From 24e2042c9df3645287ee471a4ba2108fbe824408 Mon Sep 17 00:00:00 2001 From: Jerome Petazzoni Date: Fri, 28 Sep 2018 19:14:07 -0500 Subject: [PATCH] Explain why revocation is important --- slides/k8s/authn-authz.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/slides/k8s/authn-authz.md b/slides/k8s/authn-authz.md index 0328e9e5..8e884fbc 100644 --- a/slides/k8s/authn-authz.md +++ b/slides/k8s/authn-authz.md @@ -141,6 +141,8 @@ class: extra-details (see issue [#18982](https://github.com/kubernetes/kubernetes/issues/18982)) +- As a result, we cannot easily suspend a user's access + - There are workarounds, but they are very inconvenient: - issue short-lived certificates (e.g. 24 hours) and regenerate them often