What is the "kube-system" namespace for?
Solution 1
kube-system
is the namespace for objects created by the Kubernetes system.
Typically, this would contain pods like kube-dns
, kube-proxy
, kubernetes-dashboard
and stuff like fluentd, heapster, ingresses and so on.
Solution 2
kube-system
contains service accounts which are used to run the kubernetes controllers. These service accounts are granted significant permissions (create pods anywhere, for instance). Since openshift builds on top of kube, we inherit the structure.
You should avoid putting anything "personal" in that namespace since kube considers it to be "owned" by kube and the permissions for the SAs inside are quite high.
Comments
-
thisguy123 almost 2 years
In a default openshift install, there is an unused project titled
kube-system
. It seems likeopenshift-infra
is for things like metrics,default
is for the router and registry, andopenshift
is for global templates.What is the
kube-system
project used for though? I can't find any docs on it.