committed by
Kubernetes Prow Robot
parent
0268ed0c18
commit
b05129acc3
@@ -40,7 +40,7 @@ manually through `easyrsa`, `openssl` or `cfssl`.
|
||||
tar xzf easy-rsa.tar.gz
|
||||
cd easy-rsa-master/easyrsa3
|
||||
./easyrsa init-pki
|
||||
|
||||
|
||||
<!--
|
||||
1. Generate a CA. (`--batch` set automatic mode. `--req-cn` default CN to use.)
|
||||
-->
|
||||
@@ -101,7 +101,7 @@ manually through `easyrsa`, `openssl` or `cfssl`.
|
||||
1. 生成密钥位数为 2048 的 ca.key:
|
||||
|
||||
openssl genrsa -out ca.key 2048
|
||||
|
||||
|
||||
<!--
|
||||
1. According to the ca.key generate a ca.crt (use -days to set the certificate effective time):
|
||||
-->
|
||||
@@ -222,7 +222,7 @@ Finally, add the same parameters into the API server start parameters.
|
||||
chmod +x cfssljson
|
||||
curl -L https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64 -o cfssl-certinfo
|
||||
chmod +x cfssl-certinfo
|
||||
|
||||
|
||||
<!--
|
||||
1. Create a directory to hold the artifacts and initialize cfssl:
|
||||
-->
|
||||
@@ -258,7 +258,7 @@ Finally, add the same parameters into the API server start parameters.
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
<!--
|
||||
1. Create a JSON config file for CA certificate signing request (CSR), for example,
|
||||
`ca-csr.json`. Be sure to replace the values marked with angle brackets with
|
||||
@@ -282,7 +282,7 @@ Finally, add the same parameters into the API server start parameters.
|
||||
"OU": "<organization unit>"
|
||||
}]
|
||||
}
|
||||
|
||||
|
||||
<!--
|
||||
1. Generate CA key (`ca-key.pem`) and certificate (`ca.pem`):
|
||||
-->
|
||||
@@ -290,7 +290,7 @@ Finally, add the same parameters into the API server start parameters.
|
||||
1. 生成 CA 密钥(`ca-key.pem`)和证书(`ca.pem`):
|
||||
|
||||
../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
|
||||
|
||||
|
||||
<!--
|
||||
1. Create a JSON config file for generating keys and certificates for the API
|
||||
server, for example, `server-csr.json`. Be sure to replace the values in angle brackets with
|
||||
@@ -328,7 +328,7 @@ Finally, add the same parameters into the API server start parameters.
|
||||
"OU": "<organization unit>"
|
||||
}]
|
||||
}
|
||||
|
||||
|
||||
<!--
|
||||
1. Generate the key and certificate for the API server, which are by default
|
||||
saved into file `server-key.pem` and `server.pem` respectively:
|
||||
|
||||
@@ -66,14 +66,14 @@ Kubernetes 知道如何通过文件 cloud.conf 与 OpenStack 进行交互。 该
|
||||
|
||||
```yaml
|
||||
[Global]
|
||||
username=user
|
||||
password=pass
|
||||
auth-url=https://<keystone_ip>/identity/v3
|
||||
tenant-id=c869168a828847f39f7f06edd7305637
|
||||
username=user
|
||||
password=pass
|
||||
auth-url=https://<keystone_ip>/identity/v3
|
||||
tenant-id=c869168a828847f39f7f06edd7305637
|
||||
domain-id=2a73b8f597c04551a0fdc8e95544be8a
|
||||
|
||||
[LoadBalancer]
|
||||
subnet-id=6937f8fa-858d-4bc9-a3a5-18d2c957166a
|
||||
subnet-id=6937f8fa-858d-4bc9-a3a5-18d2c957166a
|
||||
```
|
||||
|
||||
#### 全局配置
|
||||
|
||||
@@ -163,7 +163,7 @@ the rotation and there are two files, one 10MB in size and one empty,
|
||||
`kubectl logs` will return an empty response.
|
||||
-->
|
||||
当前,如果有其他系统机制执行日志轮转,那么 `kubectl logs` 仅可查询到最新的日志内容。
|
||||
比如,一个 10MB 大小的文件,通过`logrotate` 执行轮转后生成两个文件,一个 10MB 大小,一个为空,所以 `kubectl logs` 将返回空。
|
||||
比如,一个 10MB 大小的文件,通过`logrotate` 执行轮转后生成两个文件,一个 10MB 大小,一个为空,所以 `kubectl logs` 将返回空。
|
||||
{{< /note >}}
|
||||
|
||||
[cosConfigureHelper]: https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh
|
||||
|
||||
@@ -36,7 +36,7 @@ content_template: templates/concept
|
||||
|
||||
- 在每个节点上运行
|
||||
- 代理 UDP 和 TCP
|
||||
- 不支持 HTTP
|
||||
- 不支持 HTTP
|
||||
- 提供负载均衡能力
|
||||
- 只用来访问 Service
|
||||
|
||||
|
||||
Reference in New Issue
Block a user