whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add descripitons of --service-account-max-token-expiration option (#9500)

Browse Source
This commit is contained in:
WanLinghao
2018-07-17 13:25:37 +08:00
committed by k8s-ci-robot
parent 1147aeab0e
commit 202905c7aa
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/concepts/storage/volumes.md
+4 -3
View File
@@ -772,9 +772,10 @@ in the audience of the token, and otherwise should reject the token. This field
is optional and it defaults to the identifier of the API server. is optional and it defaults to the identifier of the API server.
The `expirationSeconds` is the expected duration of validity of the service account The `expirationSeconds` is the expected duration of validity of the service account
token. It defaults to 1 hour and must be at least 10 minutes (600 seconds). token. It defaults to 1 hour and must be at least 10 minutes (600 seconds). An administrator
The `path` field specifies a relative path to the mount point of the projected can also limit its maximum value by specifying the `--service-account-max-token-expiration`
volume. option for the API server. The `path` field specifies a relative path to the mount point
of the projected volume.
{{< note >}} {{< note >}}
**Note:** A Container using a projected volume source as a [subPath](#using-subpath) volume mount will not **Note:** A Container using a projected volume source as a [subPath](#using-subpath) volume mount will not