Copy edits for typos
This commit is contained in:
parent
ee97e734b5
commit
b4deb49a71
|
|
@ -128,7 +128,7 @@ to serve the purpose outside of GCE.
|
|||
|
||||
The [service](../services.md) abstraction provides a way to group pods under a
|
||||
common access policy (e.g. load-balanced). The implementation of this creates a
|
||||
virtual IP which clients can access and which is transparantly proxied to the
|
||||
virtual IP which clients can access and which is transparently proxied to the
|
||||
pods in a Service. Each node runs a kube-proxy process which programs
|
||||
`iptables` rules to trap access to service IPs and redirect them to the correct
|
||||
backends. This provides a highly-available load-balancing solution with low
|
||||
|
|
|
|||
|
|
@ -78,7 +78,7 @@ A pod runs in a *security context* under a *service account* that is defined by
|
|||
5. Developers should be able to run their own images or images from the community and expect those images to run correctly
|
||||
6. Developers may need to ensure their images work within higher security requirements specified by administrators
|
||||
7. When available, Linux kernel user namespaces can be used to ensure 5.2 and 5.4 are met.
|
||||
8. When application developers want to share filesytem data via distributed filesystems, the Unix user ids on those filesystems must be consistent across different container processes
|
||||
8. When application developers want to share filesystem data via distributed filesystems, the Unix user ids on those filesystems must be consistent across different container processes
|
||||
6. Developers should be able to define [secrets](secrets.md) that are automatically added to the containers when pods are run
|
||||
1. Secrets are files injected into the container whose values should not be displayed within a pod. Examples:
|
||||
1. An SSH private key for git cloning remote data
|
||||
|
|
|
|||
Loading…
Reference in New Issue