Skip to content

Commit 661acac

Browse files
committed
setup-ha-etcd-with-kubeadm.md: add missing authn/authz fields
The kubelet is run in standalone mode and these fields are required so that the config is accepted. In this guide the kubelet is only used as a service manager. Note that while the authz mode is AlwaysAllow, anonymous and webhook authn are disabled.
1 parent c799322 commit 661acac

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,13 @@ on Kubernetes dual-stack support see [Dual-stack support with kubeadm](/docs/set
6969
#
7070
apiVersion: kubelet.config.k8s.io/v1beta1
7171
kind: KubeletConfiguration
72+
authentication:
73+
anonymous:
74+
enabled: false
75+
webhook:
76+
enabled: false
77+
authorization:
78+
mode: AlwaysAllow
7279
cgroupDriver: systemd
7380
address: 127.0.0.1
7481
containerRuntimeEndpoint: unix:///var/run/containerd/containerd.sock
@@ -298,7 +305,7 @@ on Kubernetes dual-stack support see [Dual-stack support with kubeadm](/docs/set
298305
https://[HOST1 IP]:2379 is healthy: successfully committed proposal: took = 19.44402ms
299306
https://[HOST2 IP]:2379 is healthy: successfully committed proposal: took = 35.926451ms
300307
```
301-
308+
302309
- Set `${HOST0}`to the IP address of the host you are testing.
303310
304311

0 commit comments

Comments
 (0)