commit
a413d89528
|
@ -53,7 +53,7 @@ for a number of reasons:
|
|||
tied to complex business processes. By contrast, service account creation is
|
||||
intended to be more lightweight, allowing cluster users to create service accounts
|
||||
for specific tasks on demand. Separating ServiceAccount creation from the steps to
|
||||
onboard human users makes it easier for workloads to following the principle of
|
||||
onboard human users makes it easier for workloads to follow the principle of
|
||||
least privilege.
|
||||
- Auditing considerations for humans and service accounts may differ; the separation
|
||||
makes that easier to achieve.
|
||||
|
|
Loading…
Reference in New Issue