This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
soft:kubernetes [2019/07/14 14:03] phil created |
soft:kubernetes [2019/12/15 17:11] phil |
||
---|---|---|---|
Line 40: | Line 40: | ||
</ | </ | ||
- | ==== Join worker nodes with kubeadm ==== | + | ===== Join worker nodes with kubeadm |
TODO | TODO | ||
- | ==== Upgrade a cluster with kubeadm ==== | + | ===== Upgrade a cluster with kubeadm |
Read upgrade guide carrefully before upgrading ! Exemple of such notes: https:// | Read upgrade guide carrefully before upgrading ! Exemple of such notes: https:// | ||
Line 57: | Line 57: | ||
sudo apt-get install kubectl=$version kubelet=$version | sudo apt-get install kubectl=$version kubelet=$version | ||
sudo systemctl restart kubelet | sudo systemctl restart kubelet | ||
+ | sudo apt-mark hold kubectl kubelet kubeadm | ||
</ | </ | ||
- | On worker nodes: | + | On other control panes and on worker nodes: |
< | < | ||
Line 67: | Line 68: | ||
sudo apt-get install kubectl=$version kubelet=$version | sudo apt-get install kubectl=$version kubelet=$version | ||
sudo systemctl restart kubelet | sudo systemctl restart kubelet | ||
+ | sudo apt-mark hold kubectl kubelet kubeadm | ||
</ | </ | ||
+ | |||
+ | ===== Modify cluster configuration ===== | ||
+ | |||
+ | kubeadm write configuration in a configmap named // | ||
+ | |||
+ | Edit with: | ||
+ | |||
+ | < | ||
+ | kubectl -n kube-system edit configmap kubeadm-config | ||
+ | </ | ||
+ | |||
+ | Parameters for api-server, controllers etc, can be added to the // | ||
+ | |||
+ | < | ||
+ | kubeadm upgrade node | ||
+ | </ | ||
+ | |||
+ | This will write new static manifests to / | ||
+ | |||
+ | Example for securing a 1.16 cluster: | ||
+ | |||
+ | < | ||
+ | ClusterConfiguration: | ||
+ | apiServer: | ||
+ | extraArgs: | ||
+ | authorization-mode: | ||
+ | profiling: " | ||
+ | enable-admission-plugins: | ||
+ | </ | ||
+ |