Skip to content

Commit

Permalink
Modify apparmor.md based on PR - Fix site build (#16531) (#16650)
Browse files Browse the repository at this point in the history
Modify apparmor.md and delete .profile to enable the site to
build with Hugo 0.57.2. Could not cherry pick PR 16531 because
the Korean translation was added in 1.14.
See also PRs #16104 and #16151.

zh/docs/reference/setup-tools/kubeadm/generated/README.md updated to fix
'invalid YAML delimiter' compile error caused by HTML comment.

Signed-off-by: Aimee Ukasick <aimeeu.opensource@gmail.com>
  • Loading branch information
aimeeu authored and k8s-ci-robot committed Oct 2, 2019
1 parent 1a02f19 commit f8162b0
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 13 deletions.
13 changes: 12 additions & 1 deletion content/en/docs/tutorials/clusters/apparmor.md
Original file line number Diff line number Diff line change
Expand Up @@ -166,7 +166,18 @@ k8s-apparmor-example-deny-write (enforce)
First, we need to load the profile we want to use onto our nodes. The profile we'll use simply
denies all file writes:

{{< code language="text" file="deny-write.profile" >}}
```shell
#include <tunables/global>
profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
#include <abstractions/base>
file,
# Deny all file writes.
deny /** w,
}
```

Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
nodes. For this example we'll just use SSH to install the profiles, but other approaches are
Expand Down
10 changes: 0 additions & 10 deletions content/en/docs/tutorials/clusters/deny-write.profile

This file was deleted.

Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
<!-- All files in this directory are auto-generated from other repos. **Do not edit them manually. You must edit them in their upstream repo.**
-->
此目录下的所有文件都是从其他仓库自动生成的。 **不要人工编辑它们。 您必须在上游仓库中编辑它们**

0 comments on commit f8162b0

Please sign in to comment.