Skip to content

Commit 0d66540

Browse files
authored
Merge pull request #3576 from yogeek/patch-1
fix format in using-iam-roles-in-mgmt-cluster.md
2 parents 93897be + 1942929 commit 0d66540

File tree

1 file changed

+21
-15
lines changed

1 file changed

+21
-15
lines changed

docs/book/src/topics/using-iam-roles-in-mgmt-cluster.md

Lines changed: 21 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -30,18 +30,24 @@ Create a management cluster which uses instance profiles (IAM roles) attached to
3030
Since only control-plane nodes have the required IAM roles attached, CAPA deployment should have the necessary tolerations for master (control-plane) node and node selector for master.
3131
> **Note:** A cluster with a single control plane node won’t be sufficient here due to the `NoSchedule` taint.
3232
33-
3. Get the kubeconfig for the new target management cluster(created in previous step) once it is up and running.
34-
4. Zero the credentials CAPA controller started with, such that target management cluster uses empty credentials and not the previous credentials used to create bootstrap cluster using:
35-
```bash
36-
clusterawsadm controller zero-credentials --namespace=capa-system
37-
```
38-
For more details, please refer [zero-credentials doc](https://cluster-api-aws.sigs.k8s.io/clusterawsadm/clusterawsadm_controller_zero-credentials.html).
39-
5. Rollout and restart on capa-controller-manager deployment using:
40-
```bash
41-
clusterawsadm controller rollout-controller --kubeconfig=kubeconfig --namespace=capa-system
42-
```
43-
For more details, please refer [rollout-controller doc](https://cluster-api-aws.sigs.k8s.io/clusterawsadm/clusterawsadm_controller_rollout-controller.html).
44-
6. Use `clusterctl init` with the new cluster’s kubeconfig to install the provider components. For more details on preparing for init, please refer [clusterctl init doc](https://cluster-api.sigs.k8s.io/clusterctl/commands/init.html).
45-
7. Use `clusterctl move` to move the Cluster API resources from the bootstrap cluster to the target management cluster. For more details on preparing for move, please refer [clusterctl move doc](https://cluster-api.sigs.k8s.io/clusterctl/commands/move.html).
46-
8. Once the resources are moved to target management cluster successfully, `capa-manager-bootstrap-credentials` will be created as nil, and hence CAPA controllers will fall back to use the attached instance profiles.
47-
9. Delete the bootstrap cluster with the AWS credentials.
33+
2. Get the kubeconfig for the new target management cluster(created in previous step) once it is up and running.
34+
35+
3. Zero the credentials CAPA controller started with, such that target management cluster uses empty credentials and not the previous credentials used to create bootstrap cluster using:
36+
```bash
37+
clusterawsadm controller zero-credentials --namespace=capa-system
38+
```
39+
For more details, please refer [zero-credentials doc](https://cluster-api-aws.sigs.k8s.io/clusterawsadm/clusterawsadm_controller_zero-credentials.html).
40+
41+
4. Rollout and restart on capa-controller-manager deployment using:
42+
```bash
43+
clusterawsadm controller rollout-controller --kubeconfig=kubeconfig --namespace=capa-system
44+
```
45+
For more details, please refer [rollout-controller doc](https://cluster-api-aws.sigs.k8s.io/clusterawsadm/clusterawsadm_controller_rollout-controller.html).
46+
47+
5. Use `clusterctl init` with the new cluster’s kubeconfig to install the provider components. For more details on preparing for init, please refer [clusterctl init doc](https://cluster-api.sigs.k8s.io/clusterctl/commands/init.html).
48+
49+
6. Use `clusterctl move` to move the Cluster API resources from the bootstrap cluster to the target management cluster. For more details on preparing for move, please refer [clusterctl move doc](https://cluster-api.sigs.k8s.io/clusterctl/commands/move.html).
50+
51+
7. Once the resources are moved to target management cluster successfully, `capa-manager-bootstrap-credentials` will be created as nil, and hence CAPA controllers will fall back to use the attached instance profiles.
52+
53+
8. Delete the bootstrap cluster with the AWS credentials.

0 commit comments

Comments
 (0)