You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CONTRIBUTING.md
-1
Original file line number
Diff line number
Diff line change
@@ -44,4 +44,3 @@ Vagrant with VirtualBox or libvirt driver helps you to quickly spin test cluster
44
44
6. Sign the CNCF CLA (<https://git.k8s.io/community/CLA.md#the-contributor-license-agreement>)
45
45
7. Submit a pull request.
46
46
8. Work with the reviewers on their suggestions.
47
-
9. Ensure to rebase to the HEAD of your target branch and squash un-necessary commits (<https://blog.carbonfive.com/always-squash-and-rebase-your-git-commits/>) before final merger of your contribution.
Copy file name to clipboardExpand all lines: README.md
+3-8
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@
5
5
If you have questions, check the documentation at [kubespray.io](https://kubespray.io) and join us on the [kubernetes slack](https://kubernetes.slack.com), channel **\#kubespray**.
6
6
You can get your invite [here](http://slack.k8s.io/)
7
7
8
-
- Can be deployed on **[AWS](docs/cloud_providers/aws.md), GCE, [Azure](docs/cloud_providers/azure.md), [OpenStack](docs/cloud_controllers/openstack.md), [vSphere](docs/cloud_controllers/vsphere.md), [Equinix Metal](docs/cloud_providers/equinix-metal.md) (bare metal), Oracle Cloud Infrastructure (Experimental), or Baremetal**
8
+
- Can be deployed on **[AWS](docs/cloud_providers/aws.md), GCE, [Azure](docs/cloud_providers/azure.md), [OpenStack](docs/cloud_controllers/openstack.md), [vSphere](docs/cloud_controllers/vsphere.md), Oracle Cloud Infrastructure (Experimental), or Baremetal**
9
9
-**Highly available** cluster
10
10
-**Composable** (Choice of the network plugin for instance)
@@ -183,9 +182,6 @@ You can choose among ten network plugins. (default: `calico`, except Vagrant use
183
182
184
183
-[cilium](http://docs.cilium.io/en/latest/): layer 3/4 networking (as well as layer 7 to protect and secure application protocols), supports dynamic insertion of BPF bytecode into the Linux kernel to implement security services, networking and visibility logic.
185
184
186
-
-[weave](docs/CNI/weave.md): Weave is a lightweight container overlay network that doesn't require an external K/V database cluster.
187
-
(Please refer to `weave`[troubleshooting documentation](https://www.weave.works/docs/net/latest/troubleshooting/)).
188
-
189
185
-[kube-ovn](docs/CNI/kube-ovn.md): Kube-OVN integrates the OVN-based Network Virtualization with Kubernetes. It offers an advanced Container Network Fabric for Enterprises.
190
186
191
187
-[kube-router](docs/CNI/kube-router.md): Kube-router is a L3 CNI for Kubernetes networking aiming to provide operational
@@ -197,7 +193,7 @@ You can choose among ten network plugins. (default: `calico`, except Vagrant use
197
193
198
194
-[multus](docs/CNI/multus.md): Multus is a meta CNI plugin that provides multiple network interface support to pods. For each interface Multus delegates CNI calls to secondary CNI plugins such as Calico, macvlan, etc.
199
195
200
-
-[custom_cni](roles/network-plugin/custom_cni/) : You can specify some manifests that will be applied to the clusters to bring you own CNI and use non-supported ones by Kubespray.
196
+
-[custom_cni](roles/network_plugin/custom_cni/) : You can specify some manifests that will be applied to the clusters to bring you own CNI and use non-supported ones by Kubespray.
201
197
See `tests/files/custom_cni/README.md` and `tests/files/custom_cni/values.yaml`for an example with a CNI provided by a Helm Chart.
202
198
203
199
The network plugin to use is defined by the variable `kube_network_plugin`. There is also an
@@ -212,7 +208,6 @@ See also [Network checker](docs/advanced/netcheck.md).
Try out your new Kubernetes cluster with the [Hello Kubernetes service](https://kubernetes.io/docs/tasks/access-application-cluster/service-access-application-cluster/).
and then open [http://localhost:12000/](http://localhost:12000/).
358
+
and then open <http://localhost:12000/>.
359
359
360
360
## Hubble metrics
361
361
@@ -380,7 +380,7 @@ Cilium relies on the kernel's BPF support, which is extremely fast at runtime bu
380
380
381
381
As a result, the Cilium DaemonSet pods can take a significant time to start, which scales with the number of nodes and endpoints in your cluster.
382
382
383
-
As part of cluster.yml, this DaemonSet is restarted, and Kubespray's [default timeouts for this operation](../roles/network_plugin/cilium/defaults/main.yml)
383
+
As part of cluster.yml, this DaemonSet is restarted, and Kubespray's [default timeouts for this operation](../../roles/network_plugin/cilium/defaults/main.yml)
384
384
are not appropriate for large clusters.
385
385
386
386
This means that you will likely want to update these timeouts to a value more in-line with your cluster's number of nodes and their respective CPU performance.
Copy file name to clipboardExpand all lines: docs/CNI/flannel.md
-2
Original file line number
Diff line number
Diff line change
@@ -4,8 +4,6 @@ Flannel is a network fabric for containers, designed for Kubernetes
4
4
5
5
Supported [backends](https://github.com/flannel-io/flannel/blob/master/Documentation/backends.md#wireguard): `vxlan`, `host-gw` and `wireguard`
6
6
7
-
**Warning:** You may encounter this [bug](https://github.com/coreos/flannel/pull/1282) with `VXLAN` backend, while waiting on a newer Flannel version the current workaround (`ethtool --offload flannel.1 rx off tx off`) is showcase in kubespray [networking test](tests/testcases/040_check-network-adv.yml:31).
8
-
9
7
## Verifying flannel install
10
8
11
9
* Flannel configuration file should have been created there
For further information about the vSphere CSI Driver, you can refer to the official [vSphere Cloud Provider documentation](https://cloud-provider-vsphere.sigs.k8s.io/container_storage_interface.html).
102
+
For further information about the vSphere CSI Driver, you can refer to the official [vSphere Cloud Provider documentation](https://cloud-provider-vsphere.sigs.k8s.io/).
Copy file name to clipboardExpand all lines: docs/ansible/ansible_collection.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -4,8 +4,8 @@ Kubespray can be installed as an [Ansible collection](https://docs.ansible.com/a
4
4
5
5
## Requirements
6
6
7
-
- An inventory file with the appropriate host groups. See the [README](../README.md#usage).
8
-
- A `group_vars` directory. These group variables **need** to match the appropriate variable names under `inventory/local/group_vars`. See the [README](../README.md#usage).
7
+
- An inventory file with the appropriate host groups. See the [README](../../README.md#usage).
8
+
- A `group_vars` directory. These group variables **need** to match the appropriate variable names under `inventory/local/group_vars`. See the [README](../../README.md#usage).
Copy file name to clipboardExpand all lines: docs/cloud_providers/azure.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -122,4 +122,4 @@ Use instance metadata service where possible
122
122
123
123
## Provisioning Azure with Resource Group Templates
124
124
125
-
You'll find Resource Group Templates and scripts to provision the required infrastructure to Azure in [*contrib/azurerm*](../contrib/azurerm/README.md)
125
+
You'll find Resource Group Templates and scripts to provision the required infrastructure to Azure in [*contrib/azurerm*](../../contrib/azurerm/README.md)
Copy file name to clipboardExpand all lines: docs/operations/encrypting-secret-data-at-rest.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -19,4 +19,4 @@ Alternatively you can use the values `identity`, `aesgcm`, `aescbc` or `kms`.
19
19
20
20
## Details about Secretbox
21
21
22
-
Secretbox uses [Poly1305](https://cr.yp.to/mac.html) as message-authentication code and [XSalsa20](https://www.xsalsa20.com/) as secret-key authenticated encryption and secret-key encryption.
22
+
Secretbox uses [Poly1305](https://cr.yp.to/mac.html) as message-authentication code and [XSalsa20](https://en.wikipedia.org/wiki/Salsa20#XSalsa20_with_192-bit_nonce) as secret-key authenticated encryption and secret-key encryption.
Copy file name to clipboardExpand all lines: docs/operations/hardening.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -128,7 +128,7 @@ Let's take a deep look to the resultant **kubernetes** configuration:
128
128
See <https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/> for more information on the subject.
129
129
* If you are installing **kubernetes** in an AppArmor-based OS (eg. Debian/Ubuntu) you can enable the `AppArmor` feature gate uncommenting the lines with the comment `# AppArmor-based OS` on top.
130
130
* The `kubelet_systemd_hardening`, both with `kubelet_secure_addresses` setup a minimal firewall on the system. To better understand how these variables work, here's an explanatory image:
0 commit comments