File tree Expand file tree Collapse file tree 1 file changed +9
-2
lines changed Expand file tree Collapse file tree 1 file changed +9
-2
lines changed Original file line number Diff line number Diff line change @@ -90,7 +90,7 @@ together.
90
90
Only an administrator can manage grants, subjects, roles, and access to
91
91
resources.
92
92
93
- > About administrators
93
+ > Note
94
94
>
95
95
> An administrator is a user who creates subjects, groups resources by moving them
96
96
> into collections or namespaces, defines roles by selecting allowable operations,
@@ -103,7 +103,14 @@ For cluster security, only UCP admin users and service accounts that are
103
103
granted the ` cluster-admin ` ClusterRole for all Kubernetes namespaces via a
104
104
ClusterRoleBinding can deploy pods with privileged options. This prevents a
105
105
platform user from being able to bypass the Universal Control Plane Security
106
- Model. These privileged options include:
106
+ Model.
107
+
108
+ > Note
109
+ >
110
+ > Granting the ` cluster admin ` ClusterRole to normal users does not allow
111
+ > them to deploy privileged pods.
112
+
113
+ These privileged options include:
107
114
108
115
Pods with any of the following defined in the Pod Specification:
109
116
You can’t perform that action at this time.
0 commit comments