kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #1103 from rickypai/patch-2 

Use different anchor for better navigation
reviewable/pr1093/r2
devin-donnelly 2016-08-29 14:53:02 -07:00 committed by GitHub
parent 086c65ab61 4c504ad0af
commit e0b5207157
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/user-guide/secrets/index.md
View File

@ -642,8 +642,6 @@ you must use `ls -la` to see them when listing directory contents.
### Use-case: Secret visible to one container in a pod
<a name="use-case-two-containers"></a>
Consider a program that needs to handle HTTP requests, do some complex business
logic, and then sign some messages with an HMAC. Because it has complex
application logic, there might be an unnoticed remote file reading exploit in
@ -688,7 +686,7 @@ Therefore, one Pod does not have access to the secrets of another pod.
There may be several containers in a pod. However, each container in a pod has
to request the secret volume in its `volumeMounts` for it to be visible within
the container. This can be used to construct useful [security partitions at the
Pod level](#use-case-two-containers).
Pod level](#use-case-secret-visible-to-one-container-in-a-pod).
### Risks