You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Add Code blocks in the Markdown spec to make it easy to read.
* Uniform case and adjustment description for smoother writing.
Signed-off-by: ydFu <[email protected]>
The kubelet will request and store the token on behalf of the pod, make the
322
-
token available to the pod at a configurable file path, and refresh the token as it approaches expiration. Kubelet proactively rotates the token if it is older than 80% of its total TTL, or if the token is older than 24 hours.
325
+
token available to the pod at a configurable file path, and refresh the token as it approaches expiration.
326
+
The kubelet proactively rotates the token if it is older than 80% of its total TTL, or if the token is older than 24 hours.
323
327
324
328
The application is responsible for reloading the token when it rotates. Periodic reloading (e.g. once every 5 minutes) is sufficient for most use cases.
325
329
@@ -380,7 +384,6 @@ JWKS URI is required to use the `https` scheme.
380
384
381
385
## {{% heading "whatsnext" %}}
382
386
383
-
384
387
See also:
385
388
386
389
- [Cluster Admin Guide to Service Accounts](/docs/reference/access-authn-authz/service-accounts-admin/)
0 commit comments