Skip to content

Commit a66ba6a

Browse files
authored
Merge pull request #33291 from kinzhi/kinzhi52
[zh]Sync content/zh/examples/policy/restricted-psp.yaml
2 parents 20ce068 + bf84c6a commit a66ba6a

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

content/zh/examples/policy/restricted-psp.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ kind: PodSecurityPolicy
33
metadata:
44
name: restricted
55
annotations:
6+
# docker/default 标识 seccomp 的配置文件,但它与 Docker 运行时没有特别关联
67
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
78
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
89
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
@@ -45,3 +46,4 @@ spec:
4546
- min: 1
4647
max: 65535
4748
readOnlyRootFilesystem: false
49+

0 commit comments

Comments
 (0)