From f08108947d8500ea6bb89062e43c0a74949d35b7 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 16 May 2024 12:08:53 -0400 Subject: [PATCH] Update docs/reference-guides/rancher-security/rancher-security-best-practices.md --- .../rancher-security/rancher-security-best-practices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference-guides/rancher-security/rancher-security-best-practices.md b/docs/reference-guides/rancher-security/rancher-security-best-practices.md index ec6f170ecf3..00724d0005e 100644 --- a/docs/reference-guides/rancher-security/rancher-security-best-practices.md +++ b/docs/reference-guides/rancher-security/rancher-security-best-practices.md @@ -27,4 +27,4 @@ You should protect the following ports behind an [external load balancer](../../ - **K3s:** Port 6443, used by the Kubernetes API. - **RKE2:** Port 6443, used by the Kubernetes API, and port 9345, used for node registration. -These ports have SAN certificates which list nodes' public IP addresses. An attacker could use that information to gain unauthorized access or monitor activity on the cluster. Protecting these ports helps mitigate against nodes' public IP addresses being disclosed to potential attackers. +These ports have TSL SAN certificates which list nodes' public IP addresses. An attacker could use that information to gain unauthorized access or monitor activity on the cluster. Protecting these ports helps mitigate against nodes' public IP addresses being disclosed to potential attackers.