Search for a command to run...
Articles tagged with #kube-apiserver
TLS # generate TLS cert and key openssl command [ options ... ] [ parameters ... ] 1. TLS config files About TLS we will mainly focus on 3 levels/types encryption in this article. inside cluster communication (/etc/kubernetes/pki/*) client (kubect...
Previous Notes about the Apiserver request security we have shown two identities (node identity /etc/kubernetes/kubelet.conf and admin cluster identity ~/.kube/config ). Now we will talk about another identity, it is used for the Pods — ServiceAccoun...
1. Identity = kubeconfig Here the identity equals kubeconfig file Every kubeconfig file specifies: the certificate the client key the username (CN) the group (O) the cluster endpoint This determines: Who you are (identity) What you can do (R...
1. Logs Components level logs kubelet, kube-apiserver, kube-scheduler, kube-controller, etcd, kube-proxy ... Pod level logs generate by container 1.1 Log files The base path for logs is /var/log/ ComponentLog PathDescription kubelet/va...
Why Update etcd.yaml? In previous posts, we see we need to update the etcd.yaml file to make the restore work. And the reason for this step is related to kubelet working mechanism. Pod Reconciliation by kubelet: The etcd static pod is managed by the ...