From a170f567b42b6d99bdcc9a08149f5c71a5a3a79a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20G=C3=BCttler?= Date: Tue, 14 Jun 2022 07:11:34 +0200 Subject: [PATCH] Add path /var/run/secrets/.../serviceaccount/token (#32794) * Add path /var/run/secrets/.../serviceaccount/token Add path /var/run/secrets/kubernetes.io/serviceaccount/token so that new users understand the "magic". * Update content/en/docs/tasks/configure-pod-container/configure-service-account.md Co-authored-by: Tim Bannister Co-authored-by: Tim Bannister --- .../tasks/configure-pod-container/configure-service-account.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/tasks/configure-pod-container/configure-service-account.md b/content/en/docs/tasks/configure-pod-container/configure-service-account.md index ffb863a19f..7012238944 100644 --- a/content/en/docs/tasks/configure-pod-container/configure-service-account.md +++ b/content/en/docs/tasks/configure-pod-container/configure-service-account.md @@ -42,7 +42,7 @@ You can access the API from inside a pod using automatically mounted service acc The API permissions of the service account depend on the [authorization plugin and policy](/docs/reference/access-authn-authz/authorization/#authorization-modules) in use. -In version 1.6+, you can opt out of automounting API credentials for a service account by setting `automountServiceAccountToken: false` on the service account: +You can opt out of automounting API credentials on `/var/run/secrets/kubernetes.io/serviceaccount/token` for a service account by setting `automountServiceAccountToken: false` on the ServiceAccount: ```yaml apiVersion: v1