@@ -14,15 +14,16 @@ weight: 95
14
14
-->
15
15
16
16
<!-- overview -->
17
+
17
18
<!--
18
19
The tables below enumerate the configuration parameters on
19
20
[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) objects, whether the field mutates
20
21
and/or validates pods, and how the configuration values map to the
21
22
[Pod Security Standards](/docs/concepts/security/pod-security-standards/).
22
23
-->
23
- 下面的表格列举了 [ PodSecurityPolicy] ( /zh/docs/concepts/security/pod-security-policy/ )
24
+ 下面的表格列举了 [ PodSecurityPolicy] ( /zh-cn /docs/concepts/security/pod-security-policy/ )
24
25
对象上的配置参数,这些字段是否会变更或检查 Pod 配置,以及这些配置值如何映射到
25
- [ Pod 安全性标准(Pod Security Standards)] ( /zh/docs/concepts/security/pod-security-standards/ )
26
+ [ Pod 安全性标准(Pod Security Standards)] ( /zh-cn /docs/concepts/security/pod-security-standards/ )
26
27
之上。
27
28
28
29
<!--
@@ -34,31 +35,29 @@ Anything outside the allowed values for those profiles would fall under the
34
35
means all values are allowed under all Pod Security Standards.
35
36
-->
36
37
对于每个可应用的参数,表格中给出了
37
- [ Baseline] ( /zh/docs/concepts/security/pod-security-standards/#baseline ) 和
38
- [ Restricted] ( /zh/docs/concepts/security/pod-security-standards/#restricted )
38
+ [ Baseline] ( /zh-cn /docs/concepts/security/pod-security-standards/#baseline ) 和
39
+ [ Restricted] ( /zh-cn /docs/concepts/security/pod-security-standards/#restricted )
39
40
配置下可接受的取值。
40
41
对这两种配置而言不可接受的取值均归入
41
- [ Privileged] ( /zh/docs/concepts/security/pod-security-standards/#privileged )
42
+ [ Privileged] ( /zh-cn /docs/concepts/security/pod-security-standards/#privileged )
42
43
配置下。“无意见”意味着对所有 Pod 安全性标准而言所有取值都可接受。
43
44
44
45
<!--
45
46
For a step-by-step migration guide, see
46
47
[Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller](/docs/tasks/configure-pod-container/migrate-from-psp/).
47
48
-->
48
- 如果想要了解如何一步步完成迁移,可参阅
49
- [ 从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器] ( /zh/docs/tasks/configure-pod-container/migrate-from-psp/ ) 。
49
+ 如果想要了解如何一步步完成迁移,可参阅[ 从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器] ( /zh-cn/docs/tasks/configure-pod-container/migrate-from-psp/ ) 。
50
50
51
51
<!-- body -->
52
52
53
53
<!--
54
54
## PodSecurityPolicy Spec
55
- -->
56
- ## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
57
55
58
- <!--
59
56
The fields enumerated in this table are part of the `PodSecurityPolicySpec`, which is specified
60
57
under the `.spec` field path.
61
58
-->
59
+ ## PodSecurityPolicy 规约 {#podsecuritypolicy-spec}
60
+
62
61
下面表格中所列举的字段是 ` PodSecurityPolicySpec ` 的一部分,是通过 ` .spec `
63
62
字段路径来设置的。
64
63
@@ -280,15 +279,14 @@ under the `.spec` field path.
280
279
281
280
<!--
282
281
## PodSecurityPolicy annotations
283
- -->
284
- ## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
285
282
286
- <!--
287
283
The [annotations](/docs/concepts/overview/working-with-objects/annotations/) enumerated in this
288
284
table can be specified under `.metadata.annotations` on the PodSecurityPolicy object.
289
285
-->
290
- 下面表格中所列举的[ 注解] ( /zh/docs/concepts/overview/working-with-objects/annotations/ )
291
- 可以通过 ` .metadata.annotations ` 设置到 PodSecurityPolicy 对象之上。
286
+ ## PodSecurityPolicy 注解 {#podsecuritypolicy-annotations}
287
+
288
+ 下面表格中所列举的[ 注解] ( /zh-cn/docs/concepts/overview/working-with-objects/annotations/ ) 可以通过
289
+ ` .metadata.annotations ` 设置到 PodSecurityPolicy 对象之上。
292
290
293
291
<table class =" no-word-break " >
294
292
<caption style="display:none"><!-- Mapping PodSecurityPolicy annotations to Pod Security Standards-->将 PodSecurityPolicy 注解映射到 Pod 安全性标准</caption>
0 commit comments