From 7b9dd1db163504d3a3a9e45dedebfb8c448356ee Mon Sep 17 00:00:00 2001 From: Hu Shuai Date: Tue, 19 Jul 2022 17:29:52 +0800 Subject: [PATCH] [zh-cn] resync docs/concepts/architecture/control-plane-node-communication.md Signed-off-by: Hu Shuai --- .../concepts/architecture/control-plane-node-communication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/zh-cn/docs/concepts/architecture/control-plane-node-communication.md b/content/zh-cn/docs/concepts/architecture/control-plane-node-communication.md index e8d99338ff..ed3075a273 100644 --- a/content/zh-cn/docs/concepts/architecture/control-plane-node-communication.md +++ b/content/zh-cn/docs/concepts/architecture/control-plane-node-communication.md @@ -54,7 +54,7 @@ API 服务器被配置为在一个安全的 HTTPS 端口（通常为 443）上 Nodes should be provisioned with the public root certificate for the cluster such that they can connect securely to the API server along with valid client credentials. A good approach is that the client credentials provided to the kubelet are in the form of a client certificate. See -[kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) +[kubelet TLS bootstrapping](/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/) for automated provisioning of kubelet client certificates. --> 应该使用集群的公共根证书开通节点，这样它们就能够基于有效的客户端凭据安全地连接 API 服务器。