kubevela
/
kubevela.github.io
mirror of https://github.com/kubevela/kubevela.github.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

doc: translate vela-prism (#790) 

Signed-off-by: qunqiang <wangqunqiang@gmail.com>
This commit is contained in:
王群强 2022-06-27 10:17:37 +08:00 committed by GitHub
parent 2ce68be410
commit f05565ec78
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
i18n/zh/docusaurus-plugin-content-docs/version-v1.4/reference/addons/vela-prism.md
View File

@ -2,48 +2,40 @@
title: Vela prism
---
## Install
## 安装插件
```shell
vela addon enable vela-prism
```
## Uninstall
## 卸载插件
```shell
vela addon disable vela-prism
```
## Introduction
## 介绍
**Prism** provides API Extensions to the core [KubeVela](https://github.com/kubevela/kubevela).
It works as a Kubernetes [Aggregated API Server](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/).
**Prism** 为 [KubeVela](https://github.com/kubevela/kubevela) 提供核心 API 扩展。 它以 Kubernetes [聚合 API 服务器](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)方式运行。
![PrismArch](https://raw.githubusercontent.com/kubevela/prism/master/hack/prism-arch.jpg)
![Prism 架构](https://raw.githubusercontent.com/kubevela/prism/master/hack/prism-arch.jpg)
## Modules
## 模块
### apiserver
The vela-prism is an apiserver which leverages the Kubernetes Aggregated API capability to provide native interface for users.
vela-prism 是一个 apiserver，它利用 Kubernetes Aggregated API 功能为用户提供原生接口。
#### ApplicationResourceTracker
The original ResourceTracker in KubeVela is one kind of cluster-scoped resource (for some history reasons), which makes it hard for cluster administrator to assign privilege.
The ApplicationResourceTracker is a kind of namespace-scoped resource, which works as a delegator to the original ResourceTracker.
It does not need extra storages but can project requests to ApplicationResourceTracker to underlying ResourceTrackers.
Therefore, it is possible for cluster administrator to assign ApplicationResourceTracker permissions to users.
KubeVela 中最初的 ResourceTracker 是一种集群范围的资源（由于某些历史原因），这使得集群管理员很难分配权限。 ApplicationResourceTracker 是一种命名空间范围的资源，它充当原始 ResourceTracker 的委托者。 它不需要额外的存储空间，但可以将 ApplicationResourceTracker 的请求投射到底层 ResourceTracker。 因此，集群管理员可以将 ApplicationResourceTracker 权限分配给用户。
After installing vela-prism in your cluster, you can run `kubectl get apprt` to view ResourceTrackers.
在集群中安装 vela-prism 后，您可以运行 `kubectl get app` 来查看 ResourceTracker。
#### Cluster
In vela-prism, Cluster API is also introduced which works as a delegator to the ClusterGateway object.
The original ClusterGateway object contains the credential information.
This makes the exposure of ClusterGateway access can be dangerous.
The Cluster object provided in prism, on the other hand, only expose metadata of clusters to accessor.
Therefore, the credential information will be secured and the user can also use the API to access the cluster list.
在 vela-prism 中，还引入了 Cluster API，它作为 ClusterGateway 对象的委托者。 原始 ClusterGateway 对象包含凭证信息。 这使得 ClusterGateway 访问的暴露可能是危险的。 另一方面，prism 中提供的 Cluster 对象只向访问者公开集群的元数据。 因此，凭证信息将得到保护，用户也可以使用 API 访问集群列表。
After installing vela-prism in your cluster, you can run `kubectl get vela-clusters` to view all the installed clusters.
在集群中安装 vela-prism 后，您可以运行 `kubectl get vela-clusters` 来查看所有已安装的集群。
> Notice that the vela-prism bootstrap parameter contains `--storage-namespace`, which identifies the underlying namespace for storing cluster secrets and the OCM managed cluster.
> 请注意，vela-prism 引导参数包含 `--storage-namespace`，它标识了用于存储集群 secrets 和 OCM 托管集群的底层命名空间。