kubeadm

I'm pretty new in kubernetes, I just install kubernetes via kubeadm and run dashboard UI but can't config access to it. Following docs I add line --basic-auth-file=/etc/kubernetes/auth.csv to /etc/kubernetes/manifests/kube-apiserver.yaml, create file and put in one string like pass,admin,admin . But after that api server crashed and back to normal after deleting this string and reboot the server. How I can pass this parametr to api server without api server crashing, and maybe something else need add or remove from this file? Here is my kube-apiserver.yaml apiVersion: v1 kind: Pod metadata:

i installed kubernetes via kubeadm under the 1.9 and upgraded it to 1.10.0 a while back using kubeadm upgrade . i'm quite happy with 1.10.x and don't want to deal with potential issues with upgrading to anything newer just yet. So i would like to upgrade to 1.10.11. i tried $ kubeadm upgrade plan v1.10.11 [preflight] Running pre-flight checks. [upgrade] Making sure the cluster is healthy: [upgrade/config] Making sure the configuration is correct: [upgrade/config] Reading configuration from the cluster... [upgrade/config] FYI: You can look at this config file with 'kubectl -n kube-system get cm

When we use kubeadm to set up a k8s cluster, there are two options to config: --pod-network-cidr --service-cidr (default ‘10.96.0.0/12’) Question is: If I use 10.244.0.0./12 for pod-network-cidr , do I need to save that IP range for Kubernetes? What happens if we already start to use 10.244.0.0/12 for other machines. Can I set service-cidr and the pod-network-cidr the same range? I don't understand how service-cidr works. To reply briefly: You do have to reserve both the pod-network range and the service network range. You can't use those on your LAN (and you can't have routes to it). Both

I'm pretty new to Kubernetes and clusters so this might be very simple. I set up a Kubernetes cluster with 5 nodes using kubeadm following this guide . I got some issues but it all worked in the end. So now I want to install the Web UI (Dashboard) . To do so I need to set up authentication: Please note, this works only if the apiserver is set up to allow authentication with username and password. This is not currently the case with the some setup tools (e.g., kubeadm). Refer to the authentication admin documentation for information on how to configure authentication manually. So I got to read

Configuration for cgroup driver is right in /etc/systemd/system/kubelet.service.d/10-kubeadm.conf Environment="KUBELET_CGROUP_ARGS=--cgroup-driver=systemd" I also checked the Environment with cli $ systemctl show --property=Environment kubelet | cat Environment=KUBELET_KUBECONFIG_ARGS=--kubeconfig=/etc/kubernetes/kubelet.conf\x20--require-kubeconfig=true KUBELET_SYSTEM_PODS_ARGS=--pod-manifest-path=/etc/kubernetes/manifests\x20--allow-privileged=true KUBELET_NETWORK_ARGS=--network-plugin=cni\x20--cni-conf-dir=/etc/cni/net.d\x20--cni-bin-dir=/opt/cni/bin KUBELET_DNS_ARGS=--cluster-dns=10.96.0