commit
a413d89528
|
@ -53,7 +53,7 @@ for a number of reasons:
|
||||||
tied to complex business processes. By contrast, service account creation is
|
tied to complex business processes. By contrast, service account creation is
|
||||||
intended to be more lightweight, allowing cluster users to create service accounts
|
intended to be more lightweight, allowing cluster users to create service accounts
|
||||||
for specific tasks on demand. Separating ServiceAccount creation from the steps to
|
for specific tasks on demand. Separating ServiceAccount creation from the steps to
|
||||||
onboard human users makes it easier for workloads to following the principle of
|
onboard human users makes it easier for workloads to follow the principle of
|
||||||
least privilege.
|
least privilege.
|
||||||
- Auditing considerations for humans and service accounts may differ; the separation
|
- Auditing considerations for humans and service accounts may differ; the separation
|
||||||
makes that easier to achieve.
|
makes that easier to achieve.
|
||||||
|
|
Loading…
Reference in New Issue