From d0942d325597c5935dc140fe504e7d64fe06fb0f Mon Sep 17 00:00:00 2001 From: Erik Wilson Date: Wed, 17 Jul 2019 23:18:06 -0700 Subject: [PATCH] Update k3s docs for node registration --- content/k3s/latest/en/configuration/_index.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/content/k3s/latest/en/configuration/_index.md b/content/k3s/latest/en/configuration/_index.md index 3c7e4728f76..ad1a462c1c8 100644 --- a/content/k3s/latest/en/configuration/_index.md +++ b/content/k3s/latest/en/configuration/_index.md @@ -74,6 +74,15 @@ IMPORTANT. The VXLAN port on nodes should not be exposed to the world, it opens cluster network to accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472. +Node Registration +----------------- + +Agents will register with the server using the node cluster secret along with a randomly generated +password for the node, stored at `/var/lib/rancher/k3s/agent/node-password.txt`. The server will +store the passwords for individual nodes at `/var/lib/rancher/k3s/server/cred/node-passwd`, and any +subsequent attempts must use the same password. If the data directory of an agent is removed the +password file should be recreated for the agent, or the entry removed from the server. + Containerd and Docker ----------