Update install-kubeadm.md (SELinux note)
Added a note regarding the possibility of keeping SELinux enabled for advanced users at own risk. Update content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md Co-Authored-By: Jim Angel <jimangel@users.noreply.github.com> Clean up text from rebase Revert "Clean up text from rebase" This reverts commit ac82a7f1981fe6e09ba1e101b372fa6d154125d2. Clean up rebase text
This commit is contained in:
parent
a0f8b298e0
commit
c7971b5ed3
|
@ -210,12 +210,14 @@ yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
|
||||||
systemctl enable --now kubelet
|
systemctl enable --now kubelet
|
||||||
```
|
```
|
||||||
|
|
||||||
**Note:**
|
**Notes:**
|
||||||
|
|
||||||
- Setting SELinux in permissive mode by running `setenforce 0` and `sed ...` effectively disables it.
|
- Setting SELinux in permissive mode by running `setenforce 0` and `sed ...` effectively disables it.
|
||||||
This is required to allow containers to access the host filesystem, which is needed by pod networks for example.
|
This is required to allow containers to access the host filesystem, which is needed by pod networks for example.
|
||||||
You have to do this until SELinux support is improved in the kubelet.
|
You have to do this until SELinux support is improved in the kubelet.
|
||||||
|
|
||||||
|
- You can leave SELinux enabled if you know how to configure it but it may require settings that are not supported by kubeadm.
|
||||||
|
|
||||||
{{% /tab %}}
|
{{% /tab %}}
|
||||||
{{% tab name="Container Linux" %}}
|
{{% tab name="Container Linux" %}}
|
||||||
Install CNI plugins (required for most pod network):
|
Install CNI plugins (required for most pod network):
|
||||||
|
|
Loading…
Reference in New Issue