kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update master-node-communication.md (#7467) 

Remove out-of-date reference to TODO (#7314).
pull/7510/head
Matt Braymer-Hayes 2018-02-24 13:13:46 -08:00 committed by k8s-ci-robot
parent 6e8384d1b4
commit c1beb824c4
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/concepts/architecture/master-node-communication.md
View File

@ -43,13 +43,7 @@ The `kubernetes` service (in all namespaces) is configured with a virtual IP
address that is redirected (via kube-proxy) to the HTTPS endpoint on the
apiserver.
The master components communicate with the cluster apiserver over the
insecure (not encrypted or authenticated) port. This port is typically only
exposed on the localhost interface of the master machine, so that the master
components, all running on the same machine, can communicate with the
cluster apiserver. Over time, the master components will be migrated to use
the secure port with authentication and authorization (see
[#13598](https://github.com/kubernetes/kubernetes/issues/13598)).
The master components also communicate with the cluster apiserver over the secure port.
As a result, the default operating mode for connections from the cluster
(nodes and pods running on the nodes) to the master is secured by default