Commit Graph

1028 Commits (0135d3642ba14f568ea6de35e9fa232efcfa1fc9)

Author SHA1 Message Date
Mark Rossetti 9b6876726c Moving Windows security info to new page
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-02-24 15:32:42 -08:00
Jim Bugwadia 9e10d98d07 add options
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-02-23 17:58:26 -08:00
Lubomir I. Ivanov 806518df13 kubeadm: update references of "master" label/taint for 1.24
In 1.24 kubeadm will:
- stop using the "master" label on CP nodes.
- start tainting CP nodes with both "master" and "control-plane" taints.

In 1.25 the "master" taint will be removed.

Adjust references of the "master" label/taint to the above.
2022-02-23 19:22:50 +02:00
Mark Rossetti f217a5415e Moving windows resource management to seperate page
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-02-22 13:17:04 -08:00
Kubernetes Prow Robot e021e42245
Merge pull request #31667 from mk46/remove_kubenet
Removed kubenet reference from docs
2022-02-22 07:31:46 -08:00
Manish Kumar 7fc89637f3 Removed kubenet reference 2022-02-22 18:59:32 +05:30
Kubernetes Prow Robot 683fc53b84
Merge pull request #31687 from neolit123/1.24-update-legacy-kubelet-cm-refs
kubeadm: update legacy kubelet config map information and document feature gates
2022-02-22 02:49:46 -08:00
PranshuSrivastava 8b1b8a4f80 updated the container-runtime page to include info about dockershim deprecation. 2022-02-22 12:21:36 +05:30
Nate W e8b19637df Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-21 10:36:03 -08:00
Mark Rossetti 1b1dd7d9ae
Adding a warning to Windows docs for NodePort service issues on WS2022 (#31759)
* Adding a warning to Windows docs for NodePort service issues on WS2022

Signed-off-by: Mark Rossetti <marosset@microsoft.com>

* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md

Co-authored-by: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>

* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2022-02-20 23:54:11 -08:00
Lubomir I. Ivanov 26f6a21308 kubeadm: remove mentions of the the legacy kubelet-config-x.yy
The default kubelet configuration ConfigMap that kubeadm manages
is "kubelet-config" instead of "kubelet-config-x.yy" (where x.yy
is the Kubernetes version) in 1.24.

Cleanup references to the legacy naming in kubeadm documentation.

Generated contents in content/en/docs/reference/* are not updated.
2022-02-17 18:27:48 +02:00
Nate W 8b9e77db12 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-15 08:28:12 -08:00
Paul "TBBle" Hampson b6045d6160
Update link to TECHNET article about Windows NAT (#31702)
* Update link to TECHNET article about Windows NAT

* Fix inconsistent capitalisation of win-overlay

No other instance of win-overlay is capitalised, and win-bridge in the same place on the previous row is not capitalised either.
2022-02-11 13:59:47 -08:00
Nate W f9dda7bc96 Merge remote-tracking branch 'upstream/main' into dev-1.24 2022-02-07 11:03:19 -08:00
Lubomir I. Ivanov 75a33b2650 kubeadm: add missing guide for "kubeconfig user"
The command "kubeadm kubeconfig user" is missing
some examples and more details on why it is needed.

- Add a new section "Generating kubeconfig files
for additional users" under the kubeadm-certs page.
- Link to this section from the kubeadm-kubeconfig reference page.
- Link to this section from the create-cluster-kubeadm page.
2022-02-02 21:41:40 +02:00
jeremy-morren 095c52a590
Fix powershell install script
Setting powershell variables container only numbers does not work with multiple periods (at least on Powershell 5.1). Using quotes is necessary.
2022-01-31 22:15:40 -04:00
Kubernetes Prow Robot dec940e537
Merge pull request #31328 from sftim/20220113_clarify_example_linux_command_line_cgroup_v2
Clarify example for setting Linux command line
2022-01-31 16:59:53 -08:00
Kubernetes Prow Robot 5ccbcd89be
Merge pull request #31372 from sftim/20220117_tidy_kubeadm_ha
Tidy kubeadm HA guide
2022-01-31 16:57:52 -08:00
Kubernetes Prow Robot 5e35828808
Merge pull request #31309 from neolit123/1.24-update-kubeadm-docs-for-dockershim
kubeadm: adapt docs for 1.24 and dockershim removal
2022-01-25 08:44:32 -08:00
Lubomir I. Ivanov 3184c227c7 kubeadm: adapt docs for 1.24 and dockershim removal
Touch the following files:
- Implementation details: remove docker specifics, which is changing
in 1.24
- Create cluster: small language cleanup, remove note about 1.24
- Install kubeadm: Include two up-to-date tables for Linux / Windows
with known endpoints. Include cri-dockerd.
- Kubelet integration: (side cleanup) use "container runtime" instead of
"CRI runtime" (which is incorrect). Mention that only updating
"--container-runtime-endpoint=.." is required if the user wishes
to override the CR on a certain host. Dockershim->CR-foo migration
guides would make the "--container-runtime=remote" flag explicit
and we want to remove it at some point.
- Troubleshooting kubeadm: Remove some instances of Docker troubleshooting
that imply docker as default CR, or talk about old Docker versions.
Be more generic about container runtimes.
- Adding Windows nodes: move the containerd tab before the Docker
tab, as containerd is now the default. Remove note about being explicit
about --cri-socket. Add note that crictl is required for both
Docker and containerd. Add note that cri-dockerd is required if
the user wants to use Docker EE on Windows.
2022-01-25 18:35:58 +02:00
Shubham Kuchhal 15bc0c7621 Improvement: Updated FEATURE STATE of PodSecurityAdmission. 2022-01-19 18:04:52 +05:30
Kubernetes Prow Robot ebceaf1343
Merge pull request #30862 from sftim/20211211_marke_dockershim_deprecated_add_mcr
Mark dockershim deprecated / add MCR
2022-01-18 14:13:03 -08:00
Tim Bannister 843ff5a90b Fix external etcd setup guide 2022-01-18 13:32:57 +00:00
Tim Bannister acea84ae3f Tweak wording around reporting issues
The style guide recommends against using “we” in documentation.
2022-01-18 13:32:57 +00:00
Tim Bannister 63f32f4908 Tidy prerequisites
Use tabs to make the comparison visually straighforward, and also to
clearly indicate that the reader has a choice to make.
2022-01-18 13:32:57 +00:00
Tim Bannister a8112a6d8a Clarify advice about etcd private key
"Quote" can mislead; skip should be more obvious.
2022-01-17 21:55:08 +00:00
Tim Bannister f1dda969c4 Add security advice about SSH agent forwarding
In the case of a malicious node, or malicious superuser with access to
the same node, SSH agent forwarding is a risk. Call that out.
2022-01-17 21:41:01 +00:00
Tim Bannister 000536e52c Fix Markdown formatting 2022-01-17 21:41:01 +00:00
Tim Bannister 62905feb8e Don't recommend any CNI plugin for kubeadm clusters 2022-01-17 21:32:12 +00:00
Kubernetes Prow Robot d9edcc33ff
Merge pull request #31325 from Darshnadas/weave
Removed weave url
2022-01-17 12:52:49 -08:00
Darshna Das 8a5c44c874 Added changes 2022-01-16 20:47:37 +05:30
Tim Bannister ef6d83b5dd Clarify example for setting Linux command line 2022-01-13 17:43:34 +00:00
Darshna Das c5881a11b8 Removed weave url 2022-01-13 19:56:57 +05:30
Lubomir I. Ivanov 0acf0e98ee kubeadm: update HA etcd guide for clarity and fix an issue
There were a couple of reported problems with this guide:

- The introductory paragraph talks about single control plane nodes
and does not mention the different options for HA etcd. Clear the
language to reduce the confusion and cross-link to the ha-topology
page.
- The hostname / IP detection in kubeadm can end
up with values not suitable for the certificates that kubeadm
generates for all etcd instances. Ensure that the hostnames / IPs
are pinned by the user in the example script.

Side cleanup related to the dockershim removal:
- Use containerd in the setup example and don't mention docker as
a requirement.
2022-01-12 16:24:26 +02:00
Kubernetes Prow Robot bef1768ff1
Merge pull request #31207 from tengqm/tune-config-links
Tune config API links
2022-01-05 08:42:25 -08:00
Qiming Teng 6be193b4de Tune config API links
We favor links to generated docs targetting non-developer audiences over
golang specifics.
2022-01-05 13:42:32 +08:00
Peri Thompson 60824acdd2
Update windows pause image
Signed-off-by: Peri Thompson <perit@vmware.com>
2022-01-04 09:40:47 +00:00
Tim Bannister 65e92a8f14
Add Docker Engine as container runtime
Mention that the support via Dockershim is deprecated.

Co-Authored-By: Rey Lejano <rlejano@gmail.com>
2021-12-16 16:09:29 +00:00
Mark Rossetti f19ded7dc0
Apply suggestions from code review
Using v{{< skew currentVersion>}} in  windows docs

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-12-15 09:20:54 -08:00
Mark Rossetti e774004131 Updating intro-windows-in-k8s for 1.23
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2021-12-14 13:11:54 -08:00
Kubernetes Prow Robot 8577231a24
Merge pull request #30716 from dgengtek/main
kube-etcd certificate requires additional SAN's
2021-12-13 16:16:02 -08:00
Kubernetes Prow Robot 632bafa331
Merge pull request #30836 from neolit123/1.24-fix-bug-kubeadm-patches-config
kubeadm: fix wrong config example for customization with patches
2021-12-12 14:29:57 -08:00
Lubomir I. Ivanov 2295e0c1e2 kubeadm: fix wrong config example for customization with patches
The patches sub-structure is top level and not under nodeRegistration.
2021-12-12 23:06:27 +02:00
Tim Bannister 6d9fec4175 Update third party list of container runtimes 2021-12-11 17:06:51 +00:00
Ayushman Mishra 2042d8966d changes
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
2021-12-11 21:53:07 +05:30
Ayushman Mishra 5ae6af819b Changed Docker EE to MCR in Windows
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
2021-12-11 02:34:29 +05:30
dgengtek bd6dd9b58e kube-etcd certificate requires additional SAN's 2021-12-02 17:33:50 +01:00
Jesse Butler 018f9d05a2 Merge remote-tracking branch 'upstream/main' into dev-1.23 2021-12-01 12:23:10 -05:00
Kubernetes Prow Robot b1a73567ec
Merge pull request #30686 from chetak123/flexVolume_deprecated
Mark FlexVolume deprecated
2021-12-01 05:39:14 -08:00
Ayushman Mishra 0cbedcfeed changes made
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>

changes

Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
2021-12-01 18:27:48 +05:30
SataQiu 344aa15779 kubeadm: add instructions about rebalancing CoreDNS Pods after joining more nodes 2021-12-01 18:14:12 +08:00
Kubernetes Prow Robot 0660f9a376
Merge pull request #30436 from ravisantoshgudimetla/windows-pods
[docs][windows]: Pod OS field update
2021-11-30 13:59:01 -08:00
ravisantoshgudimetla 89e744666c [docs][windows]: Pod OS field update
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-11-30 16:52:44 -05:00
Ayushman Mishra 9bef88f008 Edited FlexVolume deprecated
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
2021-11-30 09:18:11 +05:30
Bridget Kromhout 014f73f326
Clarifications for dual-stack going GA in 1.23.
Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
2021-11-29 15:41:43 -06:00
Madhav Budhiraja 2ff1bffa3d Remove extra bracket 2021-11-23 23:56:41 +05:30
Jason Kim (Jun Chul Kim) e0fdee6b0d
Update certificates.md
[kubelet has client and server certificates](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#client-and-serving-certificates).

But this page only mentions kubelet client certificate. I linked to the [page](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#client-and-serving-certificates) because I couldn't find the doc about what are those `certain features`. Please suggest a better link if there are any.
2021-11-22 15:19:13 +09:00
Bridget Kromhout a209e3d65e Dual-stack to stable in 1.23
Co-Authored-By: Tim Bannister <tim@scalefactory.com>
2021-11-20 16:53:27 +00:00
Yongzhi Pan a5b097977f Fix misquote. 2021-11-20 09:35:31 +08:00
Falimonda 8815230e45
Fixes grammatical errors in Kubespray setup doc (#29460)
* Fixes grammatical errors

* Removes period as recommended in review

* Update content/en/docs/setup/production-environment/tools/kubespray.md

Co-authored-by: Rey Lejano <rlejano@gmail.com>

Co-authored-by: Rey Lejano <rlejano@gmail.com>
2021-11-16 19:07:53 -08:00
Kubernetes Prow Robot 6320991d0a
Merge pull request #30373 from Babapool/crictlv
Updated circtl version to v1.22.0 from v1.17.0 in install kubeadm doc #30349
2021-11-14 18:08:48 -08:00
sandipanpanda 7a513e6dee
Fix broken anchor link of #type-nodeport in service.md (#30388)
* Fix broken anchor link of #type-nodeport in service.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in overview.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in ingress.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in troubleshooting-kubeadm.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in connecting-frontend-backend.md

* Update anchor link from #nodeport to #type-nodeport

Update anchor link from #nodeport to #type-nodeport in source-ip.md
2021-11-12 08:02:28 -08:00
Vitthal Sai f200e6d223 Updated circtl version to v1.22.0 from v1.17.0 in install kubeadm doc 2021-11-06 11:56:43 +05:30
Kubernetes Prow Robot 0c04e2c54c
Merge pull request #30146 from neolit123/1.23-update-ts-guide-for-cert-rotation
kubeadm/TS guide: fix a misleading step about cert rotation
2021-11-03 18:28:03 -07:00
Kubernetes Prow Robot 5862d9155e
Merge pull request #30147 from chirangaalwis/patch-5
Notify deletion of Kubelet Bootstrap Token
2021-11-03 17:56:03 -07:00
Kubernetes Prow Robot bc785b9dbc
Merge pull request #30256 from marosset/windows-runasnonroot-updates
Updating runAsNonRoot support for Windows
2021-10-29 14:37:10 -07:00
Anatoliy Serputov cb60b1dd00 Fix: typo in install-kubeadm.md 2021-10-27 19:57:28 -04:00
Kubernetes Prow Robot 62f62f3828
Merge pull request #30230 from neolit123/1.23-fix-link-to-custom-images
kubeadm: fix link to kubeadm-init#custom-images
2021-10-27 16:29:03 -07:00
Kubernetes Prow Robot 01a8f26250
Merge pull request #30234 from calvin0327/improvement-install-kubeadm
Improvement for install-kubeadm
2021-10-27 16:07:02 -07:00
calvin 7780084390 improvement for install-kubeadm. 2021-10-27 10:07:49 +08:00
Mark Rossetti bf6ab9519d Remove outdated section stating Windows does not support CPU limits
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2021-10-26 14:35:13 -07:00
Mark Rossetti afbb133e9f Updating runAsNonRoot support for Windows
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2021-10-26 13:25:31 -07:00
Lubomir I. Ivanov b8d0c07ba8 kubeadm: fix link to kubeadm-init#custom-images
Add missing / prefix otherwise the link to
"custom-images" points towards a 404.
2021-10-26 00:20:56 +03:00
Lubomir I. Ivanov 0162445d1e kubeadm: use git.k8s.io to link to kubeadm repo
With the kubeadm repository changing branch from
master -> main, use the "branchless" URL:
  git.k8s.io/kubeadm
when linking to the HA guide.
2021-10-26 00:09:19 +03:00
Kubernetes Prow Robot 66d9eb730d
Merge pull request #29946 from neolit123/1.23-update-docs-about-image-repository
kubeadm: add more details about air-gapped and custom images
2021-10-21 22:42:37 -07:00
Chiranga Alwis 40f5256924
Notify deletion of Kubelet bootstrap token
Kubeadm deletes the file `/etc/kubernetes/bootstrap-kubelet.conf` as per https://github.com/kubernetes/kubernetes/pull/80676
2021-10-20 02:20:40 +05:30
Lubomir I. Ivanov 6ea5318972 kubeadm/TS guide: fix a misleading step about cert rotation
The "kubelet-finalize" step does not work on worker nodes,
because commonly they do not have the cluster CA key and all
"init" phases have a pre-step to check for the existence of
the CA key, designating the cluster as one that uses external CA
or not.

Changing this behavior is complicated in kubeadm, thus manually
instruct the user how to do edit the file and to restart the kubelet.

This is already what we do in:
https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#check-certificate-expiration
2021-10-19 20:24:48 +03:00
Ayushman Mishra 8387af37e8 changed links from beta2-beta3
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
2021-10-13 10:34:55 +05:30
Lubomir I. Ivanov a7badaddeb kubeadm: add more details about air-gapped and custom images
- Include more details about custom image repositories, such
as making sure that paths in custom repositories comply with
kubeadm execution.
- Move the section "without internet connection" above
the section about custom images.
- Link the "create-cluster-kubeadm.md" guide these new section
as a pre-req step for nodes.
2021-10-11 20:45:00 +03:00
Kubernetes Prow Robot b7a6f0e532
Merge pull request #29853 from EricWvi/main
modify kubeadm config example about joining a node to dual-stack cluster
2021-10-09 13:24:35 -07:00
Chris Negus 2a84b55424
Add file paths to keys and certificates (#28367)
* Adding diagrams to certificates page

* Cropped diagrams

* Changed diagrams to tree output

* Formatting fix

* Fixed text block markup and spacing

* Changed tree view of files to full-path view

* Changed order of two cert files

* Broke up links into separate sentences, per review comment

* More changes per review comments
2021-10-07 17:41:50 -07:00
Pulkit Singh cb9e9352a0
Update intro-windows-in-kubernetes.md 2021-10-07 12:44:21 +05:30
Tim Bannister 7f88af518e
Update compatibility statement for TerminationGracePeriod
Co-authored-by: Mark Rossetti <marosset@microsoft.com>
2021-09-30 18:09:26 +01:00
EricWvi 4033f3480b modify kubeadm config example about joining a node to dual-stack cluster 2021-09-29 21:39:10 +08:00
Tim Bannister 640ca8aec8 Tidy Windows node introduction
Partial tidying to bring this page more in line with the Kubernetes
documentation style guide.

Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2021-09-29 11:23:51 +01:00
Jimmy McCrory e9b951239f Fix typo in control-plane-flags
`ClusteConfiguration` should be `ClusterConfiguration`
2021-09-22 19:46:44 -07:00
Pushkar Joglekar 7655d8d778 Add a ports and protocols reference page
- Refactored ports and protocols info under docs/reference
- Updated the ports for kube-scheduler and kube-controller based on
  current state

Co-authored-by: Tim Bannister <tim@scalefactory.com>
2021-09-15 13:19:04 -07:00
Kubernetes Prow Robot 4b18015cd3
Merge pull request #29628 from yechs/patch-1
Fix markdown link rendering & move image kubeadm-stacked-color.png to this repo
2021-09-09 01:00:12 -07:00
Ye Shu 826fb8dc90
Change reference to kubeadm-stacked-color.png
Since the image is now moved to this repo, I'm changing all
references to the image to have them point to the local one.
2021-09-08 10:35:23 -04:00
Ye Shu a206af45bf Ends img tag and revert changes to links
- Moves the image to this repo
- Adds <img/> to end the tag
- Revert changes made to markdown links
2021-09-07 17:48:00 +00:00
Ye Shu 8d3d617d55
Fix not rendered markdown link in docs
The markdown links are not rendered properly on [the website](https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/).
I replace them with html anchor tags to fix this weird issue.
2021-09-06 23:00:28 +08:00
Qiming Teng c7ed438072 Fix kubeadm-config links
This PR fixes the links for kubeadm-config APIs.
2021-09-05 09:59:05 +08:00
Kubernetes Prow Robot 2948ff2fa3
Merge pull request #29127 from tengqm/amend-kubeadm-join
Amend kubeadm join doc for node preparation
2021-09-02 06:40:59 -07:00
Qiming Teng 87e92d4893
Update content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
Co-authored-by: Rey Lejano <rlejano@gmail.com>
2021-09-02 14:55:24 +08:00
Kubernetes Prow Robot fcff108a23
Merge pull request #29226 from tmeralus/patch-1
fixed small typo
2021-08-24 21:10:39 -07:00
Tedley Meralus 964ab4a274
changed uprate to promote
changed word to better clarify actions used in kubernetes cluster
2021-08-24 23:57:00 -04:00
Kubernetes Prow Robot 9b17097b45
Merge pull request #28451 from vaibhav2107/learning-env
Update in docs/setup/learning-environment/_index.md
2021-08-24 10:43:15 -07:00
Qiming Teng 735701e1cc Amend kubeadm join doc for node preparation
We need to clarify that worker nodes need to be prepared in nearly the
same way as control plane nodes.
2021-08-11 20:10:11 +08:00
Tedley Meralus de80496fcf
fixed small typo
changed uprate to upgrade on line 12
2021-08-04 17:11:28 -04:00
Victor Palade 61ac44bb11 Merge master into dev-1.22 to keep in sync 2021-08-04 19:43:06 +02:00