Skip to content

Commit 807afaf

Browse files
lab8-bootstrapping-kubernetes-controllers.md (#2638)
Grammar check
1 parent d66eb37 commit 807afaf

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

docs/labs/kubernetes-the-hard-way/lab8-bootstrapping-kubernetes-controllers.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
author: Wale Soyinka
3-
contributors: Steven Spencer
3+
contributors: Steven Spencer, Ganna Zhyrnova
44
tags:
55
- kubernetes
66
- k8s
@@ -12,9 +12,9 @@ tags:
1212

1313
# Lab 8: Bootstrapping the Kubernetes Control Plane
1414

15-
> This is a fork of the original ["Kubernetes the hard way"](https://github.com/kelseyhightower/kubernetes-the-hard-way) originally written by Kelsey Hightower (GitHub: kelseyhightower). Unlike the original that bases itself on Debian like distributions for the ARM64 architecture, this fork targets Enterprise Linux distributions such as Rocky Linux running on x86_64 architecture.
15+
> This is a fork of the original ["Kubernetes the hard way"](https://github.com/kelseyhightower/kubernetes-the-hard-way) originally written by Kelsey Hightower (GitHub: kelseyhightower). Unlike the original, which bases itself on Debian-like distributions for the ARM64 architecture, this fork targets Enterprise Linux distributions such as Rocky Linux, which runs on x86_64 architecture.
1616
17-
In this lab you will bootstrap the Kubernetes control plane. You will install the following components on the controller machine: Kubernetes API Server, Scheduler, and Controller Manager.
17+
In this lab, you will bootstrap the Kubernetes control plane. You will install the following components on the controller machine: Kubernetes API Server, Scheduler, and Controller Manager.
1818

1919
## Prerequisites
2020

@@ -141,17 +141,17 @@ Kubernetes control plane is running at https://127.0.0.1:6443
141141

142142
## RBAC for Kubelet Authorization
143143

144-
In this section you will configure RBAC permissions to allow the Kubernetes API Server to access the Kubelet API on each worker node. Access to the Kubelet API is required for retrieving metrics, logs, and executing commands in pods.
144+
In this section, you will configure RBAC permissions to allow the Kubernetes API Server to access the Kubelet API on each worker node. Access to the Kubelet API is required to retrieve metrics and logs and execute commands in pods.
145145

146146
> This tutorial sets the Kubelet `--authorization-mode` flag to `Webhook`. `Webhook` mode uses the [SubjectAccessReview](https://kubernetes.io/docs/admin/authorization/#checking-api-access) API to determine authorization.
147147
148-
Run the commands in this section on the controller node, which will affect the entire cluster.
148+
Run the commands in this section on the controller node, affecting the entire cluster.
149149

150150
```bash
151151
ssh root@server
152152
```
153153

154-
Create the `system:kube-apiserver-to-kubelet` [ClusterRole](https://kubernetes.io/docs/admin/authorization/rbac/#role-and-clusterrole) with permissions to access the Kubelet API and perform most common tasks associated with managing pods:
154+
Create the `system:kube-apiserver-to-kubelet` [ClusterRole](https://kubernetes.io/docs/admin/authorization/rbac/#role-and-clusterrole) with permissions to access the Kubelet API and perform the most common tasks associated with managing pods:
155155

156156
```bash
157157
kubectl apply -f kube-apiserver-to-kubelet.yaml \
@@ -160,9 +160,9 @@ kubectl apply -f kube-apiserver-to-kubelet.yaml \
160160

161161
### RBAC Verification
162162

163-
At this point the Kubernetes control plane is up and running. Run the following commands from the `jumpbox` machine to verify it is working:
163+
At this point, the Kubernetes control plane is up and running. Run the following commands from the `jumpbox` machine to verify it is working:
164164

165-
Make a HTTP request for the Kubernetes version info:
165+
Make an HTTP request for the Kubernetes version info:
166166

167167
```bash
168168
curl -k --cacert ca.crt https://server.kubernetes.local:6443/version

0 commit comments

Comments
 (0)