We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 20ce068 + bf84c6a commit a66ba6aCopy full SHA for a66ba6a
content/zh/examples/policy/restricted-psp.yaml
@@ -3,6 +3,7 @@ kind: PodSecurityPolicy
3
metadata:
4
name: restricted
5
annotations:
6
+ # docker/default 标识 seccomp 的配置文件,但它与 Docker 运行时没有特别关联
7
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
8
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
9
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
@@ -45,3 +46,4 @@ spec:
45
46
- min: 1
47
max: 65535
48
readOnlyRootFilesystem: false
49
+
0 commit comments