@@ -155,7 +155,7 @@ the `kubernetes` DNS name, which resolves to a Service IP which in turn
155155will be routed to an apiserver.
156156
157157The recommended way to authenticate to the apiserver is with a
158- [ service account] ( /docs/tasks/configure-pod-container/configure-service-account/ ) credential. By kube-system, a pod
158+ [ service account] ( /docs/tasks/configure-pod-container/configure-service-account/ ) credential. By kube-system, a pod
159159is associated with a service account, and a credential (token) for that
160160service account is placed into the filesystem tree of each container in that pod,
161161at ` /var/run/secrets/kubernetes.io/serviceaccount/token ` .
@@ -169,17 +169,15 @@ at `/var/run/secrets/kubernetes.io/serviceaccount/namespace` in each container.
169169
170170From within a pod the recommended ways to connect to API are:
171171
172- - run a kubectl proxy as one of the containers in the pod, or as a background
173- process within a container. This proxies the
172+ - run ` kubectl proxy ` in a sidecar container in the pod, or as a background
173+ process within the container. This proxies the
174174 Kubernetes API to the localhost interface of the pod, so that other processes
175- in any container of the pod can access it. See this [ example of using kubectl proxy
176- in a pod] ( https://github.com/kubernetes/examples/tree/{{page.githubbranch}}/staging/kubectl-container/ ) .
175+ in any container of the pod can access it.
177176 - use the Go client library, and create a client using the ` rest.InClusterConfig() ` and ` kubernetes.NewForConfig() ` functions.
178177 They handle locating and authenticating to the apiserver. [ example] ( https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go )
179178
180179In each case, the credentials of the pod are used to communicate securely with the apiserver.
181180
182-
183181## Accessing services running on the cluster
184182
185183The previous section was about connecting the Kubernetes API server. This section is about
0 commit comments