Skip to content

Commit f1dbd36

Browse files
committed
further wording refinements
1 parent 6e097fe commit f1dbd36

File tree

2 files changed

+6
-2
lines changed

2 files changed

+6
-2
lines changed

authentication/managing_cloud_provider_credentials/cco-mode-mint.adoc

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,11 @@ Mint mode is the default Cloud Credential Operator (CCO) credentials mode for {p
1414
For clusters that use the CCO in mint mode, the administrator-level credential is stored in the `kube-system` namespace.
1515
The CCO uses the `admin` credential to process the `CredentialsRequest` objects in the cluster and create users for components with limited permissions.
1616

17-
With mint mode, each cluster component has only the specific permissions it requires. The automatic, continuous reconciliation of cloud credentials in mint mode allows actions that require additional credentials or permissions, such as minor version cluster updates, to proceed.
17+
With mint mode, each cluster component has only the specific permissions it requires.
18+
Cloud credential reconciliation is automatic and continuous so that components can perform actions that require additional credentials or permissions.
19+
20+
For example, a minor version cluster update (such as updating from {product-version}.3 to {product-version}.4) might include an updated `CredentialsRequest` resource for a cluster component.
21+
The CCO, operating in mint mode, uses the `admin` credential to process the `CredentialsRequest` resource and create users with limited permissions to satisfy the updated authentication requirements.
1822

1923
[NOTE]
2024
====

modules/manually-removing-cloud-creds.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ For clusters that use the Cloud Credential Operator (CCO) in mint mode, the admi
1010
The CCO uses the `admin` credential to process the `CredentialsRequest` objects in the cluster and create users for components with limited permissions.
1111

1212
After installing an {product-title} cluster with the CCO in mint mode, you can remove the administrator-level credential secret from the `kube-system` namespace in the cluster.
13-
The CCO only requires the administrator-level credential during changes that require reconciling new or modified `CredentialsRequest` custom resources, such as minor version cluster updates.
13+
The CCO only requires the administrator-level credential during changes that require reconciling new or modified `CredentialsRequest` custom resources, such as minor cluster version updates.
1414

1515
[NOTE]
1616
====

0 commit comments

Comments
 (0)