Commit Graph

87 Commits (8d74d997cbeb8b1210fae411c1ab1fee3d8477ac)

Author SHA1 Message Date
Duffie Cooley de9accfca3 Update service definition to bind to 127.0.0.1 (#9752)
Current service definition will result in an insecure kubelet per the example here:
https://medium.com/handy-tech/analysis-of-a-kubernetes-hack-backdooring-through-kubelet-823be5c3d67c

This change updates the kubelet configuration to bind to 127.0.0.1 so that the kubelet api does not allow unauthenticated access to the kubelet api.
2018-08-03 16:56:27 -07:00
chenhuan 1f22824a7b fix the command output (#9745)
fix the command output
2018-08-03 09:39:30 -07:00
Matt Rickard efd6f326f9 update owners of minikube doc (#9691) 2018-08-02 10:57:28 -07:00
Tobias Brunner 99f217bbc3 Add APPUiO to the list (#9647)
add APPUiO to the list of hosted, cloud and on-premises solutions.
2018-08-02 09:22:27 -07:00
Lubomir I. Ivanov 3098e3741e Kubeadm kubelet integration doc (#9652)
* kubeadm: Add a kubelet-kubeadm integration reference doc

* kubeadm: edits for the kubelet-kubeadm integration doc

* kubeadm: move the kubelet-kubeadm integration doc

* Apply edits to kubelet-integration.md

* Make kubelet-integration.md use a template

Also apply MD formatting fixes.

* Copyedit

* Address feedback on copyedit

* added a couple of typo fixes
2018-08-01 15:24:27 -07:00
chenhuan 05a559bf3e fix the command output (#9668)
I have verified on version v1.11.
2018-08-01 11:08:40 -07:00
Xiao An 03158f870d Disable excludes when installing kube packages (#9670)
We should not exclude kubernetes packages when installing them.
2018-08-01 10:47:39 -07:00
Xianglin Gao 1b444aff9f Add Alibaba Cloud in pick-right-solution.md (#9644)
Add Alibaba Cloud in pick-right-solution.md to give users more options.
2018-07-31 09:54:48 -07:00
chenhuan 4dbfd517ba fix the command output (#9636)
I have verified on version v1.10.0
[root@huan30:~]$ kubectl version
Client Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.0-1", GitCommit:"fc32d2f3698e36b93322a3465f63a14e9f0eaead", GitTreeState:"archive", BuildDate:"2018-06-13T04:29:49Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.0-1", GitCommit:"fc32d2f3698e36b93322a3465f63a14e9f0eaead", GitTreeState:"archive", BuildDate:"2018-06-13T04:22:05Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"linux/amd64"}
2018-07-31 09:53:41 -07:00
Lubomir I. Ivanov 4f2d88f215 kubeadm: fix broken link for ha-etcd doc (#9624) 2018-07-31 09:52:40 -07:00
CaoShuFeng 20ac7e501c fix description about kubeadm (#9646) 2018-07-27 19:00:57 -07:00
Andrew Chen c36098d4be change image assets to https (#9660)
* change image assets to https

* fix in docs

* fix remaining image links
2018-07-27 17:12:57 -07:00
Liz 88569b1ddc Keep packages back from package manager upgrades (#9509)
* Keep packages back from package manager upgrades

closes kubernetes/kubeadm#954

* copy edit revision
2018-07-27 10:40:58 -07:00
Luc Perkins 86006313e5 Update information on master node size on GKE/AWS (#9226)
* Update information on master node size on GKE/AWS

* clean up passive language
2018-07-25 15:47:56 -07:00
Lubomir I. Ivanov 3270da5099 kubeadm-install: modify the note about kubelet cgroup drivers (#9541) 2018-07-20 16:09:45 -07:00
Jari Kolehmainen 35362f764e Add Kontena Pharos as K8s solutions (#9166) 2018-07-19 16:45:52 -07:00
Kai Chen 84f9f16a33 Fix reference to install-kubeadm docs (#9573)
The install-kubeadm doc has recently been moved from tasks to setup. Fix the references and remove an incorrect redict.
2018-07-19 10:07:52 -07:00
makocchi 92baa2bc97 Fix dead links and apply template (#9476)
* fix dead links and apply template

* fix conflicts

* re-fix dead links

* Revert "re-fix dead links"

This reverts commit 3eb8292f45.
2018-07-18 16:37:46 -07:00
Luc Perkins c5f6b391a1 Change formatting of Stackpoint turnkey doc (#9493)
* Change formatting of Stackpoint turnkey doc

* s/Running/Run

* fix formatting glitch

* use template
2018-07-18 16:26:54 -07:00
makocchi b773f9f7cd apply templates/concept and fix code snippets (#9542) 2018-07-18 16:12:07 -07:00
Bob Killen 2c50177af5 Update admission controller links (#9386)
* update admission-controller links

(cherry picked from commit 37043991a61e5e6f4ac1c463b14c65430b192553)

* updated links found using greedier regex

(cherry picked from commit 45c6d4cf7430245a3b4e81eae245000beea88841)

* correct link in cn/docs/admin/authorization/_index.md

* fix incorrect changes introduced in eac3619

* undo update of cn content

* fix link

* fix admission webhook link
2018-07-18 15:54:21 -07:00
Jennifer Rondeau 1e554ef725 reorganize kubeadm files, part 1 (#9439)
* reorganize kubeadm files, part 1

* edit troubleshooting kubeadm for layout and content
2018-07-18 15:49:37 -07:00
makocchi e472159b5f apply templates/concept (#9539) 2018-07-18 15:25:24 -07:00
Yujun Zhang f9ce82e840 Add guide for getting token and discovery-token-ca-cert-hash (#9017)
* Add guide for getting token and discovery-token-ca-cert-hash

* Fix code snippet style
2018-07-18 15:16:01 -07:00
Luc Perkins bb818a9b41 Make macOS standard usage (#9422) 2018-07-18 15:12:16 -07:00
Bob Killen 78eafc7c22 update bootstrap-token links (#9456) 2018-07-18 15:08:40 -07:00
Kai Chen 179701e179 Fix doc references to Kubernetes services provided by AWS, Azure and GCE (#9508) 2018-07-18 14:57:43 -07:00
Oleg Atamanenko 78cdd215e4 Add kublr to list of solutions (#9544) 2018-07-18 14:28:33 -07:00
makocchi 7aa07a4602 apply templates/concept and fix code snippets (#9540) 2018-07-18 14:04:46 -07:00
Matheus Neder 4da4a6dcd7 Fix doc (#9564)
Added line break to: "KUBECONFIG=/etc/kubernetes/admin.conf [NEWLINE HERE] kubectl ..."; Also added export to variables declaration.
2018-07-18 11:45:19 -07:00
Jim Angel 08d06e02b3 very minor change to url syntax (#9543)
The URL for k/k included the text after ("repo"). This PR formats it to not include the text after.
2018-07-17 07:27:40 -07:00
spinside 624037a6cd Fixed broken Link to Salt setup documentation (#9264) 2018-07-17 00:29:38 -07:00
Stewart-YU 8cdb5ac998 fix some broken link in /docs/setup (#9256) 2018-07-17 00:28:38 -07:00
Sudhakar Rayavaram 7c7a993b66 Fixing the typo in the shell script (#9503)
Instead of using host variable, some undefined CONTROL_PLANE_IP is used. Fixed it
2018-07-13 03:53:26 -07:00
Kai Chen 05397e5fcb Fix references to docs for the turnkey Kubernetes services (#9442) 2018-07-12 13:44:27 -07:00
Bob Killen 09e5db0724 Update authentication links (#9452)
* update authentication links

* undo cn updates
2018-07-11 13:43:26 -07:00
dineshb-jnpr f9901e7a8f List JunperContrail CNI as Pod networking provider. (#9387)
This change is to list JuniperContrail/TungstenFabric as a provider
of Pod networking for a Kubernetes cluster.

Juniper's CNI solution has been available as a open source product
for couple of years now. It is a mature solution that has been
deployed in live clusters.
2018-07-10 00:20:06 -07:00
Timothy St. Clair 47a44ab31e Add an optional step to prepull images in 1.11+ (#9001) 2018-06-28 06:44:20 -07:00
Misty Linville 5f30e7d4c3 Release docs for Kubernetes 1.11 (#9171)
* Seperate priority and preemption (#8144)

* Doc about PID pressure condition. (#8211)

* Doc about PID pressure condition.

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

* "so" -> "too"

* Update version selector for 1.11

* StorageObjectInUseProtection is GA (#8291)

* Feature gate: StorageObjectInUseProtection is GA

Update feature gate reference for 1.11

* Trivial commit to re-trigger Netlify

* CRIContainerLogRotation is Beta in 1.11 (#8665)

* Seperate priority and preemption (#8144)

* CRIContainerLogRotation is Beta in 1.11

xref: kubernetes/kubernetes#64046

* Bring StorageObjectInUseProtection feature to GA (#8159)

* StorageObjectInUseProtection is GA (#8291)

* Feature gate: StorageObjectInUseProtection is GA

Update feature gate reference for 1.11

* Trivial commit to re-trigger Netlify

* Bring StorageObjectInUseProtection feature to GA

StorageObjectInUseProtection is Beta in K8s 1.10.

It's brought to GA in K8s 1.11.

* Fixed typo and added feature state tags.

* Remove KUBE_API_VERSIONS doc (#8292)

The support to the KUBER_API_VERSIONS environment variable is completely
dropped (no deprecation). This PR removes the related doc in
release-1.11.

xref: kubernetes/kubernetes#63165

* Remove InitialResources from admission controllers (#8293)

The feature (was experimental) is dropped in 1.11.

xref: kubernetes/kubernetes#58784

* Remove docs related to in-tree support to GPU (#8294)

* Remove docs related to in-tree support to GPU

The in-tree support to GPU is completely removed in release 1.11.
This PR removes the related docs in release-1.11 branch.

xref: kubernetes/kubernetes#61498

* Update content updated by PR to Hugo syntax

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* Update the doc about extra volume in kubeadm config (#8453)

Signed-off-by: Xianglin Gao <xianglin.gxl@alibaba-inc.com>

* Update CRD Subresources for 1.11 (#8519)

* coredns: update notes in administer-cluster/coredns.md (#8697)

CoreDNS is installed by default in 1.11.
Add notes on how to install kube-dns instead.

Update notes about CoreDNS->CoreDNS upgrades as in 1.11
the Corefile is retained.

Add example on upgrading from kube-dns to CoreDNS.

* kubeadm-alpha: CoreDNS related changes (#8727)

Update note about CoreDNS feature gate.

This change also updates a tab as a kubeadm sub-command
will change.

It looks for a new generated file:
generated/kubeadm_alpha_phase_addon_coredns.md
instead of:
generated/kubeadm_alpha_phase_addon_kube-dns.md

* Update cloud controller manager docs to beta 1.11 (#8756)

* Update cloud controller manager docs to beta 1.11

* Use Hugo shortcode for feature state

* kubeadm-upgrade: include new command `kubeadm upgrade diff` (#8617)

Also:
- Include note that this was added in 1.11.
- Modify the note about upgrade guidance.

* independent: update CoreDNS mentions for kubeadm (#8753)

Give CoreDNS instead of kube-dns examples in:
- docs/setup/independent/create-cluster-kubeadm.md
- docs/setup/independent/troubleshooting-kubeadm.md

* update 1.11 --server-print info (#8870)

* update 1.11 --server-print info

* Copyedit

* Mark ExpandPersistentVolumes feature to beta (#8778)

* Update version selector for 1.11

* Mark ExpandPersistentVolumes Beta

xref: kubernetes/kubernetes#64288

* fix shortcode, add placeholder files to fix deploy failures (#8874)

* declare ipvs ga (#8850)

* kubeadm: update info about CoreDNS in kubeadm-init.md (#8728)

Add info to install kube-dns instead of CoreDNS, as CoreDNS
is the default DNS server in 1.11.

Add notes that kubeadm config images can be used to list and pull
the required images in 1.11.

* kubeadm: update implementation-details.md about CoreDNS (#8829)

- Replace examples from kube-dns to CoreDNS
- Add notes about the CoreDNS feature gate status in 1.11
- Add note that the service name for CoreDNS is also
called `kube-dns`

* Update block device support for 1.11 (#8895)

* Update block device support for 1.11

* Copyedits

* Fix typo 'fiber channel' (#8957)

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* kubeadm-upgrade: add the 'node [config]' sub-command (#8960)

- Add includes for the generated pages
- Include placeholder generated pages

* kubeadm-init: update the example for the MasterConfiguration (#8958)

- include godocs link for MasterConfiguration
- include example MasterConfiguration
- add note that `kubeadm config print-default` can be used

* kubeadm-config: include new commands (#8862)

Add notes and includes for these new commands in 1.11:
- kubeadm config print-default
- kubeadm config migrate
- kubeadm config images list
- kubeadm config images pull

Include placeholder generated files for the above.

* administer-cluster/coredns: include more changes (#8985)

It was requested that for this page a couple of methods
should be outlined:
- manual installation for CoreDNS explained at the Kubernetes
section of the GitHub project for CoreDNS
- installation and upgrade via kubeadm

Make the above changes and also add a section "About CoreDNS".

This commit also lowercases a section title.

* Update CRD subresources doc for 1.11 (#8918)

* Add docs for volume expansion and online resizing (#8896)

* Add docs for volume expansion going beta

* Copyedit

* Address feedback

* Update exec plugin docs with TLS credentials (#8826)

* Update exec plugin docs with TLS credentials

kubernetes/kubernetes#61803 implements TLS client credential support for
1.11.

* Copyedit

* More copyedits for clarification

* Additional copyedit

* Change token->credential

* NodeRestriction admission prevents kubelet taint removal (#8911)

* dns-custom-namerserver: break down the page into mutliple sections (#8900)

* dns-custom-namerserver: break down the page into mutliple sections

This page is currently about kube-dns and is a bit outdated.
Introduce the heading `# Customizing kube-dns`.

Introduce a separate section about CoreDNS.

* Copyedits, fix headings for customizing DNS

Hey Lubomir,
I coypedited pretty heavily because this workflow is so much easier for docs and because I'm trying to help improve everything touching kubeadm as much as possible.

But there's one outstanding issue wrt headings and intro content: you can't add a heading 1 to a topic to do what you wanted to do. The page title in the front matter is rendered as a heading 1 and everything else has to start at heading 2. (We still need to doc this better in the docs contributing content, I know.)

Instead, I think we need to rewrite the top-of-page intro content to explain better the relationship between kube-dns and CoreDNS. I'm happy to write something, but I thought I'd push this commit first so you can see what I'm doing.

Hope it's all clear -- ping here or on Slack with any questions ~ Jennifer

* Interim fix for talking about CoreDNS

* Fix CoreDNS details

* PSP readOnly hostPath (#8898)

* Add documentation for crictl (#8880)

* Add documentation for crictl

* Copyedit

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* Final copyedit

* VolumeSubpathEnvExpansion alpha feature (#8835)

* Note that Heapster is deprecated (#8827)

* Note that Heapster is deprecated

This notes that Heapster is deprecated, and migrates the relevant
docs to talk about metrics-server or other solutions by default.

* Copyedits and improvements

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* Address feedback

* fix shortcode to troubleshoot deploy (#9057)

* update dynamic kubelet config docs for v1.11 (#8766)

* update dynamic kubelet config docs for v1.11

* Substantial copyedit

* Address feedback

* Reference doc for kubeadm (release-1.11) (#9044)

* Reference doc for kubeadm (release-1.11)

* fix shortcode to troubleshoot deploy (#9057)

* Reference doc for kube-components (release-1.11) (#9045)

* Reference doc for kube-components (release-1.11)

* Update cloud-controller-manager.md

* fix shortcode to troubleshoot deploy (#9057)

* Documentation on lowercasing kubeadm init apiserver SANs (#9059)

* Documentation on lowercasing kubeadm init apiserver SANs

* fix shortcode to troubleshoot deploy (#9057)

* Clarification in dynamic Kubelet config doc (#9061)

* Promote sysctls to Beta (#8804)

* Promote sysctls to Beta

* Copyedits

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* Review comments

* Address feedback

* More feedback

* kubectl reference docs for 1.11 (#9080)

* Update Kubernetes API 1.11 ref docs (#8977)

* Update v1alpha1 to v1beta1.

* Adjust left nav for 1.11 ref docs.

* Trim list of old ref docs.

* Update Federation API ref docs for 1.11. (#9064)

* Update Federation API ref docs for 1.11.

* Add titles.

* Update definitions.html

* CRD versioning Public Documentation (#8834)

* CRD versioning Public Documentation

* Copyedit

Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>

* Address feedback

* More rewrites

* Address feedback

* Update main CRD page in light of versioning

* Reorg CRD docs

* Further reorg

* Tweak title

* CSI documentation update for raw block volume support (#8927)

* CSI documetation update for raw block volume support

* minor edits for "CSI raw block volume support"

Some small grammar and style nits.

* minor CSIBlockVolume edits

* Update kubectl component ref page for 1.11. (#9094)

* Update kubectl component ref page for 1.11.

* Add title. Replace stevepe with username.

* crd versioning doc: fix nits (#9142)

* Update `DynamicKubeletConfig` feature to beta (#9110)

xref: kubernetes/kubernetes#64275

* Documentation for dynamic volume limits based on node type (#8871)

* add cos for storage limits

* Update docs specific for aws and gce

* fix some minor things

* Update storage-limits.md

* Add k8s version to feature-state shortcode

* The Doc update for ScheduleDaemonSetPods (#8842)

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

* Update docs related to PersistentVolumeLabel admission control (#9109)

The said admission controller is disabled by default in 1.11
(kubernetes/kubernetes#64326) and scheduled to be removed in future
release.

* client exec auth: updates for 1.11 (#9154)

* Updates HA kubeadm docs (#9066)

* Updates HA kubeadm docs

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

* kubeadm HA - Add stacked control plane steps

* ssh instructions and some typos in the bash scripts

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

* Fix typos and copypasta errors

* Fix rebase issues

* Integrate more changes

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

* copyedits, layout and formatting fixes

* final copyedits

* Adds a sanity check for load balancer connection

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

* formatting fixes, copyedits

* fix typos, formatting

* Document the Pod Ready++ feature (#9180)

Closes: #9107
Xref: kubernetes/kubernetes#64057

* Mention 'KubeletPluginsWatcher' feature (#9177)

* Mention 'KubeletPluginsWatcher' feature

This feature is more developers oriented than users oriented, so simply
mention it in the feature gate should be fine.
In future, when the design doc is migrated from Google doc to the
kubernetes/community repo, we can add links to it for users who want to
dig deeper.

Closes: #9108
Xref: kubernetes/kubernetes#63328, kubernetes/kubernetes#64605

* Copyedit

* Amend dynamic volume list docs (#9181)

The dynamic volume list feature has been documented but the feature gate
related was not there yet.

Closes: #9105

* Document for service account projection (#9182)

This adds docs for the service account projection feature.

Xref: kubernetes/kubernetes#63819, kubernetes/community#1973
Closes: #9102

* Update pod priority and preemption user docs (#9172)

* Update pod priority and preemption user docs

* Copyedit

* Documentation on setting node name with Kubeadm (#8925)

* Documentation on setting node name with Kubeadm

* copyedit

* Add kubeadm upgrade docs for 1.11 (#9089)

* Add kubeadm upgrade docs for 1.11

* Initial docs review feedback

* Add 1-11 to outline

* Fix formatting on tab blocks

* Move file to correct location

* Add `kubeadm upgrade node config` step

* Overzealous ediffing

* copyedit, fix lists and headings

* clarify --force flag for fixing bad state

* Get TOML ready for 1.11 release

* Blog post for 1.11 release (#9254)

* Blog post for 1.11 release

* Update 2018-06-26-kubernetes-1.11-release-announcement.md

* Update 2018-06-26-kubernetes-1.11-release-announcement.md

* Update 2018-06-26-kubernetes-1.11-release-announcement.md
2018-06-27 15:26:18 -07:00
Benjamin Priestman 0d977e4d1d Adding reference to kvm2 (#9223)
kvm is now deprecated in Minikube.
Adding link to kvm2 driver.
2018-06-26 15:08:53 -07:00
Qiming a3415f6228 Consolidate YAML files [part-2] (#9236)
Changes that will help upcoming consolidation work:

- Add variable `githubWebsiteRaw` to config.toml to facilitate building
  links to raw YAML files
- Revise `codenew` shortcode to generate links to raw YAML files instead
  of github.com file view;
- Rename `artifacts` directory to `examples` to better reflect its usage;

Accompanied changes as show cases:

- Moved `deployment.yaml`, `deployment-update.yaml` and
  `deployment-scale.yaml` to the new `examples/application` subdirectory;
- Removed duplicate instances of the above YAML files in other
  directories;
- Update example_test.go to test the relocated YAML files and removed
  testing for files that no longer needed.
2018-06-26 09:34:52 -07:00
Lubomir I. Ivanov bf23c87e52 kubeadm-setup: add page about control plane flags (#9067)
This page adds instructions on how to use the kubeadm config
to pass flags to control plane components.

The provided examples are pretty basic. Later this can be expanded with
actual user stories.
2018-06-25 13:10:22 -07:00
Stewart-YU 5351252ce5 Update create-cluster-kubeadm.md (#9207)
smaller fix about ` create cluster using kubeadm` docs
2018-06-25 12:30:20 -07:00
Mario Kleinsasser 9ca357177d Add missing "Set up master Load Balancer" heading (#9219)
This heading is missing in the 1.10 documentations which makes it hard to find the needed information because the anchor  `setting up a master load balancer` points to nowhere. This was working in the 1.19 documentation and it was really useful.
2018-06-25 06:32:03 -07:00
Stewart-YU 909c550e8d Update high-availability.md (#9198)
fix bad  command line
2018-06-25 06:30:02 -07:00
Takeaki Matsumoto 7ff7b27be8 Update etcd config description of kubeadm HA doc (#9178)
* Update etcd config description of kubeadm HA doc

- Fix url from http to https
- Add etcd-listen-ip description

* Edit for clarity and list markup

* More minor edits
2018-06-22 06:58:04 -07:00
Steve Perry 7a780bef1e Remove or move topics under docs/admin. (#9140) 2018-06-19 11:37:32 -07:00
Nicolaj Græsholt 938116efd7 Update scratch.md (#9075)
`base64` generates 76-character chunks of text, delimited by a space character. the `=+/` characters are removed, so on the (uniformly random) offchance that 44 characters are removed, the last `dd` will read a whitespace, and the token will include a whitespace, which "usually" isn't defined as an "alphanumeric character." Removing the space character as well, would mean that 142 of the characters would have to be a `=+/[:space:]`, before the token becomes shorter.
2018-06-17 06:30:29 -07:00
Guðlaugur Stefán Egilsson 4e9a3590e7 Update high-availability.md (#8752)
Cannot copy any apiserver* keys and certs, as they are generated on startup. If not, it results in an error from kubeadm

```
certificate apiserver is not signed by corresponding CA
```
2018-06-15 09:54:28 -07:00
Steve Perry 8558241ef4 Move turnkey topics to setup/turnkey. (#8937)
* Move turnkey topics to setup/turnkey.

* Add folder.
2018-06-14 11:20:28 -07:00