The Kubespray documentation links to Packet which has now been renamed to Equinix Metal with a different link in the kubernetes-sigs/kubespray github repo.
This page has a lot of indentations or line wrappings that are "wrong".
It would make tracking changes (especially for localization teams) very
difficult.
The 'kubeletconfiguration' patch target is a new one in 1.25.
It allows to apply instance-specific configuration to
kubelets in a kubeadm cluster by patching the base KubeletConfiguration
object that is shared by all nodes.
* Move Windows storage concepts to a new page
- Move FlexVolume plugins section to docs/concepts/storage/volumes.md
- Move CSI plugins section to en/docs/concepts/storage/volumes.md
- Move in-tree plugins section to en/docs/concepts/storage/volumes.md
* Moving networking related content in
/docs/setup/production-environment/windows to various locations
- Moving windows DNS limitations to/docs/concepts/services-networking/dns-pod-service.md
- Moving windows session sticky time disclaimer to /docs/concepts/services-networking/service.md
- Moving windows dual stack support info to /docs/concepts/services-networking/dual-stack.md
- Moving generic Windows content to
/docs/concepts/services-networking/windows-networking.md
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
* Moving Windows troubleshooting topics to /tasks/debug-application-cluster/
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
* Moving windows containers user guide out of /setup/production-environment/
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
* fixup! Moving windows containers user guide out of /setup/production-environment/
* moving intro-windows-in-kubernetes content out of /setup/production-environment/
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
Co-authored-by: Aravindh Puthiyaparambil <aravindh@redhat.com>
The "master" taint is no longer applied on control plane
nodes by kubeadm 1.25.
Remove mentions of the taint from the documentation:
- implementation details
- create a kubeadm cluster
- known labels / taints
* Adding more information to Installing kubeadm step.
* Adding more information to installing kubeadm step.
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
* Remove unnecessary quotes.
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
The new task page outlines steps for reconfiguring
a kubeadm cluster and persisting reconfiguration.
Link the new page from the existing guides for
"customizing components", "creating a cluster",
and "kubeadm upgrade".
Co-authored-by: Paco Xu <paco.xu@daocloud.io>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
The logical navigation definitely works better if Pod Security admission
and PodSecurityPolicy are pages in the same section. Make It So.
Co-authored-by: Rey Lejano <rlejano@gmail.com>
Telnet is a command that really should not be used, as there is too great a chance it could be misused. NetCat, nc, is a better and newer tool for testing single open ports.
It won't be clear to readers what feature is being covered here. The
advice in this page is version-specific (especially given the removal of
the dockershim); removing this shortcode takes away a detail that might
mislead people into thinking the page has not changed recently.
The guide generates some files on one of three ETCD
hosts. It then copies files from host 1 to 2 and 3.
Due to that some file paths differ.
Update step 7 to reflect that and to match step 6.
In 1.24 kubeadm will:
- stop using the "master" label on CP nodes.
- start tainting CP nodes with both "master" and "control-plane" taints.
In 1.25 the "master" taint will be removed.
Adjust references of the "master" label/taint to the above.
* Adding a warning to Windows docs for NodePort service issues on WS2022
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
The default kubelet configuration ConfigMap that kubeadm manages
is "kubelet-config" instead of "kubelet-config-x.yy" (where x.yy
is the Kubernetes version) in 1.24.
Cleanup references to the legacy naming in kubeadm documentation.
Generated contents in content/en/docs/reference/* are not updated.
* Update link to TECHNET article about Windows NAT
* Fix inconsistent capitalisation of win-overlay
No other instance of win-overlay is capitalised, and win-bridge in the same place on the previous row is not capitalised either.
The command "kubeadm kubeconfig user" is missing
some examples and more details on why it is needed.
- Add a new section "Generating kubeconfig files
for additional users" under the kubeadm-certs page.
- Link to this section from the kubeadm-kubeconfig reference page.
- Link to this section from the create-cluster-kubeadm page.
Touch the following files:
- Implementation details: remove docker specifics, which is changing
in 1.24
- Create cluster: small language cleanup, remove note about 1.24
- Install kubeadm: Include two up-to-date tables for Linux / Windows
with known endpoints. Include cri-dockerd.
- Kubelet integration: (side cleanup) use "container runtime" instead of
"CRI runtime" (which is incorrect). Mention that only updating
"--container-runtime-endpoint=.." is required if the user wishes
to override the CR on a certain host. Dockershim->CR-foo migration
guides would make the "--container-runtime=remote" flag explicit
and we want to remove it at some point.
- Troubleshooting kubeadm: Remove some instances of Docker troubleshooting
that imply docker as default CR, or talk about old Docker versions.
Be more generic about container runtimes.
- Adding Windows nodes: move the containerd tab before the Docker
tab, as containerd is now the default. Remove note about being explicit
about --cri-socket. Add note that crictl is required for both
Docker and containerd. Add note that cri-dockerd is required if
the user wants to use Docker EE on Windows.
There were a couple of reported problems with this guide:
- The introductory paragraph talks about single control plane nodes
and does not mention the different options for HA etcd. Clear the
language to reduce the confusion and cross-link to the ha-topology
page.
- The hostname / IP detection in kubeadm can end
up with values not suitable for the certificates that kubeadm
generates for all etcd instances. Ensure that the hostnames / IPs
are pinned by the user in the example script.
Side cleanup related to the dockershim removal:
- Use containerd in the setup example and don't mention docker as
a requirement.
* Fixes grammatical errors
* Removes period as recommended in review
* Update content/en/docs/setup/production-environment/tools/kubespray.md
Co-authored-by: Rey Lejano <rlejano@gmail.com>
Co-authored-by: Rey Lejano <rlejano@gmail.com>
* Fix broken anchor link of #type-nodeport in service.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in overview.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in ingress.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in troubleshooting-kubeadm.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in connecting-frontend-backend.md
* Update anchor link from #nodeport to #type-nodeport
Update anchor link from #nodeport to #type-nodeport in source-ip.md
The "kubelet-finalize" step does not work on worker nodes,
because commonly they do not have the cluster CA key and all
"init" phases have a pre-step to check for the existence of
the CA key, designating the cluster as one that uses external CA
or not.
Changing this behavior is complicated in kubeadm, thus manually
instruct the user how to do edit the file and to restart the kubelet.
This is already what we do in:
https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#check-certificate-expiration
- Include more details about custom image repositories, such
as making sure that paths in custom repositories comply with
kubeadm execution.
- Move the section "without internet connection" above
the section about custom images.
- Link the "create-cluster-kubeadm.md" guide these new section
as a pre-req step for nodes.
* Adding diagrams to certificates page
* Cropped diagrams
* Changed diagrams to tree output
* Formatting fix
* Fixed text block markup and spacing
* Changed tree view of files to full-path view
* Changed order of two cert files
* Broke up links into separate sentences, per review comment
* More changes per review comments
Partial tidying to bring this page more in line with the Kubernetes
documentation style guide.
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
- Refactored ports and protocols info under docs/reference
- Updated the ports for kube-scheduler and kube-controller based on
current state
Co-authored-by: Tim Bannister <tim@scalefactory.com>
* Clarifying gcr vs mcr pause iamge usage for Windows
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
* updating more pause image references
* Link to pause image section instead of duplicating container image multiple places
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
* update link to wincat source
* Removing here link
* end of file blank line
* specify pause image v3.5 is for v1.22
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
* removing v1.15 reference from docs
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
* Update content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Supports multiple architectures for the "Without a Package Manager" step such as arm64. Useful in Arch + ARM's scenario as kubeadm pacman repo is currently not maintained for ARM.
- Re-purpose the page to include more general details about
customizing components.
- Add details about using patches via the config API (v1.22 feature).
In 1.22 kubeadm is adding a new API version - v1beta3.
Adapt links and examples to use v1beta3 instead of v1beta2.
v1beta2 is not deprecated yet, but v1beta3 is preferred
at this point.
break long lines
simplify wording (suggested by neolit123)
phrasing error/typo
don't mention creating a new kuebadm config file, not really relevant here
remove unnecessary stop from kubelet cert troubleshoot
minor phrasing improvement: *the* kublet
make the steps for fixing kubelet certs separate from other troubleshooting suggestions
move kubelet cert troubleshooting to a better place
improve note wording and add link
add missing dot
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
add missing dot
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
remove steps not related to the issue
Make instructions work on worker nodes too
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
The current markdown text for the Windows introduction page is very
difficult for tracking changes. There are many paragraphs shown as a
single line. We need line breaks to ease the change tracking, especially
for localization teams. There are other nits related to indentation and
numbered lists. This PR is an attempt to reformat the page so that
future revisions can use it as an example.
Lubomir I. Ivanov
Kubernetes Prow Robot
Nitish Kumar
Jihoon Seo
Qiming Teng
vehagn
Dom Goodwin
afro-coder
Illia Oleksiuk
Lubomir I. Ivanov
Sean Wei
Mark Rossetti
Bob
Chris Short
Manish Kumar
xin.li
John Kwiatkoski
Ileriayo Adebiyi
Nate W
Shubham Kuchhal
Grootesque
Rey Lejano
Christopher Negus
serewicz
Mitesh Jain
Konstantinos Tsakalozos
Tim Bannister
Priyanshu Ahlawat
PriyanshuAhlawat
Jason Kim (Jun Chul Kim)
Jim Bugwadia
PranshuSrivastava
Paul "TBBle" Hampson
jeremy-morren
Darshna Das
Peri Thompson
Ayushman Mishra
dgengtek
Jesse Butler
SataQiu
ravisantoshgudimetla
Bridget Kromhout
Madhav Budhiraja
Yongzhi Pan
Falimonda
sandipanpanda
Vitthal Sai
Anatoliy Serputov
calvin
Chiranga Alwis
Pulkit Singh
EricWvi
Jimmy McCrory
Pushkar Joglekar
Ye Shu
Tedley Meralus
Victor Palade
Jihoon Seo
Giuseppe Scrivano
XinYang
Samuel Walker
Samuel Roth
basanaguk
Ray
vaibhav
Antoine Poliakov
pacoxu
Jim Angel
wangyysde