whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[zh] synchronize translate kubelet-integration.md (#31096)

Browse Source 
* [zh] synchronize translate kubelet-integration.md

* [zh] update kubelet-integration.md review question
This commit is contained in:
帅进超
2021-12-29 15:07:35 +08:00
committed by GitHub
parent 1d1c22e817
commit 13bf9ad8db
1 changed files with 21 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+21 -13
View File
@@ -257,34 +257,42 @@ When you run `kubeadm join`, kubeadm uses the Bootstrap Token credential to perf
a TLS bootstrap, which fetches the credential needed to download the
`kubelet-config-1.X` ConfigMap and writes it to `/var/lib/kubelet/config.yaml`. The dynamic
environment file is generated in exactly the same way as `kubeadm init`.
-->
### 当使用 `kubeadm join`时的工作流程
当运行 `kubeadm join` 时，kubeadm 使用 Bootstrap Token 证书执行 TLS 引导，该引导会获取一份证书，
该证书需要下载 `kubelet-config-1.X` ConfigMap 并把它写入 `/var/lib/kubelet/config.yaml` 中。
动态环境文件的生成方式恰好与 `kubeadm init` 完全相同。
<!--
Next, `kubeadm` runs the following two commands to load the new configuration into the kubelet:
-->
接下来，`kubeadm` 运行以下两个命令将新配置加载到 kubelet 中：
```bash
systemctl daemon-reload && systemctl restart kubelet
```
<!--
After the kubelet loads the new configuration, kubeadm writes the
`/etc/kubernetes/bootstrap-kubelet.conf` KubeConfig file, which contains a CA certificate and Bootstrap
Token. These are used by the kubelet to perform the TLS Bootstrap and obtain a unique
credential, which is stored in `/etc/kubernetes/kubelet.conf`. When this file is written, the kubelet
has finished performing the TLS Bootstrap.
credential, which is stored in `/etc/kubernetes/kubelet.conf`.
-->
### 当使用 `kubeadm join`时的工作流程
当运行 `kubeadm join` 时，kubeadm 使用 Bootstrap Token 证书执行 TLS 引导，该引导会获取一份证书，该证书需要下载 `kubelet-config-1.X` ConfigMap 并把它写入 `/var/lib/kubelet/config.yaml` 中。
动态环境文件的生成方式恰好与 `kubeadm init` 相同。
接下来，kubeadm 运行以下两个命令将新配置加载到 kubelet 中：
```bash
systemctl daemon-reload && systemctl restart kubelet
```
在 kubelet 加载新配置后，kubeadm 将写入 `/etc/kubernetes/bootstrap-kubelet.conf` KubeConfig 文件中，
该文件包含 CA 证书和引导程序令牌。
kubelet 使用这些证书执行 TLS 引导程序并获取唯一的凭据，该凭据被存储在 `/etc/kubernetes/kubelet.conf` 中。
当此文件被写入后，kubelet 就完成了执行 TLS 引导程序。
<!--
When the `/etc/kubernetes/kubelet.conf` file is written, the kubelet has finished performing the TLS Bootstrap.
Kubeadm deletes the `/etc/kubernetes/bootstrap-kubelet.conf` file after completing the TLS Bootstrap.
-->
当 `/etc/kubernetes/kubelet.conf` 文件被写入后，kubelet 就完成了 TLS 引导过程。
Kubeadm 在完成 TLS 引导过程后将删除 `/etc/kubernetes/bootstrap-kubelet.conf` 文件。
<!--
## The kubelet drop-in file for systemd