Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ZH-trans: add kubeadm_alpha_phase_bootstrap-token_node_allow-post-csrs.md #12039

Merged
merged 2 commits into from
Jan 7, 2019
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,99 @@

配置 RBAC 允许节点引导令牌发布 CSR,以便节点获得长期证书凭据
tengqm marked this conversation as resolved.
Show resolved Hide resolved
<!--
Configures RBAC to allow node bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
-->

<!--
### Synopsis
-->

### 概要

<!--
Configures RBAC rules to allow node bootstrap tokens to post a certificate signing request, thus enabling nodes joining the cluster to request long term certificate credentials.
-->
配置 RBAC 规则,允许节点引导令牌发布证书签名请求,从而允许加入集群的节点请求长期证书凭据。
tengqm marked this conversation as resolved.
Show resolved Hide resolved

<!--
See online documentation about TLS bootstrapping for more details.
-->
有关更多详细信息,请参阅有关 TLS 引导的联机文档。

<!--
Alpha Disclaimer: this command is currently alpha.
-->
Alpha 免责声明:此命令目前属于 alpha 阶段。

```
kubeadm alpha phase bootstrap-token node allow-post-csrs [flags]
```

<!--
### Options
-->

### 选项

<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>

<tr>
<td colspan="2">-h, --help</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">allow-post-csrs 的帮助信息</td>
</tr>
<!--
<td></td><td style="line-height: 130%; word-wrap: break-word;">help for allow-post-csrs</td>
-->

</tbody>
</table>


<!--
### Options inherited from parent commands
-->

### 从父命令继承的选项

<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>

<tr>
<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值: "/etc/kubernetes/admin.conf"</td>
</tr>
<!--
<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
-->
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">用于和集群通信的 KubeConfig 文件。如果它没有被设置,那么 kubeadm 将会搜索一个已经存在于标准路径的 KubeConfig 文件。</td>
</tr>
<!--
<td></td><td style="line-height: 130%; word-wrap: break-word;">The KubeConfig file to use when talking to the cluster. If the flag is not set, a set of standard locations are searched for an existing KubeConfig file.</td>
-->

<tr>
<td colspan="2">--rootfs string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">[实验] 到'真实'主机根文件系统的路径。</td>
</tr>
<!--
<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-->

</tbody>
</table>