From 6c0e3bdbba7758c13249d51385df6bd935b7bfd9 Mon Sep 17 00:00:00 2001 From: XsWack Date: Mon, 7 Aug 2017 09:49:17 +0800 Subject: [PATCH] Update encrypt-data.md fix typo --- docs/tasks/administer-cluster/encrypt-data.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/tasks/administer-cluster/encrypt-data.md b/docs/tasks/administer-cluster/encrypt-data.md index e6004c1af0..dc0889295a 100644 --- a/docs/tasks/administer-cluster/encrypt-data.md +++ b/docs/tasks/administer-cluster/encrypt-data.md @@ -109,7 +109,7 @@ To create a new secret perform the following steps: 2. Place that value in the secret field. 3. Set the `--experimental-encryption-provider-config` flag on the `kube-apiserver` to point to the location of the config file -4. restart your API server. +4. Restart your API server. **IMPORTANT:** Your config file contains keys that can decrypt content in etcd, so you must properly restrict permissions on your masters so only the user who runs the kube-apiserver can read it.