Skip to content

Commit 1e09b33

Browse files
aleskandroTim Bannister
andauthored
Update content/en/docs/tasks/configure-pod-container/configure-service-account.md
Co-authored-by: Tim Bannister <[email protected]>
1 parent 300519c commit 1e09b33

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

content/en/docs/tasks/configure-pod-container/configure-service-account.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,8 +59,10 @@ When a Pod authenticates as a ServiceAccount, its level of access depends on the
5959
in use.
6060

6161
The API credentials are automatically revoked when the Pod is deleted, even if
62-
finalizers are in place. In particular, the API credentials are revoked after 1
63-
minute of the `.metadata.deletionTimestamp`, which includes the grace period.
62+
finalizers are in place. In particular, the API credentials are revoked 60 seconds
63+
beyond the `.metadata.deletionTimestamp` set on the Pod (the deletion timestamp
64+
is typically the time that the **delete** request was accepted plus the Pod's
65+
termination grace period).
6466

6567
### Opt out of API credential automounting
6668

0 commit comments

Comments
 (0)