Kubeadm (Alpha) Security Trade-Offs

With Kubernetes 1.4 sig-cluster-lifecycle released an alpha of kubeadm, a new utility we’ve been working on to make cluster bootstrapping as simple as possible for new users, but also provide tooling and infrastructure that can be used for production clusters. The initial goal was simple, install the bits (now delivered via new OS packages), one command to create a cluster: $ kubeadm init And one very short command to copy and paste to join nodes to the cluster: