kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #37018 from windsonsea/joinen 

Fix layout and add link anchors: kubeadm-join.md
pull/37028/head
Kubernetes Prow Robot 2022-09-25 23:29:44 -07:00 committed by GitHub
parent b49fda96a7 a7cfcfa331
commit 94ebe2f0ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 35 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
content/en/docs/reference/setup-tools/kubeadm/kubeadm-join.md
View File

@ -193,32 +193,39 @@ kubectl delete clusterrolebinding kubeadm:node-autoapprove-bootstrap
After that, `kubeadm join` will block until the admin has manually approved the CSR in flight: After that, `kubeadm join` will block until the admin has manually approved the CSR in flight:
1. Using `kubectl get csr`, you can see that the original CSR is in the Pending state. 1. Using `kubectl get csr`, you can see that the original CSR is in the Pending state.
```shell ```shell
kubectl get csr kubectl get csr
``` ```
The output is similar to this: The output is similar to this:
``` ```
NAME AGE REQUESTOR CONDITION NAME AGE REQUESTOR CONDITION
node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ 18s system:bootstrap:878f07 Pending node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ 18s system:bootstrap:878f07 Pending
``` ```
2. `kubectl certificate approve` allows the admin to approve CSR. This action tells a certificate signing controller to issue a certificate to the requestor with the attributes requested in the CSR. 2. `kubectl certificate approve` allows the admin to approve CSR.This action tells a certificate signing
controller to issue a certificate to the requestor with the attributes requested in the CSR.
```shell ```shell
kubectl certificate approve node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ kubectl certificate approve node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ
``` ```
The output is similar to this: The output is similar to this:
``` ```
certificatesigningrequest "node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ" approved certificatesigningrequest "node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ" approved
``` ```
3. This would change the CRS resource to Active state. 3. This would change the CRS resource to Active state.
```shell ```shell
kubectl get csr kubectl get csr
``` ```
The output is similar to this: The output is similar to this:
``` ```
NAME AGE REQUESTOR CONDITION NAME AGE REQUESTOR CONDITION
node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ 1m system:bootstrap:878f07 Approved,Issued node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ 1m system:bootstrap:878f07 Approved,Issued
@ -279,10 +286,10 @@ contain a `JoinConfiguration` structure. Mixing `--config` with others flags may
allowed in some cases. allowed in some cases.
The default configuration can be printed out using the The default configuration can be printed out using the
[kubeadm config print](/docs/reference/setup-tools/kubeadm/kubeadm-config/) command. [kubeadm config print](/docs/reference/setup-tools/kubeadm/kubeadm-config/#cmd-config-print) command.
If your configuration is not using the latest version it is **recommended** that you migrate using If your configuration is not using the latest version it is **recommended** that you migrate using
the [kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/) command. the [kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/#cmd-config-migrate) command.
For more information on the fields and usage of the configuration you can navigate to our For more information on the fields and usage of the configuration you can navigate to our
[API reference](/docs/reference/config-api/kubeadm-config.v1beta3/). [API reference](/docs/reference/config-api/kubeadm-config.v1beta3/).