vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

docs: reword two vale-flagged 'is not' phrasings in credentials.md

Browse source 
Microsoft.Contractions wants 'isn't' over 'is not'; reworded the
mTLS-leaf-exception sentence to match without changing its meaning.

Refs #4137
This commit is contained in:
atlas 2026-09-18 15:17:58 +02:00
commit 273b2895a1
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/swarm/credentials.md
View file

@ -57,8 +57,8 @@ strategy for every credential, including the mTLS leaf.
| `swarm/services/<clientId>/oidc/client` | authelia | the service process that presents the client secret, under the certificate of the host it runs on | must be stated |
| _(not in the store)_ a hive's mTLS leaf | the store's own PKI, or an operator placing it by hand | its own client, off disk — the exception above, because it's what makes every other row's pull possible | must be stated |
**An agent's mTLS leaf is in the store; a hive's is not, and the difference
is not an inconsistency.** The rule the exception protects is that nothing
**An agent's mTLS leaf is in the store; a hive's isn't, and the difference
isn't an inconsistency.** The rule the exception protects is that nothing
can fetch from the store the credential it would need in order to fetch. A
hive's leaf is that credential, so it can only come off disk. An agent's is
read by the _hive_, which already holds one — so publishing it costs nothing