Skip to content

Commit f3248d9

Browse files
authored
Merge pull request #36137 from windsonsea/cluindex
[zh-cn] resync /concepts/cluster-administration/_index.md
2 parents 381209a + 92917a7 commit f3248d9

File tree

1 file changed

+66
-52
lines changed
  • content/zh-cn/docs/concepts/cluster-administration

1 file changed

+66
-52
lines changed

content/zh-cn/docs/concepts/cluster-administration/_index.md

Lines changed: 66 additions & 52 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,6 @@ description: >
66
关于创建和管理 Kubernetes 集群的底层细节。
77
no_list: true
88
---
9-
109
<!--
1110
title: Cluster Administration
1211
reviewers:
@@ -32,32 +31,40 @@ It assumes some familiarity with core Kubernetes [concepts](/docs/concepts/).
3231
<!--
3332
## Planning a cluster
3433
35-
See the guides in [Setup](/docs/setup/) for examples of how to plan, set up, and configure Kubernetes clusters. The solutions listed in this article are called *distros*.
36-
37-
Not all distros are actively maintained. Choose distros which have been tested with a recent version of Kubernetes.
38-
39-
Before choosing a guide, here are some considerations:
34+
See the guides in [Setup](/docs/setup/) for examples of how to plan, set up, and configure
35+
Kubernetes clusters. The solutions listed in this article are called *distros*.
4036
-->
4137
## 规划集群 {#planning-a-cluster}
4238

4339
查阅[安装](/zh-cn/docs/setup/)中的指导,获取如何规划、建立以及配置 Kubernetes
44-
集群的示例。本文所列的文章称为*发行版*
40+
集群的示例。本文所列的文章称为**发行版**
4541

4642
{{< note >}}
43+
<!--
44+
Not all distros are actively maintained. Choose distros which have been tested with a recent
45+
version of Kubernetes.
46+
-->
4747
并非所有发行版都是被积极维护的。
4848
请选择使用最近 Kubernetes 版本测试过的发行版。
4949
{{< /note >}}
5050

51+
<!--
52+
Before choosing a guide, here are some considerations:
53+
-->
5154
在选择一个指南前,有一些因素需要考虑:
5255

5356
<!--
54-
- Do you want to try out Kubernetes on your computer, or do you want to build a high-availability, multi-node cluster? Choose distros best suited for your needs.
55-
- Will you be using **a hosted Kubernetes cluster**, such as [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/), or **hosting your own cluster**?
56-
- Will your cluster be **on-premises**, or **in the cloud (IaaS)**? Kubernetes does not directly support hybrid clusters. Instead, you can set up multiple clusters.
57-
- **If you are configuring Kubernetes on-premises**, consider which [networking model](/docs/concepts/cluster-administration/networking/) fits best.
57+
- Do you want to try out Kubernetes on your computer, or do you want to build a high-availability,
58+
multi-node cluster? Choose distros best suited for your needs.
59+
- Will you be using **a hosted Kubernetes cluster**, such as
60+
[Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/), or **hosting your own cluster**?
61+
- Will your cluster be **on-premises**, or **in the cloud (IaaS)**? Kubernetes does not directly
62+
support hybrid clusters. Instead, you can set up multiple clusters.
63+
- **If you are configuring Kubernetes on-premises**, consider which
64+
[networking model](/docs/concepts/cluster-administration/networking/) fits best.
5865
- Will you be running Kubernetes on **"bare metal" hardware** or on **virtual machines (VMs)**?
59-
- Do you **want to run a cluster**, or do you expect to do **active development of Kubernetes project code**? If the
60-
latter, choose an actively-developed distro. Some distros only use binary releases, but
66+
- Do you **want to run a cluster**, or do you expect to do **active development of Kubernetes project code**?
67+
If the latter, choose an actively-developed distro. Some distros only use binary releases, but
6168
offer a greater variety of choices.
6269
- Familiarize yourself with the [components](/docs/concepts/overview/components/) needed to run a cluster.
6370
-->
@@ -67,9 +74,9 @@ Before choosing a guide, here are some considerations:
6774
这样的**被托管的 Kubernetes 集群**, 还是**管理你自己的集群**
6875
- 你的集群是在**本地**还是**云(IaaS)** 上?Kubernetes 不能直接支持混合集群。
6976
作为代替,你可以建立多个集群。
70-
- **如果你在本地配置 Kubernetes**需要考虑哪种
71-
[网络模型](/zh-cn/docs/concepts/cluster-administration/networking/)最适合。
72-
- 你的 Kubernetes 在**裸金属硬件**上还是**虚拟机(VMs** 上运行?
77+
- **如果你在本地配置 Kubernetes**
78+
需要考虑哪种[网络模型](/zh-cn/docs/concepts/cluster-administration/networking/)最适合。
79+
- 你的 Kubernetes 在**裸金属硬件**上还是**虚拟机(VM**上运行?
7380
- 你是想**运行一个集群**,还是打算**参与开发 Kubernetes 项目代码**
7481
如果是后者,请选择一个处于开发状态的发行版。
7582
某些发行版只提供二进制发布版,但提供更多的选择。
@@ -78,7 +85,7 @@ Before choosing a guide, here are some considerations:
7885
<!--
7986
## Managing a cluster
8087
81-
* Learn how to [manage nodes](/docs/concepts/nodes/node/).
88+
* Learn how to [manage nodes](/docs/concepts/architecture/nodes/).
8289
8390
* Learn how to set up and manage the [resource quota](/docs/concepts/policy/resource-quotas/) for shared clusters.
8491
-->
@@ -90,58 +97,65 @@ Before choosing a guide, here are some considerations:
9097

9198
<!--
9299
## Securing a cluster
93-
94-
* [Generate Certificates](/docs/tasks/administer-cluster/certificates/) describes the steps to generate certificates using different tool chains.
95-
* [Kubernetes Container Environment](/docs/concepts/containers/container-environment/) describes the environment for Kubelet managed containers on a Kubernetes node.
96-
* [Controlling Access to the Kubernetes API](/docs/reference/access-authn-authz/controlling-access/) describes how to set up permissions for users and service accounts.
97-
* [Authenticating](/docs/reference/access-authn-authz/authentication/) explains authentication in Kubernetes, including the various authentication options.
98-
* [Authorization](/docs/reference/access-authn-authz/authorization/) is separate from authentication, and controls how HTTP calls are handled.
99-
* [Using Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/) explains plug-ins which intercepts requests to the Kubernetes API server after authentication and authorization.
100-
* [Using Sysctls in a Kubernetes Cluster](/docs/concepts/cluster-administration/sysctl-cluster/) describes to an administrator how to use the `sysctl` command-line tool to set kernel parameters .
101-
* [Auditing](/docs/tasks/debug/debug-cluster/audit/) describes how to interact with Kubernetes' audit logs.
100+
* [Generate Certificates](/docs/tasks/administer-cluster/certificates/) describes the steps to
101+
generate certificates using different tool chains.
102+
* [Kubernetes Container Environment](/docs/concepts/containers/container-environment/) describes
103+
the environment for Kubelet managed containers on a Kubernetes node.
104+
* [Controlling Access to the Kubernetes API](/docs/concepts/security/controlling-access) describes
105+
how Kubernetes implements access control for its own API.
106+
* [Authenticating](/docs/reference/access-authn-authz/authentication/) explains authentication in
107+
Kubernetes, including the various authentication options.
108+
* [Authorization](/docs/reference/access-authn-authz/authorization/) is separate from
109+
authentication, and controls how HTTP calls are handled.
110+
* [Using Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/)
111+
explains plug-ins which intercepts requests to the Kubernetes API server after authentication
112+
and authorization.
113+
* [Using Sysctls in a Kubernetes Cluster](/docs/tasks/administer-cluster/sysctl-cluster/)
114+
describes to an administrator how to use the `sysctl` command-line tool to set kernel parameters.
115+
* [Auditing](/docs/tasks/debug/debug-cluster/audit/) describes how to interact with Kubernetes'
116+
audit logs.
102117
-->
103118
## 保护集群 {#securing-a-cluster}
104119

105-
* [生成证书](/zh-cn/docs/tasks/administer-cluster/certificates/)
106-
节描述了使用不同的工具链生成证书的步骤。
107-
* [Kubernetes 容器环境](/zh-cn/docs/concepts/containers/container-environment/)
108-
描述了 Kubernetes 节点上由 Kubelet 管理的容器的环境。
109-
* [控制到 Kubernetes API 的访问](/zh-cn/docs/concepts/security/controlling-access/)
110-
描述了如何为用户和 service accounts 建立权限许可。
111-
* [身份认证](/zh-cn/docs/reference/access-authn-authz/authentication/)
112-
节阐述了 Kubernetes 中的身份认证功能,包括许多认证选项。
113-
* [鉴权](/zh-cn/docs/reference/access-authn-authz/authorization/)
114-
与身份认证不同,用于控制如何处理 HTTP 请求。
115-
* [使用准入控制器](/zh-cn/docs/reference/access-authn-authz/admission-controllers)
116-
阐述了在认证和授权之后拦截到 Kubernetes API 服务的请求的插件。
117-
* [在 Kubernetes 集群中使用 Sysctls](/zh-cn/docs/tasks/administer-cluster/sysctl-cluster/)
120+
* [生成证书](/zh-cn/docs/tasks/administer-cluster/certificates/)描述了使用不同的工具链生成证书的步骤。
121+
* [Kubernetes 容器环境](/zh-cn/docs/concepts/containers/container-environment/)描述了
122+
Kubernetes 节点上由 Kubelet 管理的容器的环境。
123+
* [控制对 Kubernetes API 的访问](/zh-cn/docs/concepts/security/controlling-access/)描述了 Kubernetes
124+
如何为自己的 API 实现访问控制。
125+
* [身份认证](/zh-cn/docs/reference/access-authn-authz/authentication/)阐述了 Kubernetes
126+
中的身份认证功能,包括许多认证选项。
127+
* [鉴权](/zh-cn/docs/reference/access-authn-authz/authorization/)与身份认证不同,用于控制如何处理 HTTP 请求。
128+
* [使用准入控制器](/zh-cn/docs/reference/access-authn-authz/admission-controllers)阐述了在认证和授权之后拦截到
129+
Kubernetes API 服务的请求的插件。
130+
* [在 Kubernetes 集群中使用 sysctl](/zh-cn/docs/tasks/administer-cluster/sysctl-cluster/)
118131
描述了管理员如何使用 `sysctl` 命令行工具来设置内核参数。
119-
* [审计](/zh-cn/docs/tasks/debug/debug-cluster/audit/)
120-
描述了如何与 Kubernetes 的审计日志交互。
132+
* [审计](/zh-cn/docs/tasks/debug/debug-cluster/audit/)描述了如何与 Kubernetes 的审计日志交互。
121133

122134
<!--
123135
### Securing the kubelet
124136
125-
* [Master-Node communication](/docs/concepts/architecture/master-node-communication/)
137+
* [Control Plane-Node communication](/docs/concepts/architecture/control-plane-node-communication/)
126138
* [TLS bootstrapping](/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/)
127-
* [Kubelet authentication/authorization](/docs/admin/kubelet-authentication-authorization/)
139+
* [Kubelet authentication/authorization](/docs/reference/access-authn-authz/kubelet-authn-authz/)
128140
-->
129141
### 保护 kubelet {#securing-the-kubelet}
130142

131-
* [主控节点通信](/zh-cn/docs/concepts/architecture/control-plane-node-communication/)
132-
* [TLS 引导](/zh-cn/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/)
133-
* [Kubelet 认证/授权](/zh-cn/docs/reference/access-authn-authz/kubelet-authn-authz/)
143+
* [节点与控制面之间的通信](/zh-cn/docs/concepts/architecture/control-plane-node-communication/)
144+
* [TLS 启动引导](/zh-cn/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/)
145+
* [Kubelet 认证/鉴权](/zh-cn/docs/reference/access-authn-authz/kubelet-authn-authz/)
134146

135147
<!--
136148
## Optional Cluster Services
137149
138-
* [DNS Integration](/docs/concepts/services-networking/dns-pod-service/) describes how to resolve a DNS name directly to a Kubernetes service.
139-
* [Logging and Monitoring Cluster Activity](/docs/concepts/cluster-administration/logging/) explains how logging in Kubernetes works and how to implement it.
150+
* [DNS Integration](/docs/concepts/services-networking/dns-pod-service/) describes how to resolve
151+
a DNS name directly to a Kubernetes service.
152+
* [Logging and Monitoring Cluster Activity](/docs/concepts/cluster-administration/logging/)
153+
explains how logging in Kubernetes works and how to implement it.
140154
-->
141155
## 可选集群服务 {#optional-cluster-services}
142156

143-
* [DNS 集成](/zh-cn/docs/concepts/services-networking/dns-pod-service/)
144-
描述了如何将一个 DNS 名解析到一个 Kubernetes service。
145-
* [记录和监控集群活动](/zh-cn/docs/concepts/cluster-administration/logging/)
146-
阐述了 Kubernetes 的日志如何工作以及怎样实现。
157+
* [DNS 集成](/zh-cn/docs/concepts/services-networking/dns-pod-service/)描述了如何将一个 DNS
158+
名解析到一个 Kubernetes service。
159+
* [记录和监控集群活动](/zh-cn/docs/concepts/cluster-administration/logging/)阐述了 Kubernetes
160+
的日志如何工作以及怎样实现。
147161

0 commit comments

Comments
 (0)