Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Follow-up edits to PR#5260 #5300

Merged
merged 1 commit into from
Sep 20, 2017
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions architecture/additional_concepts/authorization.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -569,14 +569,15 @@ value will be removed from `volumes`.
====

[[authorization-allowed-flex-volumes]]
=== Restricting an Access to Flexvolumes
=== Restricting Access to FlexVolumes

{product-title} provides additional control of Flexvolumes based on their
driver. When SCC allows the usage of Flexvolumes, pods may request any Flexvolumes.
But when cluster admin specifies driver names in the `AllowedFlexVolumes`
field, pods may use only Flexvolumes with these drivers.
{product-title} provides additional control of FlexVolumes based on their
driver. When SCC allows the usage of FlexVolumes, pods can request any
FlexVolumes. However, when the cluster administrator specifies driver names in
the `AllowedFlexVolumes` field, pods must only use FlexVolumes with these
drivers.

.Example of limiting access to only two Flexvolumes
.Example of Limiting Access to Only Two FlexVolumes
[source,yaml]
----
volumes:
Expand Down Expand Up @@ -749,5 +750,5 @@ ifdef::openshift-online[]
In {product-title} Pro, you can grant roles (like *view* or *edit*) to other
users or groups for your projects.

In {product-title} Starter, collaboration is not available.
In {product-title} Starter, collaboration is not available.
endif::[]