kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

PSS: add container_engine_t to allowed list of selinux types 

Signed-off-by: Peter Hunt <pehunt@redhat.com>
This commit is contained in:
Peter Hunt 2024-07-23 12:19:14 -04:00
parent 918877ea58
commit 06aff012a2
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
content/en/docs/concepts/security/pod-security-standards.md
View File

@ -213,6 +213,7 @@ fail validation.
<li><code>container_t</code></li>
<li><code>container_init_t</code></li>
<li><code>container_kvm_t</code></li>
<li><code>container_engine_t</code> (since Kubernetes 1.31)</li>
</ul>
<hr />
<p><strong>Restricted Fields</strong></p>

2
content/en/docs/reference/access-authn-authz/psp-to-pod-security-standards.md
View File

@ -130,7 +130,7 @@ under the `.spec` field path.
<ul>
<li><code>user</code> is unset (<code>""</code> / undefined / nil)</li>
<li><code>role</code> is unset (<code>""</code> / undefined / nil)</li>
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t</code></li>
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t, container_engine_t</code></li>
<li><code>level</code> is anything</li>
</ul>
</td>