Skip to content

Commit 1b602e8

Browse files
committed
Update /docs/setup/independent/create-cluster-kubeadm.md for 1.8.
This introduction needed a couple of small tweaks to cover the `--discovery-token-ca-cert-hash` flag added in kubernetes/kubernetes#49520 and some version bumps.
1 parent b3cf89c commit 1b602e8

File tree

1 file changed

+18
-16
lines changed

1 file changed

+18
-16
lines changed

docs/setup/independent/create-cluster-kubeadm.md

Lines changed: 18 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -42,17 +42,16 @@ complete clusters:
4242
|--------|---------------
4343
| Command line UX | beta
4444
| Config file | alpha
45-
| Selfhosting | alpha
45+
| Self-hosting | alpha
4646
| `kubeadm alpha` commands | alpha
47-
| Implementation | alpha
47+
| Implementation | beta
4848

4949
The experience for the command line is currently in beta and we are trying hard
5050
not to change command line flags and break that flow. Other parts of the
51-
experience are still under active development. Specifically, kubeadm relies on
52-
some features (bootstrap tokens, cluster signing), that are still considered
53-
alpha. The implementation may change as the tool evolves to support even easier
54-
upgrades and high availability (HA). Any commands under `kubeadm alpha` (not
55-
documented here) are, of course, alpha.
51+
experience are still under active development. The implementation may change
52+
slightly as the tool evolves to support even easier upgrades and high
53+
availability (HA). Any commands under `kubeadm alpha` (not documented here)
54+
are, of course, alpha.
5655

5756
**Be sure to read the [limitations](#limitations)**. Specifically, configuring
5857
cloud providers is difficult.
@@ -128,7 +127,7 @@ The output should look like:
128127

129128
```
130129
[kubeadm] WARNING: kubeadm is in beta, please do not use it for production clusters.
131-
[init] Using Kubernetes version: v1.7.0
130+
[init] Using Kubernetes version: v1.8.0
132131
[init] Using Authorization modes: [Node RBAC]
133132
[preflight] Running pre-flight checks
134133
[preflight] Starting the kubelet service
@@ -166,7 +165,7 @@ Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
166165
You can now join any number of machines by running the following on each node
167166
as root:
168167
169-
kubeadm join --token <token> <master-ip>:<master-port>
168+
kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>
170169
```
171170

172171
Make a record of the `kubeadm join` command that `kubeadm init` outputs. You
@@ -325,7 +324,7 @@ The nodes are where your workloads (containers and pods, etc) run. To add new no
325324
* Run the command that was output by `kubeadm init`. For example:
326325

327326
``` bash
328-
kubeadm join --token <token> <master-ip>:<master-port>
327+
kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>
329328
```
330329

331330
The output should look something like:
@@ -335,9 +334,10 @@ The output should look something like:
335334
[preflight] Running pre-flight checks
336335
[discovery] Trying to connect to API Server "10.138.0.4:6443"
337336
[discovery] Created cluster-info discovery client, requesting info from "https://10.138.0.4:6443"
338-
[discovery] Cluster info signature and contents are valid, will use API Server "https://10.138.0.4:6443"
337+
[discovery] Requesting info from "https://10.138.0.4:6443" again to validate TLS against the pinned public key
338+
[discovery] Cluster info signature and contents are valid and TLS certificate validates against pinned roots, will use API Server "10.138.0.4:6443"
339339
[discovery] Successfully established connection with API Server "10.138.0.4:6443"
340-
[bootstrap] Detected server version: v1.7.0
340+
[bootstrap] Detected server version: v1.8.0
341341
[bootstrap] The server supports the Certificates API (certificates.k8s.io/v1beta1)
342342
[csr] Created API client to obtain unique certificate for this node, generating keys and certificate signing request
343343
[csr] Received signed certificate from the API server, generating KubeConfig...
@@ -449,8 +449,10 @@ appropriate arguments.
449449

450450
## Upgrading
451451

452-
Instructions for upgrading kubeadm clusters can be found
453-
[here](/docs/tasks/administer-cluster/kubeadm-upgrade-1-7/).
452+
Instructions for upgrading kubeadm clusters are available for:
453+
454+
* [1.7.x->1.7.y upgrades](/docs/tasks/administer-cluster/kubeadm-upgrade-1-7/)
455+
* [1.7.x->1.8.y and 1.8.x->1.8.y upgrades](/docs/tasks/administer-cluster/kubeadm-upgrade-1-8/)
454456

455457
## Explore other add-ons
456458

@@ -484,8 +486,8 @@ kubeadm CLI vX.Y can also upgrade an existing kubeadm-created cluster of version
484486

485487
Due to that we can't see into the future, kubeadm CLI vX.Y may or may not be able to deploy vX.(Y+1) clusters.
486488

487-
Example: kubeadm v1.7 can deploy both v1.6 and v1.7 clusters and upgrade v1.6 kubeadm-created clusters to
488-
v1.7.
489+
Example: kubeadm v1.8 can deploy both v1.7 and v1.8 clusters and upgrade v1.7 kubeadm-created clusters to
490+
v1.8.
489491

490492
## kubeadm is multi-platform {#multi-platform}
491493

0 commit comments

Comments
 (0)