From 406e741b7bfc7575221f4c84f0ef914cfe04a9d2 Mon Sep 17 00:00:00 2001 From: Carlos Eduardo Arango Gutierrez Date: Wed, 6 Sep 2023 09:38:04 +0200 Subject: [PATCH 1/2] tls.md: Add note Signed-off-by: Carlos Eduardo Arango Gutierrez --- docs/deployment/tls.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/deployment/tls.md b/docs/deployment/tls.md index d27eb5cb03..9ca984ed60 100644 --- a/docs/deployment/tls.md +++ b/docs/deployment/tls.md @@ -15,6 +15,10 @@ sort: 5 --- +> ***NOTE*** this section only applies if when disabling the NodeFeature API +> via the flag `-enable-nodefeature-api=false` on both nfd-master and +> nfd-worker. + NFD supports mutual TLS authentication between the nfd-master and nfd-worker instances. That is, nfd-worker and nfd-master both verify that the other end presents a valid certificate. From 5869d3f7938b851c8dd8673e324796c909608bfb Mon Sep 17 00:00:00 2001 From: Carlos Eduardo Arango Gutierrez Date: Wed, 6 Sep 2023 09:58:09 +0200 Subject: [PATCH 2/2] Update docs/deployment/tls.md Co-authored-by: Markus Lehtonen --- docs/deployment/tls.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/deployment/tls.md b/docs/deployment/tls.md index 9ca984ed60..72699e6037 100644 --- a/docs/deployment/tls.md +++ b/docs/deployment/tls.md @@ -15,9 +15,9 @@ sort: 5 --- -> ***NOTE*** this section only applies if when disabling the NodeFeature API -> via the flag `-enable-nodefeature-api=false` on both nfd-master and -> nfd-worker. +> ***NOTE*** this section only applies when the gRPC API is used, i.e. when the +> NodeFeature API is disabled via the `-enable-nodefeature-api=false` flag on +> both nfd-master and nfd-worker. NFD supports mutual TLS authentication between the nfd-master and nfd-worker instances. That is, nfd-worker and nfd-master both verify that the other end