Merge remote-tracking branch 'upstream/master' into lperkins/hugo-version-readme
This commit is contained in:
@@ -482,7 +482,9 @@ Create a secret containing some ssh keys:
|
|||||||
$ kubectl create secret generic ssh-key-secret --from-file=ssh-privatekey=/path/to/.ssh/id_rsa --from-file=ssh-publickey=/path/to/.ssh/id_rsa.pub
|
$ kubectl create secret generic ssh-key-secret --from-file=ssh-privatekey=/path/to/.ssh/id_rsa --from-file=ssh-publickey=/path/to/.ssh/id_rsa.pub
|
||||||
```
|
```
|
||||||
|
|
||||||
**Security Note:** Think carefully before sending your own ssh keys: other users of the cluster may have access to the secret. Use a service account which you want to be accessible to all the users with whom you share the Kubernetes cluster, and can revoke if they are compromised.
|
{{< caution >}}
|
||||||
|
**Caution:** Think carefully before sending your own ssh keys: other users of the cluster may have access to the secret. Use a service account which you want to be accessible to all the users with whom you share the Kubernetes cluster, and can revoke if they are compromised.
|
||||||
|
{{< /caution >}}
|
||||||
|
|
||||||
|
|
||||||
Now we can create a pod which references the secret with the ssh key and
|
Now we can create a pod which references the secret with the ssh key and
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Configure the aggregation layer
|
title: Configure the Aggregation Layer
|
||||||
reviewers:
|
reviewers:
|
||||||
- lavalamp
|
- lavalamp
|
||||||
- cheftako
|
- cheftako
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Setup an extension API server
|
title: Setup an Extension API Server
|
||||||
reviewers:
|
reviewers:
|
||||||
- lavalamp
|
- lavalamp
|
||||||
- cheftako
|
- cheftako
|
||||||
|
|||||||
@@ -78,10 +78,9 @@ For example, you can do that using kubectl by running:
|
|||||||
kubectl --context=federation-cluster delete configmap
|
kubectl --context=federation-cluster delete configmap
|
||||||
```
|
```
|
||||||
|
|
||||||
Note that at this point, deleting a Federated ConfigMap will not delete the
|
{{< note >}}
|
||||||
corresponding ConfigMaps from underlying clusters.
|
**Note:** Deleting a Federated ConfigMap does not delete the corresponding ConfigMaps from underlying clusters. You must delete the underlying ConfigMaps manually.
|
||||||
You must delete the underlying ConfigMaps manually.
|
{{< /note >}}
|
||||||
We intend to fix this in the future.
|
|
||||||
|
|
||||||
{{% /capture %}}
|
{{% /capture %}}
|
||||||
|
|
||||||
|
|||||||
@@ -122,10 +122,10 @@ in the previous section.
|
|||||||
|
|
||||||
You can delete a federated HPA as you would delete a Kubernetes
|
You can delete a federated HPA as you would delete a Kubernetes
|
||||||
HPA; however, for a federated HPA, you must send the request to
|
HPA; however, for a federated HPA, you must send the request to
|
||||||
the federation API server instead of sending it to a specific Kubernetes cluster.
|
the federation API server instead of to a specific Kubernetes cluster.
|
||||||
It should also be noted that for the federated resource to be deleted from
|
{{< note >}}
|
||||||
all underlying clusters, [cascading deletion](/docs/concepts/cluster-administration/federation/#cascading-deletion)
|
**Note:** For the federated resource to be deleted from all underlying clusters, [cascading deletion](/docs/concepts/cluster-administration/federation/#cascading-deletion) should be used.
|
||||||
should be used.
|
{{< /note >}}
|
||||||
|
|
||||||
For example, you can do that using `kubectl` by running:
|
For example, you can do that using `kubectl` by running:
|
||||||
|
|
||||||
|
|||||||
@@ -206,9 +206,9 @@ newly deployed federation. You can set the current context manually by running:
|
|||||||
```shell
|
```shell
|
||||||
kubectl config use-context fellowship
|
kubectl config use-context fellowship
|
||||||
```
|
```
|
||||||
{{< /note >}}
|
|
||||||
|
|
||||||
where `fellowship` is the name of your federation.
|
where `fellowship` is the name of your federation.
|
||||||
|
{{< /note >}}
|
||||||
|
|
||||||
### Basic and token authentication support
|
### Basic and token authentication support
|
||||||
|
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
reviewers:
|
reviewers:
|
||||||
- janetkuo
|
- janetkuo
|
||||||
title: Performing a Rollback on a DaemonSet
|
title: Perform a Rollback on a DaemonSet
|
||||||
content_template: templates/task
|
content_template: templates/task
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -139,11 +139,13 @@ DaemonSet template with the template stored in the `ControllerRevision`.
|
|||||||
previous revision through other commands, such as `kubectl edit` or `kubectl
|
previous revision through other commands, such as `kubectl edit` or `kubectl
|
||||||
apply`.
|
apply`.
|
||||||
|
|
||||||
Note that DaemonSet revisions only roll forward. That is to say, after a
|
{{< note >}}
|
||||||
rollback is complete, the revision number (`.revision` field) of the
|
**Note:** DaemonSet revisions only roll forward. That is to say, after a
|
||||||
|
rollback completes, the revision number (`.revision` field) of the
|
||||||
`ControllerRevision` being rolled back to will advance. For example, if you
|
`ControllerRevision` being rolled back to will advance. For example, if you
|
||||||
have revision 1 and 2 in the system, and roll back from revision 2 to revision
|
have revision 1 and 2 in the system, and roll back from revision 2 to revision
|
||||||
1, the `ControllerRevision` with `.revision: 1` will become `.revision: 3`.
|
1, the `ControllerRevision` with `.revision: 1` will become `.revision: 3`.
|
||||||
|
{{< /note >}}
|
||||||
|
|
||||||
## Troubleshooting
|
## Troubleshooting
|
||||||
|
|
||||||
|
|||||||
@@ -159,11 +159,12 @@ kubectl get pods -l <daemonset-selector-key>=<daemonset-selector-value> -o wide
|
|||||||
```
|
```
|
||||||
|
|
||||||
Once you've found those nodes, delete some non-DaemonSet pods from the node to
|
Once you've found those nodes, delete some non-DaemonSet pods from the node to
|
||||||
make room for new DaemonSet pods. Note that this will cause service disruption
|
make room for new DaemonSet pods.
|
||||||
if the deleted pods are not controlled by any controllers, or if the pods aren't
|
{{< note >}}
|
||||||
replicated. This doesn't respect
|
**Note:** This will cause service disruption when deleted pods are not controlled by any controllers or pods are not
|
||||||
[PodDisruptionBudget](/docs/tasks/configure-pod-container/configure-pod-disruption-budget/)
|
replicated. This does not respect [PodDisruptionBudget](/docs/tasks/configure-pod-container/configure-pod-disruption-budget/)
|
||||||
either.
|
either.
|
||||||
|
{{< /note >}}
|
||||||
|
|
||||||
#### Broken rollout
|
#### Broken rollout
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user