Add descripitons of --service-account-max-token-expiration option (#9500)

This commit is contained in:
WanLinghao
2018-07-17 13:25:37 +08:00
committed by k8s-ci-robot
parent 1147aeab0e
commit 202905c7aa
+4 -3
View File
@@ -772,9 +772,10 @@ in the audience of the token, and otherwise should reject the token. This field
is optional and it defaults to the identifier of the API server.
The `expirationSeconds` is the expected duration of validity of the service account
token. It defaults to 1 hour and must be at least 10 minutes (600 seconds).
The `path` field specifies a relative path to the mount point of the projected
volume.
token. It defaults to 1 hour and must be at least 10 minutes (600 seconds). An administrator
can also limit its maximum value by specifying the `--service-account-max-token-expiration`
option for the API server. The `path` field specifies a relative path to the mount point
of the projected volume.
{{< note >}}
**Note:** A Container using a projected volume source as a [subPath](#using-subpath) volume mount will not