Improvement: Tweak line wrapping for the ip-masq-agent task page.

Author: Shubham82

content/en/docs/tasks/administer-cluster/ip-masq-agent.md

@@ -14,39 +14,65 @@ This page shows how to configure and enable the `ip-masq-agent`.
 <!-- discussion -->
 ## IP Masquerade Agent User Guide
 
-The `ip-masq-agent` configures iptables rules to hide a pod's IP address behind the cluster node's IP address. This is typically done when sending traffic to destinations outside the cluster's pod [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) range.
+The `ip-masq-agent` configures iptables rules to hide a pod's IP address behind the cluster
+node's IP address. This is typically done when sending traffic to destinations outside the
+cluster's pod [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) range.
 
 ### **Key Terms**
 
 * **NAT (Network Address Translation)**
-  Is a method of remapping one IP address to another by modifying either the source and/or destination address information in the IP header.  Typically performed by a device doing IP routing.
+  Is a method of remapping one IP address to another by modifying either the source and/or
+  destination address information in the IP header. Typically performed by a device doing IP routing.
 * **Masquerading**
-  A form of NAT that is typically used to perform a many to one address translation, where multiple source IP addresses are masked behind a single address, which is typically the device doing the IP routing. In Kubernetes this is the Node's IP address.
+  A form of NAT that is typically used to perform a many to one address translation, where
+  multiple source IP addresses are masked behind a single address, which is typically the
+  device doing the IP routing. In Kubernetes this is the Node's IP address.
 * **CIDR (Classless Inter-Domain Routing)**
-  Based on the variable-length subnet masking, allows specifying arbitrary-length prefixes. CIDR introduced a new method of representation for IP addresses, now commonly known as **CIDR notation**, in which an address or routing prefix is written with a suffix indicating the number of bits of the prefix, such as 192.168.2.0/24.
+  Based on the variable-length subnet masking, allows specifying arbitrary-length prefixes.
+  CIDR introduced a new method of representation for IP addresses, now commonly known as
+  **CIDR notation**, in which an address or routing prefix is written with a suffix indicating
+  the number of bits of the prefix, such as 192.168.2.0/24.
 * **Link Local**
-  A link-local address is a network address that is valid only for communications within the network segment or the broadcast domain that the host is connected to. Link-local addresses for IPv4 are defined in the address block 169.254.0.0/16 in CIDR notation.
-
-The ip-masq-agent configures iptables rules to handle masquerading node/pod IP addresses when sending traffic to destinations outside the cluster node's IP and the Cluster IP range.  This essentially hides pod IP addresses behind the cluster node's IP address.  In some environments, traffic to "external" addresses must come from a known machine address. For example, in Google Cloud, any traffic to the internet must come from a VM's IP.  When containers are used, as in Google Kubernetes Engine, the Pod IP will be rejected for egress. To avoid this, we must hide the Pod IP behind the VM's own IP address - generally known as "masquerade". By default, the agent is configured to treat the three private IP ranges specified by [RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing).  These ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. The agent will also treat link-local (169.254.0.0/16) as a non-masquerade CIDR by default.  The agent is configured to reload its configuration from the location */etc/config/ip-masq-agent* every 60 seconds, which is also configurable.
+  A link-local address is a network address that is valid only for communications within the
+  network segment or the broadcast domain that the host is connected to. Link-local addresses
+  for IPv4 are defined in the address block 169.254.0.0/16 in CIDR notation.
+
+The ip-masq-agent configures iptables rules to handle masquerading node/pod IP addresses when
+sending traffic to destinations outside the cluster node's IP and the Cluster IP range. This
+essentially hides pod IP addresses behind the cluster node's IP address. In some environments,
+traffic to "external" addresses must come from a known machine address. For example, in Google
+Cloud, any traffic to the internet must come from a VM's IP. When containers are used, as in
+Google Kubernetes Engine, the Pod IP will be rejected for egress. To avoid this, we must hide
+the Pod IP behind the VM's own IP address - generally known as "masquerade". By default, the
+agent is configured to treat the three private IP ranges specified by [RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing). These ranges are `10.0.0.0/8`, `172.16.0.0/12`, and
+`192.168.0.0 16`. The agent will also treat link-local (169.254.0.0/16) as a non-masquerade
+CIDR by default. The agent is configured to reload its configuration from the location */etc/config/ip-masq-agent* every 60 seconds, which is also configurable.
 
 ![masq/non-masq example](/images/docs/ip-masq.png)
 
-The agent configuration file must be written in YAML or JSON syntax, and may contain three optional keys:
+The agent configuration file must be written in YAML or JSON syntax, and may contain three
+optional keys:
 
 * `nonMasqueradeCIDRs`: A list of strings in
-  [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation that specify the non-masquerade ranges.
+  [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation that specify
+  the non-masquerade ranges.
 * `masqLinkLocal`: A Boolean (true/false) which indicates whether to masquerade traffic to the
   link local prefix `169.254.0.0/16`. False by default.
 * `resyncInterval`: A time interval at which the agent attempts to reload config from disk.
   For example: '30s', where 's' means seconds, 'ms' means milliseconds.
 
-Traffic to 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16) ranges will NOT be masqueraded. Any other traffic (assumed to be internet) will be masqueraded.  An example of a local destination from a pod could be its Node's IP address as well as another node's address or one of the IP addresses in Cluster's IP range.   Any other traffic will be masqueraded by default.  The below entries show the default set of rules that are applied by the ip-masq-agent:
+Traffic to 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 ranges will NOT be masqueraded. Any
+other traffic (assumed to be internet) will be masqueraded.  An example of a local destination
+from a pod could be its Node's IP address as well as another node's address or one of the IP
+addresses in Cluster's IP range. Any other traffic will be masqueraded by default. The
+below entries show the default set of rules that are applied by the ip-masq-agent:
 
 ```shell
 iptables -t nat -L IP-MASQ-AGENT
 ```
 
 ```none
+target     prot opt source               destination
 RETURN     all  --  anywhere             169.254.0.0/16       /* ip-masq-agent: cluster-local traffic should not be subject to MASQUERADE */ ADDRTYPE match dst-type !LOCAL
 RETURN     all  --  anywhere             10.0.0.0/8           /* ip-masq-agent: cluster-local traffic should not be subject to MASQUERADE */ ADDRTYPE match dst-type !LOCAL
 RETURN     all  --  anywhere             172.16.0.0/12        /* ip-masq-agent: cluster-local traffic should not be subject to MASQUERADE */ ADDRTYPE match dst-type !LOCAL
@@ -70,18 +96,22 @@ To create an ip-masq-agent, run the following kubectl command:
 kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/ip-masq-agent/master/ip-masq-agent.yaml
 ```
 
-You must also apply the appropriate node label to any nodes in your cluster that you want the agent to run on.
+You must also apply the appropriate node label to any nodes in your cluster that you want the
+agent to run on.
 
 ```shell
 kubectl label nodes my-node node.kubernetes.io/masq-agent-ds-ready=true
 ```
 
 More information can be found in the ip-masq-agent documentation [here](https://github.com/kubernetes-sigs/ip-masq-agent)
 
-In most cases, the default set of rules should be sufficient; however, if this is not the case for your cluster, you can create and apply a [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP ranges that are affected.  For example, to allow only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called "config".
+In most cases, the default set of rules should be sufficient; however, if this is not the case
+for your cluster, you can create and apply a [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP ranges that are affected.  For example, to allow
+only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called "config".
 
 {{< note >}}
-It is important that the file is called config since, by default, that will be used as the key for lookup by the `ip-masq-agent`:
+It is important that the file is called config since, by default, that will be used as the key
+for lookup by the `ip-masq-agent`:
 
 ```yaml
 nonMasqueradeCIDRs:
@@ -96,7 +126,8 @@ Run the following command to add the config map to your cluster:
 kubectl create configmap ip-masq-agent --from-file=config --namespace=kube-system
 ```
 
-This will update a file located at `/etc/config/ip-masq-agent` which is periodically checked every `resyncInterval` and applied to the cluster node.
+This will update a file located at `/etc/config/ip-masq-agent` which is periodically checked
+every `resyncInterval` and applied to the cluster node.
 After the resync interval has expired, you should see the iptables rules reflect your changes:
 
 ```shell
@@ -111,7 +142,9 @@ RETURN     all  --  anywhere             10.0.0.0/8           /* ip-masq-agent:
 MASQUERADE  all  --  anywhere             anywhere             /* ip-masq-agent: outbound traffic should be subject to MASQUERADE (this match must come after cluster-local CIDR matches) */ ADDRTYPE match dst-type !LOCAL
 ```
 
-By default, the link local range (169.254.0.0/16) is also handled by the ip-masq agent, which sets up the appropriate iptables rules.  To have the ip-masq-agent ignore link local, you can set `masqLinkLocal` to true in the ConfigMap.
+By default, the link local range (169.254.0.0/16) is also handled by the ip-masq agent, which
+sets up the appropriate iptables rules. To have the ip-masq-agent ignore link local, you can
+set `masqLinkLocal` to true in the ConfigMap.
 
 ```yaml
 nonMasqueradeCIDRs: