): error when creating "STDIN": pods "privileged" is forbidden: unable to validate against any pod security policy: [spec.containers[0].securityContext.privileged: Invalid value: true: Privileged containers are not allowed]
530
541
```
Original file line number Diff line number Diff line change 1
1
---
2
2
title : 资源配额
3
3
content_type : concept
4
- weight : 10
4
+ weight : 20
5
5
---
6
6
7
7
<!--
8
8
reviewers:
9
9
- derekwaynecarr
10
10
title: Resource Quotas
11
11
content_type: concept
12
- weight: 10
12
+ weight: 20
13
13
-->
14
14
15
15
<!-- overview -->
You can’t perform that action at this time.
0 commit comments