public/rancher-docs
1
0 Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-11-09 18:29:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

adding Nate's corrections

Browse Source
This commit is contained in:
MBishop17 authored and Mark Bishop committed 2018-08-07 11:50:01 -07:00
1 parent b445389a0b
commit a2e9ae3a82
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/admin-settings/pod-security-policies/_index.md
+3 -3
View File
@@ -35,11 +35,11 @@ Rancher ships with two default Pod Security Policies (PSPs): the `restricted` an
- `unrestricted`
This policy is based on the Kubernetes [example restricted policy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#example-policies). This policy:
This policy is based on the Kubernetes [example restricted policy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#example-policies). It significantly restricts what types of pods can be deployed to a cluster or project. This policy:
- Prevents pods from running as an unprivileged user or from root.
- Prevent pods from running as a privileged user and prevents escalation of privileges.
- Validates that server-required security mechanisms are in place (such as restricting what volumes can be mounted to only the core volume types and preventing root supplemental groups from being added).
- Significantly restricts what types of pods can be deployed to a cluster or project.
## Creating Pod Security Policies