mirror of https://github.com/dapr/docs.git
clarify per josh comment
Signed-off-by: Hannah Hunter <hannahhunter@microsoft.com>
This commit is contained in:
parent
27a392e2c6
commit
8d2f64d10d
|
@ -8,8 +8,10 @@ description: "The basic spec for a Dapr component"
|
|||
|
||||
Dapr defines and registers components using a [resource specifications](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/). All components are defined as a resource and can be applied to any hosting environment where Dapr is running, not just Kubernetes.
|
||||
|
||||
Typically, components are restricted to a particular [namepsace]({{< ref isolation-concept.md >}}) and restricted access through scopes to any particular set of applications. The namespace is either explicit on the component manifest itself, or set by the API server, which derives the namespace through context with applying to Kubernetes.
|
||||
|
||||
{{% alert title="Note" color="primary" %}}
|
||||
Any component can be restricted to a particular [namepsace]({{< ref isolation-concept.md >}}) and restricted access through scopes to any particular set of applications.
|
||||
The exception to this rule is in self-hosted mode, where daprd ingests component resources when the namespace field is omitted. However, the security profile is mute, as daprd has access to the manifest anyway, unlike in Kubernetes.
|
||||
{{% /alert %}}
|
||||
|
||||
## Format
|
||||
|
|
Loading…
Reference in New Issue