diff --git a/content/en/docs/tasks/configure-pod-container/create-hostprocess-pod.md b/content/en/docs/tasks/configure-pod-container/create-hostprocess-pod.md index cad26cf29a..24b8efea5a 100644 --- a/content/en/docs/tasks/configure-pod-container/create-hostprocess-pod.md +++ b/content/en/docs/tasks/configure-pod-container/create-hostprocess-pod.md @@ -228,7 +228,7 @@ To run HostProcess containers as a local user; A local usergroup must first be c and the name of that local usergroup must be specified in the `runAsUserName` field in the deployment. Prior to initializing the HostProcess container, a new **ephemeral** local user account to be created and joined to the specified usergroup, from which the container is run. This provides a number a benefits including eliminating the need to manage passwords for local user accounts. -passwords for local user accounts. An initial HostProcess container running as a service account can be used to +An initial HostProcess container running as a service account can be used to prepare the user groups for later HostProcess containers. {{< note >}} @@ -269,4 +269,4 @@ For more information please check out the [windows-host-process-containers-base- - HostProcess containers fail to start with `failed to create user process token: failed to logon user: Access is denied.: unknown` Ensure containerd is running as `LocalSystem` or `LocalService` service accounts. User accounts (even Administrator accounts) do not have permissions to create logon tokens for any of the supported [user accounts](#choosing-a-user-account). - \ No newline at end of file +