Skip to content

Commit

Permalink
tweak ending sentence
Browse files Browse the repository at this point in the history
  • Loading branch information
bgeesaman committed Apr 27, 2018
1 parent 1bbff1d commit 8ad4ce9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/l1-api-tls.md
Original file line number Diff line number Diff line change
Expand Up @@ -273,6 +273,6 @@ ip-10-1-0-11 Ready <none> 16d v1.9.2
ip-10-1-0-12 Ready <none> 16d v1.9.2
```

Fantastic! From outside the cluster, we only allow SSH (`tcp/22`) and client-certificates are now need to access the Kubernetes API Server over TLS (`tcp/6443`). All sorts of attacks are now thwarted—and we're done, right? Well, depending on the workload, it "might" be sufficient. Speaking of workloads, we should deploy some applications to this cluster to make it actually do something useful.
Fantastic! From outside the cluster, we only allow SSH (`tcp/22`) and client-certificates are now need to access the Kubernetes API Server over TLS (`tcp/6443`). All sorts of attacks are now thwarted—and we're done, right? Well, depending on the workload and the access to the cluster, it *may* be sufficient, but we'll test those assumptions.

[Back](/README.md#level-1-hardening)

0 comments on commit 8ad4ce9

Please sign in to comment.