@@ -13,7 +13,17 @@ Konnectivity 服务为控制平面提供集群通信的 TCP 级别代理。
13
13
14
14
## {{% heading "prerequisites" %}}
15
15
16
- {{< include "task-tutorial-prereqs.md" >}}
16
+ <!--
17
+ You need to have a Kubernetes cluster, and the kubectl command-line tool must
18
+ be configured to communicate with your cluster. It is recommended to run this
19
+ tutorial on a cluster with at least two nodes that are not acting as control
20
+ plane hosts. If you do not already have a cluster, you can create one by using
21
+ [minikube](https://minikube.sigs.k8s.io/docs/tutorials/multi_node/).
22
+ -->
23
+ 你需要有一个 Kubernetes 集群,并且 kubectl 命令可以与集群通信。
24
+ 建议在至少有两个不充当控制平面主机的节点的集群上运行本教程。
25
+ 如果你还没有集群,可以使用
26
+ [ minikube] ( https://minikube.sigs.k8s.io/docs/tutorials/multi_node/ ) 创建一个集群。
17
27
18
28
<!-- steps -->
19
29
<!--
@@ -32,15 +42,8 @@ You need to configure the API Server to use the Konnectivity service
32
42
and direct the network traffic to the cluster nodes:
33
43
34
44
1. Make sure that
35
- the `ServiceAccountTokenVolumeProjection` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
36
- is enabled. You can enable
37
- [service account token volume protection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
38
- by providing the following flags to the kube-apiserver:
39
- ```
40
- --service-account-issuer=api
41
- --service-account-signing-key-file=/etc/kubernetes/pki/sa.key
42
- --api-audiences=system:konnectivity-server
43
- ```
45
+ [Service Account Token Volume Projection](/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection)
46
+ feature enabled in your cluster. It is enabled by default since Kubernetes v1.20.
44
47
1. Create an egress configuration file such as `admin/konnectivity/egress-selector-configuration.yaml`.
45
48
1. Set the `--egress-selector-config-file` flag of the API Server to the path of
46
49
your API Server egress configuration file.
@@ -61,16 +64,8 @@ your API Server egress configuration file.
61
64
-->
62
65
你需要配置 API 服务器来使用 Konnectivity 服务,并将网络流量定向到集群节点:
63
66
64
- 1 . 确保 ` ServiceAccountTokenVolumeProjection `
65
- [ 特性门控] ( /zh/docs/reference/command-line-tools-reference/feature-gates/ )
66
- 被启用。你可以通过为 kube-apiserver 提供以下标志启用
67
- [ 服务账号令牌卷保护] ( /zh/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection ) :
68
-
69
- ```
70
- --service-account-issuer=api
71
- --service-account-signing-key-file=/etc/kubernetes/pki/sa.key
72
- --api-audiences=system:konnectivity-server
73
- ```
67
+ 确保[ 服务账号令牌卷投射] ( /zh/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection )
68
+ 特性被启用。该特性自 Kubernetes v1.20 起默认已被启用。
74
69
75
70
1 . 创建一个出站流量配置文件,比如 ` admin/konnectivity/egress-selector-configuration.yaml ` 。
76
71
1 . 将 API 服务器的 ` --egress-selector-config-file ` 参数设置为你的 API 服务器的
0 commit comments