Skip to content

Commit

Permalink
Fix typo
Browse files Browse the repository at this point in the history
Co-authored-by: Lubomir I. Ivanov <[email protected]>
  • Loading branch information
g-gaston and neolit123 committed Sep 10, 2024
1 parent 705f867 commit 95cd6d0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/proposals/20240807-in-place-updates.md
Original file line number Diff line number Diff line change
Expand Up @@ -452,7 +452,7 @@ However, in-place updates might cause Nodes to become unhealthy while the update
### Security Model

On the core CAPI side, the security model for this feature is very straight forward: CAPI controllers only require to read/create/update CAPI resources and those controllers are the only ones that need to modify the CAPI resources. Moreover, the controllers that need to perform these actions already have the necessary permissions over the resources they need to modify.
On the core CAPI side, the security model for this feature is very straightforward: CAPI controllers only require to read/create/update CAPI resources and those controllers are the only ones that need to modify the CAPI resources. Moreover, the controllers that need to perform these actions already have the necessary permissions over the resources they need to modify.

However, each external updater should define their own security model. Depending on the mechanism used to update machines in-place, different privileges might be needed, from scheduling privileged pods to SSH access to the hosts. Moreover, external updaters might need RBAC to read CAPI resources.

Expand Down

0 comments on commit 95cd6d0

Please sign in to comment.