From d761d6bc9627f32d43ddc5a6b252ef4b25449576 Mon Sep 17 00:00:00 2001 From: Dhilip Date: Fri, 18 Aug 2017 04:45:19 +0530 Subject: [PATCH] Small grammar change (#4777) * Small grammar change small grammar change * bulletize apiserver -> kubelet bulletize apiserver -> kubelet for better clarity. --- .../architecture/master-node-communication.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/docs/concepts/architecture/master-node-communication.md b/docs/concepts/architecture/master-node-communication.md index 1d78c5f920..23348771a3 100644 --- a/docs/concepts/architecture/master-node-communication.md +++ b/docs/concepts/architecture/master-node-communication.md @@ -64,12 +64,13 @@ or service through the apiserver's proxy functionality. ### apiserver -> kubelet -The connections from the apiserver to the kubelet are used for fetching logs -for pods, attaching (through kubectl) to running pods, and using the kubelet's -port-forwarding functionality. These connections terminate at the kubelet's -HTTPS endpoint. +The connections from the apiserver to the kubelet are used for: + * fetching logs for pods. + * attaching (through kubectl) to running pods. + * the kubelet's port-forwarding functionality. -By default, the apiserver does not verify the kubelet's serving certificate, +These connections terminate at the kubelet's HTTPS endpoint. By default, +the apiserver does not verify the kubelet's serving certificate, which makes the connection subject to man-in-the-middle attacks, and **unsafe** to run over untrusted and/or public networks.