docs/swarm/credentials.md: every host has at least one certificate
- Change 'Every host has one' to 'Every host has at least one' to clarify that a host may hold multiple mTLS client certificates.
This commit is contained in:
parent
972b80d7b8
commit
596e8f006f
1 changed files with 1 additions and 1 deletions
|
|
@ -23,7 +23,7 @@ on disk.** It has to be a file, and the reason is the whole asymmetry: the
|
||||||
certificate is what authenticates a principal to the store, so it's the one
|
certificate is what authenticates a principal to the store, so it's the one
|
||||||
credential that can't be fetched from the store. Something has to exist on
|
credential that can't be fetched from the store. Something has to exist on
|
||||||
disk before the first request, or there's nothing to make the request with.
|
disk before the first request, or there's nothing to make the request with.
|
||||||
Every host has one; its only power is to ask the store for the rest.
|
Every host has at least one; its only power is to ask the store for the rest.
|
||||||
`swarm-bao.nix:529-533` states the rule for the nix option that carries it:
|
`swarm-bao.nix:529-533` states the rule for the nix option that carries it:
|
||||||
this is _"the credential an operator places by hand"_, and _"a path, never a
|
this is _"the credential an operator places by hand"_, and _"a path, never a
|
||||||
value."_ A literal in a nix expression lands in the nix store —
|
value."_ A literal in a nix expression lands in the nix store —
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue