Skip to content

Commit 95cd6d0

Browse files
g-gastonneolit123
andcommitted
Fix typo
Co-authored-by: Lubomir I. Ivanov <[email protected]>
1 parent 705f867 commit 95cd6d0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/proposals/20240807-in-place-updates.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -452,7 +452,7 @@ However, in-place updates might cause Nodes to become unhealthy while the update
452452
453453
### Security Model
454454

455-
On the core CAPI side, the security model for this feature is very straight forward: CAPI controllers only require to read/create/update CAPI resources and those controllers are the only ones that need to modify the CAPI resources. Moreover, the controllers that need to perform these actions already have the necessary permissions over the resources they need to modify.
455+
On the core CAPI side, the security model for this feature is very straightforward: CAPI controllers only require to read/create/update CAPI resources and those controllers are the only ones that need to modify the CAPI resources. Moreover, the controllers that need to perform these actions already have the necessary permissions over the resources they need to modify.
456456

457457
However, each external updater should define their own security model. Depending on the mechanism used to update machines in-place, different privileges might be needed, from scheduling privileged pods to SSH access to the hosts. Moreover, external updaters might need RBAC to read CAPI resources.
458458

0 commit comments

Comments
 (0)