Tim Bannister
59dcd57cc9
After removing the sections of the page that are not in line with the content guide, there is little left. Edit pages that link to removed task to no longer link there. Redirect using 302 status so that there is a future opportunity to reinstate the page or something like it. - Avoid links to removed cluster management task - Broaden applicability of “Safely Drain A Node” - Add (stub) cluster upgrade task page - Add a basic page about upgrading your cluster. - Add a task page about enabling or disabling HTTP APIs
74 lines
4.0 KiB
Markdown
74 lines
4.0 KiB
Markdown
---
|
|
title: Cluster Administration
|
|
reviewers:
|
|
- davidopp
|
|
- lavalamp
|
|
weight: 100
|
|
content_type: concept
|
|
description: >
|
|
Lower-level detail relevant to creating or administering a Kubernetes cluster.
|
|
no_list: true
|
|
---
|
|
|
|
<!-- overview -->
|
|
The cluster administration overview is for anyone creating or administering a Kubernetes cluster.
|
|
It assumes some familiarity with core Kubernetes [concepts](/docs/concepts/).
|
|
|
|
|
|
<!-- body -->
|
|
## Planning a cluster
|
|
|
|
See the guides in [Setup](/docs/setup/) for examples of how to plan, set up, and configure Kubernetes clusters. The solutions listed in this article are called *distros*.
|
|
|
|
{{< note >}}
|
|
Not all distros are actively maintained. Choose distros which have been tested with a recent version of Kubernetes.
|
|
{{< /note >}}
|
|
|
|
Before choosing a guide, here are some considerations:
|
|
|
|
- Do you just want to try out Kubernetes on your computer, or do you want to build a high-availability, multi-node cluster? Choose distros best suited for your needs.
|
|
- Will you be using **a hosted Kubernetes cluster**, such as [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/), or **hosting your own cluster**?
|
|
- Will your cluster be **on-premises**, or **in the cloud (IaaS)**? Kubernetes does not directly support hybrid clusters. Instead, you can set up multiple clusters.
|
|
- **If you are configuring Kubernetes on-premises**, consider which [networking model](/docs/concepts/cluster-administration/networking/) fits best.
|
|
- Will you be running Kubernetes on **"bare metal" hardware** or on **virtual machines (VMs)**?
|
|
- Do you **just want to run a cluster**, or do you expect to do **active development of Kubernetes project code**? If the
|
|
latter, choose an actively-developed distro. Some distros only use binary releases, but
|
|
offer a greater variety of choices.
|
|
- Familiarize yourself with the [components](/docs/concepts/overview/components/) needed to run a cluster.
|
|
|
|
|
|
## Managing a cluster
|
|
|
|
* Learn how to [manage nodes](/docs/concepts/architecture/nodes/).
|
|
|
|
* Learn how to set up and manage the [resource quota](/docs/concepts/policy/resource-quotas/) for shared clusters.
|
|
|
|
## Securing a cluster
|
|
|
|
* [Certificates](/docs/concepts/cluster-administration/certificates/) describes the steps to generate certificates using different tool chains.
|
|
|
|
* [Kubernetes Container Environment](/docs/concepts/containers/container-environment/) describes the environment for Kubelet managed containers on a Kubernetes node.
|
|
|
|
* [Controlling Access to the Kubernetes API](/docs/concepts/security/controlling-access) describes how Kubernetes implements access control for its own API.
|
|
|
|
* [Authenticating](/docs/reference/access-authn-authz/authentication/) explains authentication in Kubernetes, including the various authentication options.
|
|
|
|
* [Authorization](/docs/reference/access-authn-authz/authorization/) is separate from authentication, and controls how HTTP calls are handled.
|
|
|
|
* [Using Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/) explains plug-ins which intercepts requests to the Kubernetes API server after authentication and authorization.
|
|
|
|
* [Using Sysctls in a Kubernetes Cluster](/docs/tasks/administer-cluster/sysctl-cluster/) describes to an administrator how to use the `sysctl` command-line tool to set kernel parameters .
|
|
|
|
* [Auditing](/docs/tasks/debug-application-cluster/audit/) describes how to interact with Kubernetes' audit logs.
|
|
|
|
### Securing the kubelet
|
|
* [Control Plane-Node communication](/docs/concepts/architecture/control-plane-node-communication/)
|
|
* [TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
|
|
* [Kubelet authentication/authorization](/docs/reference/command-line-tools-reference/kubelet-authentication-authorization/)
|
|
|
|
## Optional Cluster Services
|
|
|
|
* [DNS Integration](/docs/concepts/services-networking/dns-pod-service/) describes how to resolve a DNS name directly to a Kubernetes service.
|
|
|
|
* [Logging and Monitoring Cluster Activity](/docs/concepts/cluster-administration/logging/) explains how logging in Kubernetes works and how to implement it.
|