improve documentation about user account and connecting to API (#5415)
* improve documentation about user acct and connecting to API * fix lint
This commit is contained in:
parent
14b1cab5d2
commit
68c8c05775
2 changed files with 4 additions and 8 deletions
|
@ -85,13 +85,8 @@ More details on this process are in the [HA guide](ha-mode.md).
|
||||||
|
|
||||||
Kubespray permits connecting to the cluster remotely on any IP of any
|
Kubespray permits connecting to the cluster remotely on any IP of any
|
||||||
kube-master host on port 6443 by default. However, this requires
|
kube-master host on port 6443 by default. However, this requires
|
||||||
authentication. One could generate a kubeconfig based on one installed
|
authentication. One can get a kubeconfig from kube-master hosts
|
||||||
kube-master hosts (needs improvement) or connect with a username and password.
|
(see [below](#accessing-kubernetes-api)) or connect with a [username and password](vars.md#user-accounts).
|
||||||
By default, a user with admin rights is created, named `kube`.
|
|
||||||
The password can be viewed after deployment by looking at the file
|
|
||||||
`{{ credentials_dir }}/kube_user.creds` (`credentials_dir` is set to `{{ inventory_dir }}/credentials` by default). This contains a randomly generated
|
|
||||||
password. If you wish to set your own password, just precreate/modify this
|
|
||||||
file yourself.
|
|
||||||
|
|
||||||
For more information on kubeconfig and accessing a Kubernetes cluster, refer to
|
For more information on kubeconfig and accessing a Kubernetes cluster, refer to
|
||||||
the Kubernetes [documentation](https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
|
the Kubernetes [documentation](https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
|
||||||
|
@ -121,6 +116,7 @@ host and can optionally be configured on your ansible host by setting
|
||||||
|
|
||||||
- If `kubectl_localhost` enabled, `kubectl` will download onto `/usr/local/bin/` and setup with bash completion. A helper script `inventory/mycluster/artifacts/kubectl.sh` also created for setup with below `admin.conf`.
|
- If `kubectl_localhost` enabled, `kubectl` will download onto `/usr/local/bin/` and setup with bash completion. A helper script `inventory/mycluster/artifacts/kubectl.sh` also created for setup with below `admin.conf`.
|
||||||
- If `kubeconfig_localhost` enabled `admin.conf` will appear in the `inventory/mycluster/artifacts/` directory after deployment.
|
- If `kubeconfig_localhost` enabled `admin.conf` will appear in the `inventory/mycluster/artifacts/` directory after deployment.
|
||||||
|
- The location where these files are downloaded to can be configured via the `artifacts_dir` variable.
|
||||||
|
|
||||||
You can see a list of nodes by running the following commands:
|
You can see a list of nodes by running the following commands:
|
||||||
|
|
||||||
|
|
|
@ -183,7 +183,7 @@ in the form of dicts of key-value pairs of configuration parameters that will be
|
||||||
|
|
||||||
## User accounts
|
## User accounts
|
||||||
|
|
||||||
By default, a user with admin rights is created, named `kube`.
|
The variable `kube_basic_auth` is false by default, but if set to true, a user with admin rights is created, named `kube`.
|
||||||
The password can be viewed after deployment by looking at the file
|
The password can be viewed after deployment by looking at the file
|
||||||
`{{ credentials_dir }}/kube_user.creds` (`credentials_dir` is set to `{{ inventory_dir }}/credentials` by default). This contains a randomly generated
|
`{{ credentials_dir }}/kube_user.creds` (`credentials_dir` is set to `{{ inventory_dir }}/credentials` by default). This contains a randomly generated
|
||||||
password. If you wish to set your own password, just precreate/modify this
|
password. If you wish to set your own password, just precreate/modify this
|
||||||
|
|
Loading…
Reference in a new issue