kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #47246 from haircommander/container_engine_t-1.31 

PSS: add container_engine_t to allowed list of selinux types
This commit is contained in:
Kubernetes Prow Robot 2024-07-23 16:14:17 -07:00 committed by GitHub
parent c97ec9ac76 06aff012a2
commit 7e90855773
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
content/en/docs/concepts/security/pod-security-standards.md
View File

@ -213,6 +213,7 @@ fail validation.
<li><code>container_t</code></li>
<li><code>container_init_t</code></li>
<li><code>container_kvm_t</code></li>
<li><code>container_engine_t</code> (since Kubernetes 1.31)</li>
</ul>
<hr />
<p><strong>Restricted Fields</strong></p>

2
content/en/docs/reference/access-authn-authz/psp-to-pod-security-standards.md
View File

@ -130,7 +130,7 @@ under the `.spec` field path.
<ul>
<li><code>user</code> is unset (<code>""</code> / undefined / nil)</li>
<li><code>role</code> is unset (<code>""</code> / undefined / nil)</li>
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t</code></li>
<li><code>type</code> is unset or one of: <code>container_t, container_init_t, container_kvm_t, container_engine_t</code></li>
<li><code>level</code> is anything</li>
</ul>
</td>