Add descripitons of --service-account-max-token-expiration option

kubernetes · Jul 13, 2018 · 85864d3 · 85864d3
1 parent 0e327ce
commit 85864d3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
@@ -772,7 +772,8 @@ in the audience of the token, and otherwise should reject the token. This field
 is optional and it defaults to the identifier of the API server.
 
 The `expirationSeconds` is the expected duration of validity of the service account
-token. It defaults to 1 hour and must be at least 10 minutes (600 seconds).
+token. It defaults to 1 hour and must be at least 10 minutes (600 seconds). Admin can
+also limit its max value by providing `--service-account-max-token-expiration` option in api-server.
 The `path` field specifies a relative path to the mount point of the projected
 volume.