Skip to content

Commit b093949

Browse files
doc: fix nit format (#5857)
1 parent a91e9d2 commit b093949

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

website/content/en/docs/best-practices/pod-security-standards.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -82,9 +82,7 @@ dep:= &appsv1.Deployment{
8282

8383
**Note:** For Ansible- and Helm-based Operator projects, your Ansible playbooks or Helm charts must create manifests that comply with the requirements.
8484

85-
**OR**
86-
87-
- B) **For workloads that need elevated permissions:** Ensure the namespace has the appropriate enforcement level label as shown in the following example.
85+
- **For workloads that need elevated permissions:** Ensure the namespace has the appropriate enforcement level label as shown in the following example.
8886
You might need include this in the installation documentation for your Operator. While the label syncer should handle this for you in most cases, it is a good practice for Operators to explicitly state its requirements.
8987

9088
```yaml
@@ -96,10 +94,11 @@ You might need include this in the installation documentation for your Operator.
9694
```
9795
9896
**You should ensure the configuration is carried to the Pod/Containers on the bundle CSV (install.spec.deployments.containers).**
97+
9998
To check an example of CSV which complies with the [restrictive][restricted] policy, see the Golang sample
10099
under the [testdata/go/v3/memcached-operator/bundle/manifests/memcached-operator.clusterserviceversion.yaml](https://github.com/kubernetes-sigs/kubebuilder/blob/master/testdata/go/v3/memcached-operator/bundle/manifests/memcached-operator.clusterserviceversion.yaml)
101100
102-
- [pod-security]: https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/#what-is-podsecuritypolicy
103-
- [2579-psp-replacement]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/2579-psp-replacement
104-
- [enforce-standards-namespace-labels]: https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/
105-
- [restricted]: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
101+
[pod-security]: https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/#what-is-podsecuritypolicy
102+
[2579-psp-replacement]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/2579-psp-replacement
103+
[enforce-standards-namespace-labels]: https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/
104+
[restricted]: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted

0 commit comments

Comments
 (0)