Skip to content

Commit 632f16c

Browse files
Merge pull request #9753 from omegamormegil/patch-21
granting cluster-admin to normal users
2 parents a2bf94c + ddec061 commit 632f16c

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

ee/ucp/authorization/index.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ together.
9090
Only an administrator can manage grants, subjects, roles, and access to
9191
resources.
9292

93-
> About administrators
93+
> Note
9494
>
9595
> An administrator is a user who creates subjects, groups resources by moving them
9696
> into collections or namespaces, defines roles by selecting allowable operations,
@@ -103,7 +103,14 @@ For cluster security, only UCP admin users and service accounts that are
103103
granted the `cluster-admin` ClusterRole for all Kubernetes namespaces via a
104104
ClusterRoleBinding can deploy pods with privileged options. This prevents a
105105
platform user from being able to bypass the Universal Control Plane Security
106-
Model. These privileged options include:
106+
Model.
107+
108+
> Note
109+
>
110+
> Granting the `cluster admin` ClusterRole to normal users does not allow
111+
> them to deploy privileged pods.
112+
113+
These privileged options include:
107114

108115
Pods with any of the following defined in the Pod Specification:
109116

0 commit comments

Comments
 (0)