whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add path /var/run/secrets/.../serviceaccount/token (#32794)

Browse Source 
* Add path /var/run/secrets/.../serviceaccount/token

Add path /var/run/secrets/kubernetes.io/serviceaccount/token so that new users understand the "magic".

* Update content/en/docs/tasks/configure-pod-container/configure-service-account.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Tim Bannister <tim@scalefactory.com>
This commit is contained in:
Thomas Güttler
2022-06-14 07:11:34 +02:00
committed by GitHub
parent ea642a94db
commit a170f567b4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/tasks/configure-pod-container/configure-service-account.md
+1 -1
View File
@@ -42,7 +42,7 @@ You can access the API from inside a pod using automatically mounted service acc
The API permissions of the service account depend on the
[authorization plugin and policy](/docs/reference/access-authn-authz/authorization/#authorization-modules) in use.
In version 1.6+, you can opt out of automounting API credentials for a service account by setting `automountServiceAccountToken: false` on the service account:
You can opt out of automounting API credentials on `/var/run/secrets/kubernetes.io/serviceaccount/token` for a service account by setting `automountServiceAccountToken: false` on the ServiceAccount:
```yaml
apiVersion: v1