Skip to content

Commit

Permalink
Update docs/advanced/peering/inter-cluster-authentication.md
Browse files Browse the repository at this point in the history
  • Loading branch information
frisso committed Dec 12, 2024
1 parent d5c25b6 commit 3f5e877
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/advanced/peering/inter-cluster-authentication.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
To enable the [**namespace offloading**](/usage/namespace-offloading) along with the [**resource reflection**](/usage/reflection) on a provider cluster (i.e., which _offers_ its resources), the consumer cluster (i.e., which _uses_ the resources provided by another cluster) should be able to interact with the K8s API server of the provider.
In fact, the consumer cluster must create some CRs (`NamespaceOffloading` and `ResourceSlice`) on the provider cluster, which are used to ask for the authorization to offload on a given namespace and to use a certain amount of resources.

The authentication process is the first step of this process and it looks like a handshake between the clusters, allowing the consumer to obtain a valid identity to interact with the other cluster (i.e. access to the Kubernetes API server).
The authentication procedure is the first step of this process and it looks like a handshake between the clusters, allowing the consumer to obtain a valid identity to interact with the other cluster (i.e. access to the Kubernetes API server).
**This identity grants only limited permissions on the Liqo-related resources** used during the offloading process.

The `liqoctl peer` command automatically sets up the network pairing and performs the authentication process.
Expand Down

0 comments on commit 3f5e877

Please sign in to comment.