@@ -70,17 +70,11 @@ a Pod or Container. Security context settings include, but are not limited to:
70
70
The above bullets are not a complete set of security context settings - please see
71
71
[SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
72
72
for a comprehensive list.
73
-
74
- For more information about security mechanisms in Linux, see
75
- [Overview of Linux Kernel Security Features](https://www.linux.com/learn/overview-linux-kernel-security-features)
76
73
-->
77
74
以上条目不是安全上下文设置的完整列表 -- 请参阅
78
75
[ SecurityContext] (/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
79
76
了解其完整列表。
80
77
81
- 关于在 Linux 系统中的安全机制的更多信息,可参阅
82
- [ Linux 内核安全性能力概述] ( https://www.linux.com/learn/overview-linux-kernel-security-features ) 。
83
-
84
78
## {{% heading "prerequisites" %}}
85
79
86
80
{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
@@ -779,15 +773,19 @@ kubectl delete pod security-context-demo-4
779
773
* [Tuning Docker with the newest security enhancements](https://github.com/containerd/containerd/blob/main/docs/cri/config.md)
780
774
* [Security Contexts design document](https://git.k8s.io/community/contributors/design-proposals/auth/security_context.md)
781
775
* [Ownership Management design document](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)
782
- * [Pod Security Policies](/docs/concepts/policy /pod-security-policy/)
776
+ * [Pod Security Policies](/docs/concepts/security /pod-security-policy/)
783
777
* [AllowPrivilegeEscalation design
784
778
document](https://git.k8s.io/community/contributors/design-proposals/auth/no-new-privs.md)
779
+ * For more information about security mechanisms in Linux, see
780
+ [Overview of Linux Kernel Security Features](https://www.linux.com/learn/overview-linux-kernel-security-features)
785
781
-->
786
782
* [PodSecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritycontext-v1-core) API 定义
787
783
* [SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core) API 定义
788
784
* [使用最新的安全性增强来调优 Docker(英文)](https://github.com/containerd/containerd/blob/main/docs/cri/config.md)
789
785
* [安全上下文的设计文档(英文)](https://git.k8s.io/community/contributors/design-proposals/auth/security_context.md)
790
786
* [属主管理的设计文档(英文)](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)
791
- * [Pod 安全策略](/zh/docs/concepts/policy /pod-security-policy/)
787
+ * [Pod 安全策略](/zh/docs/concepts/security /pod-security-policy/)
792
788
* [AllowPrivilegeEscalation 的设计文档(英文)](https://git.k8s.io/community/contributors/design-proposals/auth/no-new-privs.md)
789
+ * 关于在 Linux 系统中的安全机制的更多信息,可参阅
790
+ [Linux 内核安全性能力概述](https://www.linux.com/learn/overview-linux-kernel-security-features)。
793
791
0 commit comments