whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

securing a cluster: update language of kubelet API recommendations

Browse Source
This commit is contained in:
Eric Chiang
2017-12-11 11:00:36 -08:00
parent e2d51afeb8
commit f9ae051650
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/tasks/administer-cluster/securing-a-cluster.md
+2 -4
View File
@@ -73,11 +73,9 @@ Consult the [authorization reference section](/docs/admin/authorization/) for mo
## Controlling access to the Kubelet
Kubelets expose HTTPS endpoints which give access to data of varying sensitivity, and allow performing operations with varying levels of power on the node and within containers.
Kubelets expose HTTPS endpoints which grant powerful control over the node and containers. By default Kubelets allow unauthenticated access to this API.
By default, Kubelets allow full access to those endpoints.
To secure access to those endpoints, enable Kubelet authentication and authorization.
Production clusters should enable Kubelet authentication and authorization.
Consult the [Kubelet authentication/authorization reference](/docs/admin/kubelet-authentication-authorization) for more information.