Skip to content

Commit dfae76b

Browse files
my-git9my-git9
committed
[zh-cn]sync local-subject-access-review-v1
Signed-off-by: xin.li <[email protected]>
1 parent 2de7dde commit dfae76b

2 files changed

Lines changed: 53 additions & 47 deletions

File tree

‎content/zh-cn/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1.md‎

Lines changed: 23 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -23,71 +23,63 @@ weight: 1
2323

2424
`import "k8s.io/api/authorization/v1"`
2525

26-
## LocalSubjectAccessReview {#LocalSubjectAccessReview}
26+
## LocalSubjectAccessReview {#LocalSubjectAccessReview}
2727
<!--
2828
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
29-
30-
<hr>
31-
32-
- **apiVersion**: authorization.k8s.io/v1
33-
34-
- **kind**: LocalSubjectAccessReview
35-
36-
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
37-
38-
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
3929
-->
4030
LocalSubjectAccessReview 检查用户或组是否可以在给定的命名空间内执行某操作。
4131
划分命名空间范围的资源简化了命名空间范围的策略设置，例如权限检查。
4232

4333
<hr>
4434

4535
- **apiVersion**: authorization.k8s.io/v1
46-
4736
- **kind**: LocalSubjectAccessReview
48-
4937
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
50-
51-
标准的列表元数据。
38+
39+
<!--
40+
metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
41+
-->
42+
43+
`metadata` 是标准的列表元数据。
5244
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
5345

5446
<!--
5547
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>), required
5648
57-
Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.
49+
spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.
5850
5951
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
6052
61-
Status is filled in by the server and indicates whether the request is allowed or not
53+
status is filled in by the server and indicates whether the request is allowed or not
6254
-->
6355
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>)，必需
64-
65-
spec 包含有关正在评估的请求的信息。
66-
spec.namespace 必须是你的请求所针对的命名空间。
56+
57+
`spec` 包含有关正在评估的请求的信息。
58+
`spec.namespace` 必须是你的请求所针对的命名空间。
6759
如果留空，则会被设置默认值。
6860

6961
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
70-
71-
status 由服务器填写，表示请求是否被允许。
62+
63+
`status` 由服务器填写，表示请求是否被允许。
7264

7365
<!--
7466
## Operations {#Operations}
67+
-->
68+
## 操作 {#Operations}
7569

7670
<hr>
7771

72+
<!--
7873
### `create` create a LocalSubjectAccessReview
7974
8075
#### HTTP Request
8176
-->
82-
## 操作 {#Operations}
83-
84-
<hr>
85-
8677
### `create` 创建 LocalSubjectAccessReview
8778

8879
#### HTTP 请求
8980

9081
POST /apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviews
82+
9183
<!--
9284
#### Parameters
9385
@@ -111,25 +103,25 @@ POST /apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessrevi
111103
#### 参数
112104

113105
- **namespace** (**路径参数**): string，必需
114-
106+
115107
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
116108

117109
- **body**: <a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>，必需
118110

119111
- **dryRun** (**查询参数**): string
120-
112+
121113
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
122114

123115
- **fieldManager** (**查询参数**): string
124-
116+
125117
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
126118

127119
- **fieldValidation** (**查询参数**): string
128-
120+
129121
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
130122

131123
- **pretty** (**查询参数**): string
132-
124+
133125
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
134126

135127
<!--

‎content/zh-cn/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md‎

Lines changed: 30 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ api_metadata:
66
content_type: "api_reference"
77
description: "DaemonSet 表示守护进程集的配置。"
88
title: "DaemonSet"
9-
weight: 9
9+
weight: 10
1010
---
1111
<!--
1212
api_metadata:
@@ -16,7 +16,7 @@ kind: "DaemonSet"
1616
content_type: "api_reference"
1717
description: "DaemonSet represents the configuration of a daemon set."
1818
title: "DaemonSet"
19-
weight: 9
19+
weight: 10
2020
auto_generated: true
2121
-->
2222

@@ -140,17 +140,6 @@ DaemonSetSpec 是守护进程集的规约。
140140
- **updateStrategy.type** (string)
141141

142142
守护进程集更新的类型。可以是 "RollingUpdate" 或 "OnDelete"。默认为 RollingUpdate。
143-
144-
<!--
145-
Possible enum values:
146-
- `"OnDelete"` Replace the old daemons only when it's killed
147-
- `"RollingUpdate"` Replace the old daemons by new ones using rolling update i.e replace them on each node one after the other.
148-
-->
149-
150-
可能的枚举值：
151-
152-
- `"OnDelete"` 仅当旧的守护进程被杀死时才替换它
153-
- `"RollingUpdate"` 使用滚动更新替换旧的守护进程，即在每个节点上一个接一个地替换它们。
154143

155144
<!--
156145
- **updateStrategy.rollingUpdate** (RollingUpdateDaemonSet)
@@ -160,7 +149,7 @@ DaemonSetSpec 是守护进程集的规约。
160149

161150
- **updateStrategy.rollingUpdate** (RollingUpdateDaemonSet)
162151

163-
滚动更新配置参数。仅在 type 值为 "RollingUpdate" 时出现。
152+
滚动更新配置参数。仅在 `type` 值为 "RollingUpdate" 时出现。
164153

165154
<!--
166155
<a name="RollingUpdateDaemonSet"></a>
@@ -179,9 +168,9 @@ DaemonSetSpec 是守护进程集的规约。
179168

180169
对于拥有可用 DaemonSet Pod 的节点而言，在更新期间可以拥有更新后的 DaemonSet Pod 的最大节点数。
181170
属性值可以是绝对数量（例如：5）或所需 Pod 的百分比（例如：10%）。
182-
如果 maxUnavailable 为 0，则该值不能为 0。绝对数是通过四舍五入从百分比计算得出的，最小值为 1。
171+
如果 `maxUnavailable` 为 0，则该值不能为 0。绝对数是通过四舍五入从百分比计算得出的，最小值为 1。
183172
默认值为 0。示例：当设置为 30% 时，最多为节点总数的 30% 节点上应该运行守护进程 Pod
184-
（即 status.desiredNumberScheduled）
173+
（即 `status.desiredNumberScheduled`）
185174
可以在旧 Pod 标记为已删除之前创建一个新 Pod。更新首先在 30% 的节点上启动新的 Pod。
186175
一旦更新的 Pod 可用（就绪时长至少 minReadySeconds 秒），该节点上的旧 DaemonSet pod 就会被标记为已删除。
187176
如果旧 Pod 因任何原因变得不可用（Ready 转换为 false、被驱逐或节点被腾空），
@@ -652,6 +641,10 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets
652641
- **sendInitialEvents** (*in query*): boolean
653642
654643
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
644+
645+
- **shardSelector** (*in query*): string
646+
647+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
655648
-->
656649

657650
- **resourceVersion** (**查询参数**): string
@@ -666,6 +659,10 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets
666659

667660
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
668661

662+
- **shardSelector** (**查询参数**): string
663+
664+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
665+
669666
<!--
670667
- **timeoutSeconds** (*in query*): integer
671668
@@ -780,6 +777,10 @@ GET /apis/apps/v1/daemonsets
780777
- **sendInitialEvents** (*in query*): boolean
781778
782779
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
780+
781+
- **shardSelector** (*in query*): string
782+
783+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
783784
-->
784785

785786
- **resourceVersion** (**查询参数**): string
@@ -794,6 +795,10 @@ GET /apis/apps/v1/daemonsets
794795

795796
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
796797

798+
- **shardSelector** (**查询参数**): string
799+
800+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
801+
797802
<!--
798803
- **timeoutSeconds** (*in query*): integer
799804
@@ -1516,6 +1521,10 @@ DELETE /apis/apps/v1/namespaces/{namespace}/daemonsets
15161521
- **sendInitialEvents** (*in query*): boolean
15171522
15181523
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
1524+
1525+
- **shardSelector** (*in query*): string
1526+
1527+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
15191528
-->
15201529

15211530
- **resourceVersion** (**查询参数**): string
@@ -1529,6 +1538,11 @@ DELETE /apis/apps/v1/namespaces/{namespace}/daemonsets
15291538
- **sendInitialEvents** (**查询参数**): boolean
15301539

15311540
<a href="{{< ref "../common-parameters/common-parameters#sendInitialEvents" >}}">sendInitialEvents</a>
1541+
1542+
- **shardSelector** (**查询参数**): string
1543+
1544+
<a href="{{< ref "../common-parameters/common-parameters#shardSelector" >}}">shardSelector</a>
1545+
15321546
<!--
15331547
- **timeoutSeconds** (*in query*): integer
15341548

0 commit comments

Comments
 (0)