whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix bullet list for Hugo (#8619)

Browse Source 
Signed-off-by: Misty Stanley-Jones <mistyhacks@google.com>
This commit is contained in:
Misty Stanley-Jones
2018-05-18 11:31:54 -07:00
committed by k8s-ci-robot
parent b5bbff1b6d
commit b8c5652751
1 changed files with 17 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
+17 -18
View File
@@ -18,23 +18,22 @@ This document provide additional details on what happen under the hood, with the
## Core design principles ## Core design principles
The cluster that `kubeadm init` and `kubeadm join` set up should be: The cluster that `kubeadm init` and `kubeadm join` set up should be:
- Secure:
- It should adopt latest best-practices like: - **Secure**: It should adopt latest best-practices like:
- enforcing RBAC - enforcing RBAC
- using the Node Authorizer - using the Node Authorizer
- using secure communication between the control plane components - using secure communication between the control plane components
- using secure communication between the API server and the kubelets - using secure communication between the API server and the kubelets
- lock-down the kubelet API - lock-down the kubelet API
- locking down access to the API for system components like the kube-proxy and kube-dns - locking down access to the API for system components like the kube-proxy and kube-dns
- locking down what a Bootstrap Token can access - locking down what a Bootstrap Token can access
- etc. - etc.
- Easy to use: - **Easy to use**: The user should not have to run anything more than a couple of commands:
- The user should not have to run anything more than a couple of commands: - `kubeadm init`
- `kubeadm init` - `export KUBECONFIG=/etc/kubernetes/admin.conf`
- `export KUBECONFIG=/etc/kubernetes/admin.conf` - `kubectl apply -f <network-of-choice.yaml>`
- `kubectl apply -f <network-of-choice.yaml>` - `kubeadm join --token <token> <master-ip>:<master-port>`
- `kubeadm join --token <token> <master-ip>:<master-port>` - **Extendable**:
- Extendable:
- It should for example _not_ favor any network provider, instead configuring a network is out-of-scope - It should for example _not_ favor any network provider, instead configuring a network is out-of-scope
- Should provide the possibility to use a config file for customizing various parameters - Should provide the possibility to use a config file for customizing various parameters
@@ -78,7 +77,7 @@ for creating custom clusters.
Kubeadm executes a set of preflight checks before starting the init, with the aim to verify preconditions and avoid common cluster startup problems. Kubeadm executes a set of preflight checks before starting the init, with the aim to verify preconditions and avoid common cluster startup problems.
In any case the user can skip specific preflight checks (or eventually all preflight checks) with the `--ignore-preflight-errors` option. In any case the user can skip specific preflight checks (or eventually all preflight checks) with the `--ignore-preflight-errors` option.
- [warning] If the Kubernetes version to use (specified with the `--kubernetes-version` flag) is at least one minor version higher than the kubeadm CLI version - [warning] If the Kubernetes version to use (specified with the `--kubernetes-version` flag) is at least one minor version higher than the kubeadm CLI version.
- Kubernetes system requirements: - Kubernetes system requirements:
- if running on linux: - if running on linux:
- [error] if not Kernel 3.10+ or 4+ with specific KernelSpec - [error] if not Kernel 3.10+ or 4+ with specific KernelSpec