kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Improve 'Seccomp defaulting' feature name 

We're now rephrasing those two paragraphs to avoid confusing readers.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
Sascha Grunert 2022-07-18 10:28:19 +02:00
parent 27658d9a9b
commit 641a8e2c0c
No known key found for this signature in database
GPG Key ID: 09D97D153EF94D93
1 changed files with 9 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
content/en/docs/tutorials/security/seccomp.md
View File

@ -201,16 +201,17 @@ You can find more detailed information about a possible upgrade and downgrade st
in the related Kubernetes Enhancement Proposal (KEP): in the related Kubernetes Enhancement Proposal (KEP):
[Enable seccomp by default](https://github.com/kubernetes/enhancements/tree/9a124fd29d1f9ddf2ff455c49a630e3181992c25/keps/sig-node/2413-seccomp-by-default#upgrade--downgrade-strategy). [Enable seccomp by default](https://github.com/kubernetes/enhancements/tree/9a124fd29d1f9ddf2ff455c49a630e3181992c25/keps/sig-node/2413-seccomp-by-default#upgrade--downgrade-strategy).
Seccomp defaulting for Pods is a beta feature in Kubernetes {{< skew currentVersion >}}, Kubernetes {{< skew currentVersion >}} lets you configure the seccomp profile
and the corresponding `SeccompDefault` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) that applies when the spec for a Pod doesn't define a specific seccomp profile.
is enabled by default. However, you still need to enable this defaulting for each node where This is a beta feature and the corresponding `SeccompDefault` [feature
gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled by
default. However, you still need to enable this defaulting for each node where
you would like to use it. you would like to use it.
If you are running a Kubernetes {{< skew currentVersion >}} cluster and want to enable Seccomp If you are running a Kubernetes {{< skew currentVersion >}} cluster and want to
defaulting, either run the kubelet with the `--seccomp-default` command line flag, or enable enable the feature, either run the kubelet with the `--seccomp-default` command
Seccomp defaulting through the line flag, or enable it through the [kubelet configuration
[kubelet file](/docs/tasks/administer-cluster/kubelet-config-file/). To enable the
configuration file](/docs/tasks/administer-cluster/kubelet-config-file/). To enable the
feature gate in [kind](https://kind.sigs.k8s.io), ensure that `kind` provides feature gate in [kind](https://kind.sigs.k8s.io), ensure that `kind` provides
the minimum required Kubernetes version and enables the `SeccompDefault` feature the minimum required Kubernetes version and enables the `SeccompDefault` feature
[in the kind configuration](https://kind.sigs.k8s.io/docs/user/quick-start/#enable-feature-gates-in-your-cluster): [in the kind configuration](https://kind.sigs.k8s.io/docs/user/quick-start/#enable-feature-gates-in-your-cluster):