mirror of https://github.com/docker/docs.git
Merge pull request #837 from docker/ucp-linkfix-782
broken link issue addressed
This commit is contained in:
commit
563c03df9a
|
@ -53,23 +53,15 @@ namespace needs access to Kubernetes resources, so create a grant with
|
||||||
`Restricted Control` permissions.
|
`Restricted Control` permissions.
|
||||||
|
|
||||||
1. From UCP, navigate to the **Grants** page, and click **Create Grant**.
|
1. From UCP, navigate to the **Grants** page, and click **Create Grant**.
|
||||||
2. Within the **Subject** pane, select **Service Account**. For the
|
2. Within the **Subject** pane, select **Service Account**. For the
|
||||||
**Namespace** select **ingress-nginx**, and select **default** for
|
**Namespace** select **ingress-nginx**, and select **default** for
|
||||||
the **Service Account**. Click **Next**.
|
the **Service Account**. Click **Next**.
|
||||||
3. Within the **Role** pane, select **Restricted Control**, and then click
|
3. Within the **Role** pane, select **Restricted Control**, and then click
|
||||||
**Next**.
|
**Next**.
|
||||||
4. Within the **Resource Set** pane, select the **Type** **Namespace**, and
|
4. Within the **Resource Set** pane, select the **Type** **Namespace**, and
|
||||||
select the **Apply grant to all existing and new namespaces** toggle.
|
select the **Apply grant to all existing and new namespaces** toggle.
|
||||||
5. Click **Create**.
|
5. Click **Create**.
|
||||||
|
|
||||||
> Ingress and role-based access control
|
|
||||||
>
|
|
||||||
> Docker EE has an access control system that differs from Kubernetes RBAC.
|
|
||||||
> If your ingress controller has access control requirements, you need to
|
|
||||||
> create corresponding UCP grants. Learn to
|
|
||||||
> [migrate Kubernetes roles to Docker EE authorization](../authorization/migrate-kubernetes-roles.md).
|
|
||||||
{: .important}
|
|
||||||
|
|
||||||
## Deploy NGINX ingress controller
|
## Deploy NGINX ingress controller
|
||||||
|
|
||||||
The cluster is ready for the ingress controller deployment, which has three
|
The cluster is ready for the ingress controller deployment, which has three
|
||||||
|
@ -100,7 +92,7 @@ spec:
|
||||||
labels:
|
labels:
|
||||||
app: default-http-backend
|
app: default-http-backend
|
||||||
annotations:
|
annotations:
|
||||||
seccomp.security.alpha.kubernetes.io/pod: docker/default
|
seccomp.security.alpha.kubernetes.io/pod: docker/default
|
||||||
spec:
|
spec:
|
||||||
terminationGracePeriodSeconds: 60
|
terminationGracePeriodSeconds: 60
|
||||||
containers:
|
containers:
|
||||||
|
@ -177,7 +169,7 @@ spec:
|
||||||
annotations:
|
annotations:
|
||||||
prometheus.io/port: '10254'
|
prometheus.io/port: '10254'
|
||||||
prometheus.io/scrape: 'true'
|
prometheus.io/scrape: 'true'
|
||||||
seccomp.security.alpha.kubernetes.io/pod: docker/default
|
seccomp.security.alpha.kubernetes.io/pod: docker/default
|
||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- command:
|
- command:
|
||||||
|
|
Loading…
Reference in New Issue