Skip to content

Commit

Permalink
Update kubernetes.md
Browse files Browse the repository at this point in the history
Remove outdated info and fixed typo
  • Loading branch information
spdfnet authored Jul 25, 2022
1 parent deb23f7 commit bbff30e
Showing 1 changed file with 1 addition and 7 deletions.
8 changes: 1 addition & 7 deletions Documentation/kubernetes.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Thus, you will need to restrict access to this namespace if you wish to secure y

If you want to deploy `flannel` securely in a shared namespace or want more fine-grained control over the pods deployed in your cluster, you can use a 3rd-party admission controller like [Kubewarden](https://kubewarden.io). Kubewarden provides policies that can replace features of PodSecurityPolicy like [capabilities-psp-policy](https://github.com/kubewarden/capabilities-psp-policy) and [hostpaths-psp-policy](https://github.com/kubewarden/hostpaths-psp-policy).

Other options include [Kyverno](https://kyverno.io/policies/pod-security/) and [OPA Gatekeepere](https://github.com/open-policy-agent/gatekeeper).
Other options include [Kyverno](https://kyverno.io/policies/pod-security/) and [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper).
# Annotations

* `flannel.alpha.coreos.com/public-ip-overwrite`: Allows to overwrite the public IP of a node. Useful if the public IP can not determined from the node, e.G. because it is behind a NAT. It can be automatically set to a nodes `ExternalIP` using the [flannel-node-annotator](https://github.com/alvaroaleman/flannel-node-annotator)
Expand Down Expand Up @@ -57,12 +57,6 @@ As of Kubernetes v1.21, the [PodSecurityPolicy API was deprecated](https://kuber

If you still wish to use it, you can use `kube-flannel-psp.yaml` instead of `kube-flannel.yaml`. Please note that if you use a Kubernetes version >= 1.21, you will see a deprecation warning for the PodSecurityPolicy API.

## The flannel CNI plugin

The flannel CNI plugin can be found in the CNI plugins [repository](https://github.com/containernetworking/plugins). For additional details, see the [README](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel)

Kubernetes 1.6 requires CNI plugin version 0.5.1 or later.

# Troubleshooting

See [troubleshooting](troubleshooting.md)
Expand Down

0 comments on commit bbff30e

Please sign in to comment.