docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update restrict-services-to-worker-nodes.md 

editorial crx
This commit is contained in:
L-Hudson 2019-02-21 08:33:15 -05:00 committed by GitHub
parent c62eb36fa3
commit 69f6cdc139
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ee/ucp/admin/configure/restrict-services-to-worker-nodes.md
View File

@ -15,7 +15,7 @@ any cluster management functionality.
## Swarm Workloads ## Swarm Workloads
To restrict users from deploying to manager nodes, log in with administrator To restrict users from deploying to manager nodes, log in with administrator
credentials to the UCP web UI, navigate to the **Admin Settings** credentials to the UCP web interface, navigate to the **Admin Settings**
page, and choose **Scheduler**. page, and choose **Scheduler**.
![](../../images/restrict-services-to-worker-nodes-1.png){: .with-border} ![](../../images/restrict-services-to-worker-nodes-1.png){: .with-border}
@ -51,7 +51,7 @@ $ kubectl get nodes <ucpmanager> -o json | jq -r '.spec.taints | .[]'
To allow Administrators to deploy workloads accross all nodes types, an To allow Administrators to deploy workloads accross all nodes types, an
Administrator can tick the "Allow administrators to deploy containers on UCP Administrator can tick the "Allow administrators to deploy containers on UCP
managers or nodes running DTR" box in the UCP UI. managers or nodes running DTR" box in the UCP web interface.
![](../../images/restrict-services-to-worker-nodes-2.png){: .with-border} ![](../../images/restrict-services-to-worker-nodes-2.png){: .with-border}
@ -60,7 +60,7 @@ ticked, UCP will apply a toleration to your workloads to allow the pods to be
scheduled on all node types. scheduled on all node types.
For existing workloads, the Administrator will need to edit the Pod For existing workloads, the Administrator will need to edit the Pod
specification, through `kubectl edit <object> <workload>` or the UCP UI and add specification, through `kubectl edit <object> <workload>` or the UCP web interface and add
the following toleration: the following toleration:
```bash ```bash
@ -84,7 +84,7 @@ $ kubectl get <object> <workload> -o json | jq -r '.spec.template.spec.toleratio
To allow Kubernetes Users and Service Accounts to deploy workloads accross all To allow Kubernetes Users and Service Accounts to deploy workloads accross all
node types in your cluster, an Administrator will need to tick "Allow all node types in your cluster, an Administrator will need to tick "Allow all
authenticated users, including service accounts, to schedule on all nodes, authenticated users, including service accounts, to schedule on all nodes,
including UCP managers and DTR nodes." in the UCP UI. including UCP managers and DTR nodes." in the UCP web interface.
![](../../images/restrict-services-to-worker-nodes-3.png){: .with-border} ![](../../images/restrict-services-to-worker-nodes-3.png){: .with-border}