[zh-cn]sync some little for tasks
Signed-off-by: xin.li <xin.li@daocloud.io>
This commit is contained in:
parent
4feea9cc56
commit
583cf7242f
|
|
@ -2,6 +2,7 @@
|
||||||
title: 在运行中的集群上重新配置节点的 kubelet
|
title: 在运行中的集群上重新配置节点的 kubelet
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: v1.11
|
min-kubernetes-server-version: v1.11
|
||||||
|
weight: 280
|
||||||
---
|
---
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
|
|
@ -10,6 +11,7 @@ reviewers:
|
||||||
- dawnchen
|
- dawnchen
|
||||||
title: Reconfigure a Node's Kubelet in a Live Cluster
|
title: Reconfigure a Node's Kubelet in a Live Cluster
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 280
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
|
||||||
|
|
@ -2,6 +2,7 @@
|
||||||
title: 为系统守护进程预留计算资源
|
title: 为系统守护进程预留计算资源
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: 1.8
|
min-kubernetes-server-version: 1.8
|
||||||
|
weight: 290
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
reviewers:
|
reviewers:
|
||||||
|
|
@ -11,6 +12,7 @@ reviewers:
|
||||||
title: Reserve Compute Resources for System Daemons
|
title: Reserve Compute Resources for System Daemons
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: 1.8
|
min-kubernetes-server-version: 1.8
|
||||||
|
weight: 290
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
@ -249,8 +251,10 @@ with `.slice` appended.
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
**Kubelet Flag**: `--reserved-cpus=0-3`
|
**Kubelet Flag**: `--reserved-cpus=0-3`
|
||||||
|
**KubeletConfiguration Flag**: `reservedSystemCpus: 0-3`
|
||||||
-->
|
-->
|
||||||
**Kubelet 标志**:`--reserved-cpus=0-3`
|
**Kubelet 标志**: `--reserved-cpus=0-3`
|
||||||
|
**KubeletConfiguration 标志**:`reservedSystemCpus: 0-3`
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
`reserved-cpus` is meant to define an explicit CPU set for OS system daemons and
|
`reserved-cpus` is meant to define an explicit CPU set for OS system daemons and
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: Kubernetes 云管理控制器
|
title: Kubernetes 云管理控制器
|
||||||
content_type: concept
|
content_type: concept
|
||||||
|
weight: 110
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
reviewers:
|
reviewers:
|
||||||
|
|
@ -9,6 +10,7 @@ reviewers:
|
||||||
- wlan0
|
- wlan0
|
||||||
title: Kubernetes Cloud Controller Manager
|
title: Kubernetes Cloud Controller Manager
|
||||||
content_type: concept
|
content_type: concept
|
||||||
|
weight: 110
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: 保护集群
|
title: 保护集群
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 320
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
reviewers:
|
reviewers:
|
||||||
|
|
@ -9,6 +10,7 @@ reviewers:
|
||||||
- enj
|
- enj
|
||||||
title: Securing a Cluster
|
title: Securing a Cluster
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 320
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,7 @@
|
||||||
---
|
---
|
||||||
title: 在 Kubernetes 集群中使用 sysctl
|
title: 在 Kubernetes 集群中使用 sysctl
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 400
|
||||||
---
|
---
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
|
|
@ -8,6 +9,7 @@ title: Using sysctls in a Kubernetes Cluster
|
||||||
reviewers:
|
reviewers:
|
||||||
- sttts
|
- sttts
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 400
|
||||||
--->
|
--->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
|
||||||
|
|
@ -2,6 +2,7 @@
|
||||||
title: 控制节点上的拓扑管理策略
|
title: 控制节点上的拓扑管理策略
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: v1.18
|
min-kubernetes-server-version: v1.18
|
||||||
|
weight: 150
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
title: Control Topology Management Policies on a node
|
title: Control Topology Management Policies on a node
|
||||||
|
|
@ -15,6 +16,7 @@ reviewers:
|
||||||
|
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: v1.18
|
min-kubernetes-server-version: v1.18
|
||||||
|
weight: 150
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
|
||||||
|
|
@ -1,11 +1,13 @@
|
||||||
---
|
---
|
||||||
title: 在集群中使用级联删除
|
title: 在集群中使用级联删除
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 360
|
||||||
---
|
---
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
title: Use Cascading Deletion in a Cluster
|
title: Use Cascading Deletion in a Cluster
|
||||||
content_type: task
|
content_type: task
|
||||||
|
weight: 360
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!--overview-->
|
<!--overview-->
|
||||||
|
|
|
||||||
|
|
@ -2,11 +2,13 @@
|
||||||
title: 验证已签名容器镜像
|
title: 验证已签名容器镜像
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: v1.24
|
min-kubernetes-server-version: v1.24
|
||||||
|
weight: 420
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
title: Verify Signed Container Images
|
title: Verify Signed Container Images
|
||||||
content_type: task
|
content_type: task
|
||||||
min-kubernetes-server-version: v1.24
|
min-kubernetes-server-version: v1.24
|
||||||
|
weight: 420
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<!-- overview -->
|
<!-- overview -->
|
||||||
|
|
@ -63,6 +65,9 @@ done
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
Then verify the blob by using `cosign`:
|
Then verify the blob by using `cosign`:
|
||||||
|
|
||||||
|
cosign v1.9.0 is required to be able to use the `--certificate` flag. Please use
|
||||||
|
`--cert` for older versions of cosign.
|
||||||
-->
|
-->
|
||||||
然后使用 `cosign` 验证二进制文件:
|
然后使用 `cosign` 验证二进制文件:
|
||||||
|
|
||||||
|
|
@ -70,6 +75,8 @@ Then verify the blob by using `cosign`:
|
||||||
cosign verify-blob "$BINARY" --signature "$BINARY".sig --certificate "$BINARY".cert
|
cosign verify-blob "$BINARY" --signature "$BINARY".sig --certificate "$BINARY".cert
|
||||||
```
|
```
|
||||||
|
|
||||||
|
cosign 自 v1.9.0 版本开始才能使用 `--certificate` 标志,旧版本的 cosign 请使用 `--cert`。
|
||||||
|
|
||||||
{{< note >}}
|
{{< note >}}
|
||||||
<!--
|
<!--
|
||||||
To learn more about keyless signing, please refer to [Keyless
|
To learn more about keyless signing, please refer to [Keyless
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue