@@ -228,7 +228,7 @@ it must be an array of strings.
|
||||
|
||||
Kubernetes does not provide an OpenID Connect Identity Provider.
|
||||
You can use an existing public OpenID Connect Identity Provider (such as Google, or [others](http://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers)).
|
||||
Or, you can run your own Identity Provider, such as CoreOS [dex](https://github.com/coreos/dex), [Keycloak](https://github.com/keycloak/keycloak) or CloudFoundary [UAA](https://github.com/cloudfoundry/uaa).
|
||||
Or, you can run your own Identity Provider, such as CoreOS [dex](https://github.com/coreos/dex), [Keycloak](https://github.com/keycloak/keycloak) or CloudFoundry [UAA](https://github.com/cloudfoundry/uaa).
|
||||
|
||||
The provider needs to support [OpenID connect discovery](https://openid.net/specs/openid-connect-discovery-1_0.html); not all do.
|
||||
|
||||
|
||||
@@ -84,7 +84,7 @@ no node that has enough free capacity (or doesn't match other pod requirements)
|
||||
to wait until some pods are terminated or a new node is added.
|
||||
|
||||
Cluster autoscaler looks for the pods that cannot be scheduled and checks if adding a new node, similar
|
||||
to the other in the cluster, would help. If yes, then it resizes the cluster to accomodate the waiting pods.
|
||||
to the other in the cluster, would help. If yes, then it resizes the cluster to accommodate the waiting pods.
|
||||
|
||||
Cluster autoscaler also scales down the cluster if it notices that some node is not needed anymore for
|
||||
an extended period of time (10min but it may change in the future).
|
||||
|
||||
@@ -52,5 +52,5 @@ Containers can potentially be garbage collected before their usefulness has expi
|
||||
can contain logs and other data that can be useful for troubleshooting. A sufficiently large value for
|
||||
`maximum-dead-containers-per-container` is highly recommended to allow at least 2 dead containers to be
|
||||
retained per expected container. A higher value for `maximum-dead-containers` is also recommended for a
|
||||
similiar reason.
|
||||
similar reason.
|
||||
See [this issue](https://github.com/kubernetes/kubernetes/issues/13287) for more details.
|
||||
|
||||
@@ -39,7 +39,7 @@ or service across nodes in a single-zone cluster (to reduce the impact of
|
||||
failures.) With multiple-zone clusters, this spreading behaviour is
|
||||
extended across zones (to reduce the impact of zone failures.) (This is
|
||||
achieved via `SelectorSpreadPriority`). This is a best-effort
|
||||
placement, and so if the zones in your cluster are heterogenous
|
||||
placement, and so if the zones in your cluster are heterogeneous
|
||||
(e.g. different numbers of nodes, different types of nodes, or
|
||||
different pod resource requirements), this might prevent perfectly
|
||||
even spreading of your pods across zones. If desired, you can use
|
||||
|
||||
Reference in New Issue
Block a user