Clever Geek Handbook

What is the "kube-system" namespace used for?

In the default openshift installation, there is an unused project called kube-system

. It seems like openshift-infra

for things like metrics, default

for router and registry, but openshift

for global templates.

What is used for the project kube-system

? I cannot find any documents on it.

+3


source to share


2 answers


kube-system

- namespace for objects created by the Kubernetes system.



Typically, this will comprise elements such as kube-dns

, kube-proxy

, kubernetes-dashboard

and others as fluentd, heapster, ingresses etc.

+7


source


kube-system

contains service accounts that are used to run kubernetes controllers. These service accounts grant significant permissions (for example, create containers). Since openshift is building on top of the top of the cube, we inherit the structure.



You should avoid putting anything "personal" in this namespace, because the cube thinks it "belongs" to the cube, and the permissions for the CAs inside are high enough.

+4


source






More articles:


All Articles