whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modify RBAC Authorizer log message

Browse Source
This commit is contained in:
Gaurav Sofat
2020-04-09 06:13:04 +05:30
committed by bryan
parent a25bba62f6
commit 2fca9f1d18
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/reference/access-authn-authz/rbac.md
+1 -1
View File
@@ -1182,7 +1182,7 @@ allowed by *either* the RBAC or ABAC policies is allowed.
When the kube-apiserver is run with a log level of 5 or higher for the RBAC component When the kube-apiserver is run with a log level of 5 or higher for the RBAC component
(`--vmodule=rbac*=5` or `--v=5`), you can see RBAC denials in the API server log (`--vmodule=rbac*=5` or `--v=5`), you can see RBAC denials in the API server log
(prefixed with `RBAC DENY:`). (prefixed with `RBAC:`).
You can use that information to determine which roles need to be granted to which users, groups, or service accounts. You can use that information to determine which roles need to be granted to which users, groups, or service accounts.
Once you have [granted roles to service accounts](#service-account-permissions) and workloads Once you have [granted roles to service accounts](#service-account-permissions) and workloads