Skip to content

Commit 740b0dd

Browse files
KEP-689: Fix typo in README.md
kuberenetes >>> kubernetes
1 parent 742ce6d commit 740b0dd

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

keps/sig-windows/689-windows-gmsa/README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -407,7 +407,7 @@ In order to enforce authorization of service accounts in a cluster before they c
407407

408408
Today, if PSP or RBAC mode is not configured in a cluster, nothing stops pods with special capabilities from being scheduled. To align with this, we should allow GMSA configurations on pods to be enabled without requiring GMSAAuthorizer to be running and RBAC mode to be enabled.
409409

410-
Further, decoupling basic GMSA functionality in the Kubelet and CRI layers from authorization keeps the core Kuberenetes code non-opinionated around enforcement of authorization of service accounts for GMSA usage. Kubernetes cluster setup tools as well as Kubernetes distribution vendors can ensure that RBAC mode is enabled and GMSAAuthorizer is configured and installed when Windows nodes joined to a domain are deployed in a cluster.
410+
Further, decoupling basic GMSA functionality in the Kubelet and CRI layers from authorization keeps the core Kubernetes code non-opinionated around enforcement of authorization of service accounts for GMSA usage. Kubernetes cluster setup tools as well as Kubernetes distribution vendors can ensure that RBAC mode is enabled and GMSAAuthorizer is configured and installed when Windows nodes joined to a domain are deployed in a cluster.
411411

412412

413413
<!-- end matter -->

0 commit comments

Comments
 (0)