Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
李少辉-开发者
gitlab-foss
提交
528b060b
G
gitlab-foss
项目概览
李少辉-开发者
/
gitlab-foss
通知
15
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
G
gitlab-foss
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
未验证
提交
528b060b
编写于
9月 14, 2018
作者:
A
Achilleas Pipinellis
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Copyedit RBAC clusters docs
上级
2521e734
变更
1
显示空白变更内容
内联
并排
Showing
1 changed file
with
11 addition
and
11 deletion
+11
-11
doc/user/project/clusters/index.md
doc/user/project/clusters/index.md
+11
-11
未找到文件。
doc/user/project/clusters/index.md
浏览文件 @
528b060b
...
...
@@ -129,7 +129,7 @@ When GitLab creates the cluster, it enables and uses the legacy
The newer
[
RBAC
](
https://kubernetes.io/docs/admin/authorization/rbac/
)
authorization is
[
experimental
](
#role-based-access-control-rbac
)
.
### Role-based access control (RBAC)
### Role-based access control (RBAC)
**[CORE ONLY]**
> [Introduced](https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/21401) in GitLab 11.4.
...
...
@@ -143,6 +143,7 @@ and privileges in order to install and run [GitLab managed applications](#instal
To enable the feature flag:
1.
SSH into the server where GitLab is installed.
1.
Enter the Rails console:
**For Omnibus GitLab**
...
...
@@ -165,22 +166,21 @@ To enable the feature flag:
If you are creating a
[
new GKE cluster via
GitLab
](
#adding-and-creating-a-new-gke-cluster-via-gitlab
)
, you will be
asked if you would like to create a RBAC-enabled cluster. Enabling this
asked if you would like to create a
n
RBAC-enabled cluster. Enabling this
setting will create a
`gitlab`
service account which will be used by
GitLab to manage the newly created cluster. To enable this, this service
account will have the
`cluster-admin`
privilege.
If you are
[
adding an existing Kubernetes
cluster
](
#adding-an-existing-kubernetes-cluster
)
, you will be asked if
the cluster you are adding is a RBAC-enabled cluster.
Please e
nsure the
the cluster you are adding is a RBAC-enabled cluster.
E
nsure the
token of the account has administrator privileges for the cluster.
A RBAC-enabled cluster in both cases
will create a
`tiller`
service account, with
`cluster-admin`
privilege, in the
`gitlab-managed-apps`
namespace when you install Helm Tiller into your cluster.
This service account will be added to the installed Helm Tiller
and will be used by Helm to install and run
[
GitLab managed
applications
](
#installing-applications
)
.
In both cases above, when you install Helm Tiller into your cluster, an
RBAC-enabled cluster will create a
`tiller`
service account, with
`cluster-admin`
privileges in the
`gitlab-managed-apps`
namespace. This service account will be
added to the installed Helm Tiller and will be used by Helm to install and run
[
GitLab managed applications
](
#installing-applications
)
.
The table below summarizes which resources will be created in a
RBAC-enabled cluster :
...
...
@@ -195,8 +195,8 @@ RBAC-enabled cluster :
Helm Tiller will also create additional service accounts and other RBAC
resources for each installed application.
Please consult
the
documentation for the
Helm charts for each application for details.
resources for each installed application.
Consult the documentation for
the
Helm charts for each application for details.
NOTE:
**Note:**
Auto DevOps will not successfully complete in a cluster that only has RBAC
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录