备案敏感信息
This commit is contained in:
@ -7,7 +7,7 @@
|
||||
|
||||
http://mirrors.huaweicloud.com/centos-altarch/7.7.1908/isos/armhfp/CentOS-Userland-7-armv7hl-RaspberryPI-Minimal-4-1908-sda.raw.xz
|
||||
|
||||
* 从 raspberrypi 官网下载镜像烧录工具 Raspberry Pi Imager
|
||||
* 从 raspberrypi 下载镜像烧录工具 Raspberry Pi Imager
|
||||
|
||||
https://www.raspberrypi.org/downloads/
|
||||
|
||||
|
||||
@ -10,7 +10,7 @@ meta:
|
||||
|
||||
<AdSenseTitle/>
|
||||
|
||||
> 参考文档: Kubernetes官网文档 [Organizing Cluster Access Using kubeconfig Files](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/)、[Configure Access to Multiple Clusters](https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
|
||||
> 参考文档: Kubernetes文档 [Organizing Cluster Access Using kubeconfig Files](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/)、[Configure Access to Multiple Clusters](https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
|
||||
|
||||
`kubectl` 命令行工具从配置文件kubeconfig中查找用于调用 API Server 接口的信息:
|
||||
* 集群 cluster
|
||||
|
||||
@ -436,7 +436,7 @@ kubectl delete node demo-worker-x-x
|
||||
|
||||
> Ingress官方文档:https://kubernetes.io/docs/concepts/services-networking/ingress/
|
||||
>
|
||||
> Ingress Controllers官网介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
> Ingress Controllers介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
>
|
||||
> 本文中使用如下部署方式:https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#using-a-self-provisioned-edge
|
||||
>
|
||||
|
||||
@ -263,7 +263,7 @@ kubectl delete node demo-worker-x-x
|
||||
|
||||
> Ingress官方文档:https://kubernetes.io/docs/concepts/services-networking/ingress/
|
||||
>
|
||||
> Ingress Controllers官网介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
> Ingress Controllers介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
>
|
||||
> 本文中使用如下部署方式:https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#using-a-self-provisioned-edge
|
||||
>
|
||||
|
||||
@ -441,7 +441,7 @@ kubectl delete node demo-worker-x-x
|
||||
|
||||
> Ingress官方文档:https://kubernetes.io/docs/concepts/services-networking/ingress/
|
||||
>
|
||||
> Ingress Controllers官网介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
> Ingress Controllers介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
>
|
||||
> 本文中使用如下部署方式:https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#using-a-self-provisioned-edge
|
||||
>
|
||||
|
||||
@ -18,7 +18,7 @@ meta:
|
||||
|
||||
## 下载 docker-desktop
|
||||
|
||||
从 docker 官网下载 [docker-desktop](https://hub.docker.com/?overlay=onboarding),并完成安装
|
||||
从 docker 下载 [docker-desktop](https://hub.docker.com/?overlay=onboarding),并完成安装
|
||||
|
||||
## 启用 Kubernetes 集群
|
||||
|
||||
|
||||
@ -13,7 +13,7 @@ meta:
|
||||
参考文档:Info Q 文章 [Kubernetes 爆发严重漏洞:可能影响所有开源版本](https://www.infoq.cn/article/2lxylPOCU4cf9MR2S5fp)
|
||||
参考文档:51CTO 安全频道 [Kubernetes的严重漏洞将所有服务器暴露在DoS攻击面前!](http://netsecurity.51cto.com/art/201908/601671.htm)
|
||||
|
||||
参考文档: kubernetes 官网文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
参考文档: kubernetes 文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
|
||||
::: danger 严重漏洞
|
||||
* CVE-2019-9512 Ping Flood:攻击者向 HTTP/2 对等体 (peer) 发送连续 ping,导致对等体建立内部响应队列。这可能消耗过多 CPU 和内存——这取决于该数据的队列多高效,从而可能导致拒绝服务攻击。
|
||||
@ -35,7 +35,7 @@ Kubernetes 已经发布补丁以修复漏洞,建议所有管理员尽快升级
|
||||
* 您想要将其升级到最新的版本 kubernetes v1.15.3
|
||||
|
||||
::: tip
|
||||
www.kuboard.cn 是一款免费的基于 Kubernetes 的微服务管理界面,目前只能提供 kubernetes v1.15.0 / v1.15.1 / v1.15.2 到 kubernetes v1.15.3 的升级文档,其他版本的集群,请参考 kubernetes 官网文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
www.kuboard.cn 是一款免费的基于 Kubernetes 的微服务管理界面,目前只能提供 kubernetes v1.15.0 / v1.15.1 / v1.15.2 到 kubernetes v1.15.3 的升级文档,其他版本的集群,请参考 kubernetes 文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
:::
|
||||
|
||||
## 升级 kubeadm/kubelet/kubectl
|
||||
|
||||
@ -19,7 +19,7 @@ meta:
|
||||
|
||||
## 在客户端电脑安装 kubectl
|
||||
|
||||
Kubernetes 官网文档参照 [安装 kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/) 安装时,经常会失败,因为国内访问 google 的镜像仓库存在问题。
|
||||
Kubernetes 文档参照 [安装 kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/) 安装时,经常会失败,因为国内访问 google 的镜像仓库存在问题。
|
||||
|
||||
请参考下述内容,完成 kubectl 的安装
|
||||
|
||||
|
||||
@ -517,7 +517,7 @@ kubectl delete node demo-worker-x-x
|
||||
|
||||
<!-- > Ingress官方文档:https://kubernetes.io/docs/concepts/services-networking/ingress/
|
||||
>
|
||||
> Ingress Controllers官网介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
> Ingress Controllers介绍:https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/
|
||||
>
|
||||
> 本文中使用如下部署方式:https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#using-a-self-provisioned-edge
|
||||
>
|
||||
|
||||
@ -10,7 +10,7 @@ meta:
|
||||
|
||||
<AdSenseTitle/>
|
||||
|
||||
参考文档: kubernetes 官网文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
参考文档: kubernetes 文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
|
||||
|
||||
## 前提条件
|
||||
@ -19,7 +19,7 @@ meta:
|
||||
* 您想要将其升级到最新的版本 kubernetes v1.15.7
|
||||
|
||||
::: tip
|
||||
www.kuboard.cn 是一款免费的基于 Kubernetes 的微服务管理界面,目前只能提供 kubernetes v1.15.0 / v1.15.1 / v1.15.2 / v1.15.3 到 kubernetes v1.15.7 的升级文档,其他版本的集群,请参考 kubernetes 官网文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
www.kuboard.cn 是一款免费的基于 Kubernetes 的微服务管理界面,目前只能提供 kubernetes v1.15.0 / v1.15.1 / v1.15.2 / v1.15.3 到 kubernetes v1.15.7 的升级文档,其他版本的集群,请参考 kubernetes 文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
:::
|
||||
|
||||
## 升级 kubeadm/kubelet/kubectl
|
||||
|
||||
@ -11,7 +11,7 @@ meta:
|
||||
|
||||
<AdSenseTitle/>
|
||||
|
||||
参考文档: kubernetes 官网文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
参考文档: kubernetes 文档 [kubeadm upgrade](https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
|
||||
|
||||
**【漏洞详情】**
|
||||
|
||||
|
||||
Reference in New Issue
Block a user