kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update rbac.md (#4973) 

Added the lost "." .And the "NOTE" should  be in a new line.
This commit is contained in:
lemon-tree 2017-08-18 05:04:45 +08:00 committed by Steve Perry
parent 3c99a5c584
commit 732aef8820
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/admin/authorization/rbac.md
View File

@ -647,7 +647,7 @@ Grants a `ClusterRole` across the entire cluster, including all namespaces. Exam
`kubectl create clusterrolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp`
See the CLI help for detailed usage
See the CLI help for detailed usage.
## Service Account Permissions
@ -691,6 +691,7 @@ In order from most secure to least secure, the approaches are:
Many [add-ons](/docs/concepts/cluster-administration/addons/) currently run as the "default" service account in the "kube-system" namespace.
To allow those add-ons to run with super-user access, grant cluster-admin permissions to the "default" service account in the "kube-system" namespace.
NOTE: Enabling this means the "kube-system" namespace contains secrets that grant super-user access to the API.
```shell