Fix architecture doc

alculquicondor · alculquicondor · commit c88e18b907f1 · 2019-02-27T18:00:40.000-05:00
Network namespace is created before the pause container.

Signed-off-by: Aldo Culquicondor &lt;acondor@google.com&gt;
diff --git a/docs/architecture.md b/docs/architecture.md
@@ -9,8 +9,8 @@ The `cri` plugin uses containerd to manage the full container lifecycle and all
 
 Let's use an example to demonstrate how the `cri` plugin works for the case when Kubelet creates a single-container pod:
 * Kubelet calls the `cri` plugin, via the CRI runtime service API, to create a pod;
+* `cri` creates and configures the pod’s network namespace using CNI;
 * `cri` uses containerd internal to create and start a special [pause container](https://www.ianlewis.org/en/almighty-pause-container) (the sandbox container) and put that container inside the pod’s cgroups and namespace (steps omitted for brevity);
-* `cri` configures the pod’s network namespace using CNI;
 * Kubelet subsequently calls the `cri` plugin, via the CRI image service API, to pull the application container image;
 * `cri` further uses containerd to pull the image if the image is not present on the node;
 * Kubelet then calls `cri`, via the CRI runtime service API, to create and start the application container inside the pod using the pulled container image;
