File tree Expand file tree Collapse file tree 1 file changed +2
-3
lines changed
content/zh/docs/reference/access-authn-authz Expand file tree Collapse file tree 1 file changed +2
-3
lines changed Original file line number Diff line number Diff line change @@ -2097,6 +2097,7 @@ This is not a recommended policy.
2097
2097
下面的策略允许 **所有** 服务帐户充当集群管理员。
2098
2098
容器中运行的所有应用程序都会自动收到服务帐户的凭据,可以对 API 执行任何操作,
2099
2099
包括查看 Secrets 和修改权限。这一策略是不被推荐的。
2100
+ {{< /warning >}}
2100
2101
2101
2102
` ` ` shell
2102
2103
kubectl create clusterrolebinding permissive-binding \
@@ -2105,12 +2106,10 @@ kubectl create clusterrolebinding permissive-binding \
2105
2106
--user=kubelet \
2106
2107
--group=system:serviceaccounts
2107
2108
` ` `
2108
- {{< /warning >}}
2109
2109
2110
2110
<!--
2111
2111
After you have transitioned to use RBAC, you should adjust the access controls
2112
2112
for your cluster to ensure that these meet your information security needs.
2113
2113
-->
2114
- 在你完成到 RBAC 的迁移后,应该调整集群的访问控制,确保相关的策略满足你的
2115
- 信息安全需求。
2114
+ 在你完成到 RBAC 的迁移后,应该调整集群的访问控制,确保相关的策略满足你的信息安全需求。
2116
2115
You can’t perform that action at this time.
0 commit comments