Update note on grants and service accounts

This commit is contained in:
Jim Galasyn 2018-04-23 14:57:36 -07:00
parent 9ee8896f12
commit 1c1b2c2ab3
1 changed files with 1 additions and 5 deletions

View File

@ -117,8 +117,4 @@ Kubernetes workloads:
privileged options. These are options like `PodSpec.hostIPC`, `PodSpec.hostNetwork`,
`PodSpec.hostPID`, `SecurityContext.allowPrivilegeEscalation`,
`SecurityContext.capabilities`, `SecurityContext.privileged`, and
`Volume.hostPath`.
* You can't grant permissions to Kubernetes service accounts.
The `default` service account has no permissions and can't use the Kubernetes
API. All other service accounts have full admin permissions and can only be
used by Docker EE administrators.
`Volume.hostPath`.