kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Align with style guide

This commit is contained in:
Tim Bannister 2024-03-27 16:36:16 +00:00 committed by GitHub
parent 1ed331ccbb
commit 54e1d3308e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
content/en/docs/concepts/security/rbac-good-practices.md
View File

@ -183,7 +183,7 @@ mutating webhooks, also mutate admitted objects.
### Namespace modification
Users who can perform `patch` operations on `namespace` objects through a namespaced rolebinding can modify
Users who can perform **patch** operations on Namespace objects (through a namespaced RoleBinding to a Role with that access) can modify
labels on that namespace. In clusters where Pod Security Admission is used, this may allow a user to configure the namespace
for a more permissive policy than intended by the administrators.
For clusters where NetworkPolicy is used, users may be set labels that indirectly allow