Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Qiming Teng <[email protected]>
  • Loading branch information
hunshcn and tengqm authored Dec 29, 2023
1 parent 51c36f1 commit cfbd4b8
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -609,7 +609,8 @@ the [documentation](/docs/concepts/workloads/pods/user-namespaces#integration-wi
## 用户命名空间 {#user-namespaces}

用户命名空间是 Linux 特有的功能,可在运行工作负载时提高隔离度。
关于用户命名空间如何与 Pod Security Standard 协同工作,请参阅
关于用户命名空间如何与 PodSecurityStandard 协同工作,
请参阅
[文档](/zh-cn/docs/concepts/workloads/pods/user-namespaces#integration-with-pod-security-admission-checks)
了解 Pod 如何使用用户命名空间。

Expand Down
6 changes: 3 additions & 3 deletions content/zh-cn/docs/concepts/workloads/pods/user-namespaces.md
Original file line number Diff line number Diff line change
Expand Up @@ -298,10 +298,10 @@ within the cluster if using the feature gate.
-->

对于启用了用户命名空间的 Linux Pod,Kubernetes 会以受控方式放宽
[Pod 安全性标准](/zh-cn/docs/concepts/security/pod-security-standards) 的应用。
[Pod 安全性标准](/zh-cn/docs/concepts/security/pod-security-standards)的应用。
这种行为可以通过[特性门控](/zh-cn/docs/reference/command-line-tools-reference/feature-gates/)
`UserNamespacesPodSecurityStandards` 进行控制,此特性可以让终端用户提前选择
如果管理使用此特性门控,必须确保群集中的所有节点都启用了用户命名空间。
`UserNamespacesPodSecurityStandards` 进行控制,可以让最终用户提前尝试此特性
如果管理员启用此特性门控,必须确保群集中的所有节点都启用了用户命名空间。

<!--
If you enable the associated feature gate and create a Pod that uses user
Expand Down

0 comments on commit cfbd4b8

Please sign in to comment.