From c7971b5ed3acd88516f49c6babfc1f117fb49b9a Mon Sep 17 00:00:00 2001 From: jfcgaspar <46935422+jfcgaspar@users.noreply.github.com> Date: Wed, 22 Apr 2020 17:01:55 +0100 Subject: [PATCH] Update install-kubeadm.md (SELinux note) Added a note regarding the possibility of keeping SELinux enabled for advanced users at own risk. Update content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md Co-Authored-By: Jim Angel Clean up text from rebase Revert "Clean up text from rebase" This reverts commit ac82a7f1981fe6e09ba1e101b372fa6d154125d2. Clean up rebase text --- .../production-environment/tools/kubeadm/install-kubeadm.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md index b44275302a..c7ddf65501 100644 --- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md +++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md @@ -210,12 +210,14 @@ yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes systemctl enable --now kubelet ``` - **Note:** + **Notes:** - Setting SELinux in permissive mode by running `setenforce 0` and `sed ...` effectively disables it. This is required to allow containers to access the host filesystem, which is needed by pod networks for example. You have to do this until SELinux support is improved in the kubelet. + - You can leave SELinux enabled if you know how to configure it but it may require settings that are not supported by kubeadm. + {{% /tab %}} {{% tab name="Container Linux" %}} Install CNI plugins (required for most pod network):