Update note on grants and service accounts

This commit is contained in:
Jim Galasyn 2018-04-23 14:57:36 -07:00
parent 9ee8896f12
commit 1c1b2c2ab3
1 changed files with 1 additions and 5 deletions

View File

@ -118,7 +118,3 @@ Kubernetes workloads:
`PodSpec.hostPID`, `SecurityContext.allowPrivilegeEscalation`, `PodSpec.hostPID`, `SecurityContext.allowPrivilegeEscalation`,
`SecurityContext.capabilities`, `SecurityContext.privileged`, and `SecurityContext.capabilities`, `SecurityContext.privileged`, and
`Volume.hostPath`. `Volume.hostPath`.
* You can't grant permissions to Kubernetes service accounts.
The `default` service account has no permissions and can't use the Kubernetes
API. All other service accounts have full admin permissions and can only be
used by Docker EE administrators.