-
Notifications
You must be signed in to change notification settings - Fork 31
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix docs typos #240
base: main
Are you sure you want to change the base?
Fix docs typos #240
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall looks nice
@@ -15,9 +15,9 @@ A Network Service is a collection of Connectivity, Security, and Observability f | |||
|
|||
Examples of Network Services would include: | |||
|
|||
- A simple distributed vL3 that allows the workloads to communicate via IP, optionally with DNS service for that vL3 | |||
- A simply distributed vL3 that allows the workloads to communicate via IP, optionally with DNS service for that vL3 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think here the original text doesn't have a typo, so this change should be reverted.
Maybe a better wording would be something like this:
A simple distributed vL3 network that allows
that the HTTPS message itself gets to the other side and the HTTPS response gets back to the workload. In the intervening process | ||
the ethernet headers, ip headers, and even the TCP connection may have been stripped away and replaced. The payload being tranported | ||
Traditional Service Meshes predominantly focus on L7 payloads like HTTPS. If a workload sends an HTTPS message, it only guarantees | ||
that the HTTPS message itself gets to the other side and the HTTPS response gets back to the workload. In the intervening process, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we need this comma?
I'm no an expert in English grammar so I may be wrong but it feels like it shouldn't be here.
@@ -102,7 +102,7 @@ having to expose the entire Runtime domain in which those workloads run: | |||
The recent [White House Executive Order on Cyber Security](https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/) says | |||
of Zero Trust: | |||
|
|||
> In essence, a Zero Trust Architecture allows users full access but only to the bare minimum they need to perform their jobs. If a device is compromised, zero trust can ensure that the damage is contained. | |||
> In essence, a Zero Trust Architecture allows users full access but only the bare minimum they need to perform their jobs. If a device is compromised, zero trust can ensure that damage is contained. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the original meaning is to the bare minimum [of functionality]
, so this to
was correct.
content/docs/concepts/k8s.md
Outdated
@@ -70,7 +70,7 @@ For each Network Service connected to a Pod, a new kernel interface will be inje | |||
assigned by the {{<color "#008A00" >}}Endpoint{{< /color >}} providing the Network Service, and optional routes | |||
indicating which IPs should be routed from the Pod to the Network Service. | |||
|
|||
In order to avoid IP collisions, NSM prevents the use of IP addresses or routes from Prefixes in use in the cluster. | |||
To avoid IP collisions, NSM prevents the use of IP addresses or routes from Prefixes in use in the cluster. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's the same meaning but I think the original wording sounds better.
@@ -225,7 +225,7 @@ For example, imagine that a {{<color "#0050EF" >}}Client{{< /color >}} is versio | |||
vulnerability. There is a plan to remediate to foo version v1.2 with the fix. The schedule for that is six weeks out. | |||
App foo needs to stay in deployment in the interim. | |||
|
|||
An expensive IPS can provide protection from the vulnerability. By keying off of labels provided by the {{<color "#0050EF" >}}Clients{{< /color >}} when | |||
An expensive IPS can protect from vulnerability. By keying off of labels provided by the {{<color "#0050EF" >}}Clients{{< /color >}} when |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it was correct
@@ -34,16 +34,16 @@ In short: Connectivity Domains are Strongly Coupled to Runtime Domains. | |||
A central tenant of [Cloud Native](https://github.com/cncf/toc/blob/main/DEFINITION.md) is Loose Coupling. In a Loosely Coupled system, the ability for each workload to receive service from alternative providers is preserved. | |||
|
|||
What Runtime Domain a workload is running in is a [non-sequitur](https://en.wikipedia.org/wiki/Non_sequitur_(literary_device)) to its communications needs. Workloads that are part of | |||
the same App need Connectivity between each other no matter where they are running. | |||
the same App need Connectivity with each other no matter where they are running. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it was correct
Traditional Service Meshes predominantly focus on L7 payloads like HTTPS. If a workload send an HTTPS message, they only guarantee | ||
that the HTTPS message itself gets to the other side and the HTTPS response gets back to the workload. In the intervening process | ||
the ethernet headers, ip headers, and even the TCP connection may have been stripped away and replaced. The payload being tranported | ||
Traditional Service Meshes predominantly focus on L7 payloads like HTTPS. If a workload sends an HTTPS message, it only guarantees |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
they only... - means Service Meshes
@@ -54,7 +54,7 @@ It's not just a problem of cluster to cluster communication. In the diagram bel | |||
|
|||
## The NSM Solution | |||
|
|||
Network Service Mesh allows individual workloads, where ever they are running to connect securely to Network Service(s) that | |||
Network Service Mesh allows individual workloads, where ever they are run, to connect securely to Network Service(s) that |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it should be like:
workloads, wherever they are run to
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure about run
/running
thing, but we either need to use commas on both sides of where ever they are running
part, or on neither side.
And I think here we need it on both sides.
@wazsone Could you please rebase this? |
be3bba0
to
512129b
Compare
Signed-off-by: Ruslan Bayandinov <[email protected]>
512129b
to
3497130
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@edwarnicke Could you have a look?
Signed-off-by: Ruslan Bayandinov [email protected]