hide some original comments in translate docs (#18986)

* hide original comment

* hide some original comments
This commit is contained in:
xieyanker
2020-02-06 14:49:33 +08:00
committed by GitHub
parent c5efcbef39
commit 67ca8d8e22
9 changed files with 123 additions and 66 deletions
@@ -431,6 +431,7 @@ parameters:
type: pd-standard type: pd-standard
replication-type: none replication-type: none
``` ```
<!-- <!--
* `type`: `pd-standard` or `pd-ssd`. Default: `pd-standard` * `type`: `pd-standard` or `pd-ssd`. Default: `pd-standard`
* `zone` (Deprecated): GCE zone. If neither `zone` nor `zones` is specified, volumes are * `zone` (Deprecated): GCE zone. If neither `zone` nor `zones` is specified, volumes are
@@ -518,6 +519,7 @@ parameters:
* `restauthenabled`Gluster REST 服务身份验证布尔值,用于启用对 REST 服务器的身份验证。如果此值为 'true',则必须填写 `restuser``restuserkey``secretNamespace` + `secretName`。此选项已弃用,当在指定 `restuser``restuserkey``secretName``secretNamespace` 时,身份验证被启用。 * `restauthenabled`Gluster REST 服务身份验证布尔值,用于启用对 REST 服务器的身份验证。如果此值为 'true',则必须填写 `restuser``restuserkey``secretNamespace` + `secretName`。此选项已弃用,当在指定 `restuser``restuserkey``secretName``secretNamespace` 时,身份验证被启用。
* `restuser`:在 Gluster 可信池中有权创建卷的 Gluster REST服务/Heketi 用户。 * `restuser`:在 Gluster 可信池中有权创建卷的 Gluster REST服务/Heketi 用户。
* `restuserkey`Gluster REST 服务/Heketi 用户的密码将被用于对 REST 服务器进行身份验证。此参数已弃用,取而代之的是 `secretNamespace` + `secretName` * `restuserkey`Gluster REST 服务/Heketi 用户的密码将被用于对 REST 服务器进行身份验证。此参数已弃用,取而代之的是 `secretNamespace` + `secretName`
<!-- <!--
* `secretNamespace`, `secretName` : Identification of Secret instance that * `secretNamespace`, `secretName` : Identification of Secret instance that
contains user password to use when talking to Gluster REST service. These contains user password to use when talking to Gluster REST service. These
@@ -544,6 +546,7 @@ parameters:
``` ```
secret 的例子可以在 [glusterfs-provisioning-secret.yaml](https://github.com/kubernetes/examples/tree/master/staging/persistent-volume-provisioning/glusterfs/glusterfs-secret.yaml) 中找到。 secret 的例子可以在 [glusterfs-provisioning-secret.yaml](https://github.com/kubernetes/examples/tree/master/staging/persistent-volume-provisioning/glusterfs/glusterfs-secret.yaml) 中找到。
<!-- <!--
* `clusterid`: `630372ccdc720a92c681fb928f27b53f` is the ID of the cluster * `clusterid`: `630372ccdc720a92c681fb928f27b53f` is the ID of the cluster
which will be used by Heketi when provisioning the volume. It can also be a which will be used by Heketi when provisioning the volume. It can also be a
@@ -559,6 +562,7 @@ parameters:
* `clusterid``630372ccdc720a92c681fb928f27b53f` 是集群的 ID,当分配卷时,Heketi 将会使用这个文件。它也可以是一个 clusterid 列表,例如: * `clusterid``630372ccdc720a92c681fb928f27b53f` 是集群的 ID,当分配卷时,Heketi 将会使用这个文件。它也可以是一个 clusterid 列表,例如:
`"8452344e2becec931ece4e33c4674e4e,42982310de6c63381718ccfa6d8cf397"`。这个是可选参数。 `"8452344e2becec931ece4e33c4674e4e,42982310de6c63381718ccfa6d8cf397"`。这个是可选参数。
* `gidMin``gidMax`storage class GID 范围的最小值和最大值。在此范围(gidMin-gidMax)内的唯一值(GID)将用于动态分配卷。这些是可选的值。如果不指定,卷将被分配一个 2000-2147483647 之间的值,这是 gidMin 和 gidMax 的默认值。 * `gidMin``gidMax`storage class GID 范围的最小值和最大值。在此范围(gidMin-gidMax)内的唯一值(GID)将用于动态分配卷。这些是可选的值。如果不指定,卷将被分配一个 2000-2147483647 之间的值,这是 gidMin 和 gidMax 的默认值。
<!-- <!--
* `volumetype` : The volume type and its parameters can be configured with this * `volumetype` : The volume type and its parameters can be configured with this
optional value. If the volume type is not mentioned, it's up to the provisioner optional value. If the volume type is not mentioned, it's up to the provisioner
@@ -766,6 +770,7 @@ parameters:
* `adminSecretNamespace``adminSecret` 的命名空间。默认是 "default"。 * `adminSecretNamespace``adminSecret` 的命名空间。默认是 "default"。
* `pool`: Ceph RBD 池. 默认是 "rbd"。 * `pool`: Ceph RBD 池. 默认是 "rbd"。
* `userId`:Ceph 客户端 ID,用于映射 RBD 镜像。默认与 `adminId` 相同。 * `userId`:Ceph 客户端 ID,用于映射 RBD 镜像。默认与 `adminId` 相同。
<!-- <!--
* `userSecretName`: The name of Ceph Secret for `userId` to map RBD image. It * `userSecretName`: The name of Ceph Secret for `userId` to map RBD image. It
must exist in the same namespace as PVCs. This parameter is required. must exist in the same namespace as PVCs. This parameter is required.
@@ -65,41 +65,48 @@ The following are typical use cases for Deployments:
--> -->
* [创建 Deployment 以展开 ReplicaSet ](#creating-a-deployment)。 ReplicaSet 在后台创建 Pods。检查 ReplicaSet 展开的状态,查看其是否成功。 * [创建 Deployment 以展开 ReplicaSet ](#creating-a-deployment)。 ReplicaSet 在后台创建 Pods。检查 ReplicaSet 展开的状态,查看其是否成功。
<!-- <!--
* [Declare the new state of the Pods](#updating-a-deployment) by updating the PodTemplateSpec of the Deployment. A new ReplicaSet is created and the Deployment manages moving the Pods from the old ReplicaSet to the new one at a controlled rate. Each new ReplicaSet updates the revision of the Deployment. * [Declare the new state of the Pods](#updating-a-deployment) by updating the PodTemplateSpec of the Deployment. A new ReplicaSet is created and the Deployment manages moving the Pods from the old ReplicaSet to the new one at a controlled rate. Each new ReplicaSet updates the revision of the Deployment.
--> -->
* [声明 Pod 的新状态](#updating-a-deployment) 通过更新 Deployment 的 PodTemplateSpec。将创建新的 ReplicaSet ,并且 Deployment 管理器以受控速率将 Pod 从旧 ReplicaSet 移动到新 ReplicaSet 。每个新的 ReplicaSet 都会更新 Deployment 的修改历史。 * [声明 Pod 的新状态](#updating-a-deployment) 通过更新 Deployment 的 PodTemplateSpec。将创建新的 ReplicaSet ,并且 Deployment 管理器以受控速率将 Pod 从旧 ReplicaSet 移动到新 ReplicaSet 。每个新的 ReplicaSet 都会更新 Deployment 的修改历史。
<!-- <!--
* [Rollback to an earlier Deployment revision](#rolling-back-a-deployment) if the current state of the Deployment is not stable. Each rollback updates the revision of the Deployment. * [Rollback to an earlier Deployment revision](#rolling-back-a-deployment) if the current state of the Deployment is not stable. Each rollback updates the revision of the Deployment.
--> -->
* [回滚到较早的 Deployment 版本](#rolling-back-a-deployment),如果 Deployment 的当前状态不稳定。每次回滚都会更新 Deployment 的修改。 * [回滚到较早的 Deployment 版本](#rolling-back-a-deployment),如果 Deployment 的当前状态不稳定。每次回滚都会更新 Deployment 的修改。
<!-- <!--
* [Scale up the Deployment to facilitate more load](#scaling-a-deployment). * [Scale up the Deployment to facilitate more load](#scaling-a-deployment).
--> -->
* [扩展 Deployment 以承担更多负载](#scaling-a-deployment). * [扩展 Deployment 以承担更多负载](#scaling-a-deployment).
<!-- <!--
* [Pause the Deployment](#pausing-and-resuming-a-deployment) to apply multiple fixes to its PodTemplateSpec and then resume it to start a new rollout. * [Pause the Deployment](#pausing-and-resuming-a-deployment) to apply multiple fixes to its PodTemplateSpec and then resume it to start a new rollout.
--> -->
* [暂停 Deployment ](#pausing-and-resuming-a-deployment) 对其 PodTemplateSpec 进行修改,然后恢复它以启动新的展开。 * [暂停 Deployment ](#pausing-and-resuming-a-deployment) 对其 PodTemplateSpec 进行修改,然后恢复它以启动新的展开。
<!-- <!--
* [Use the status of the Deployment](#deployment-status) as an indicator that a rollout has stuck. * [Use the status of the Deployment](#deployment-status) as an indicator that a rollout has stuck.
--> -->
* [使用 Deployment 状态](#deployment-status) 作为卡住展开的指示器。 * [使用 Deployment 状态](#deployment-status) 作为卡住展开的指示器。
<!-- <!--
* [Clean up older ReplicaSets](#clean-up-policy) that you don't need anymore. * [Clean up older ReplicaSets](#clean-up-policy) that you don't need anymore.
--> -->
* [清理较旧的 ReplicaSets ](#clean-up-policy) ,那些不在需要的。 * [清理较旧的 ReplicaSets ](#clean-up-policy) ,那些不在需要的。
<!-- <!--
## Creating a Deployment ## Creating a Deployment
--> -->
@@ -123,10 +130,12 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
* A Deployment named `nginx-deployment` is created, indicated by the `.metadata.name` field. * A Deployment named `nginx-deployment` is created, indicated by the `.metadata.name` field.
--> -->
* 将创建名为 `nginx-deployment` 的 Deployment ,由 `.metadata.name` 字段指示。 * 将创建名为 `nginx-deployment` 的 Deployment ,由 `.metadata.name` 字段指示。
<!-- <!--
* The Deployment creates three replicated Pods, indicated by the `replicas` field. * The Deployment creates three replicated Pods, indicated by the `replicas` field.
--> -->
* Deployment 创建三个复制的 Pods,由 `replicas` 字段指示。 * Deployment 创建三个复制的 Pods,由 `replicas` 字段指示。
<!-- <!--
* The `selector` field defines how the Deployment finds which Pods to manage. * The `selector` field defines how the Deployment finds which Pods to manage.
In this case, you simply select a label that is defined in the Pod template (`app: nginx`). In this case, you simply select a label that is defined in the Pod template (`app: nginx`).
@@ -149,16 +158,19 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
* The `template` field contains the following sub-fields: * The `template` field contains the following sub-fields:
--> -->
* `template` 字段包含以下子字段: * `template` 字段包含以下子字段:
<!-- <!--
* The Pods are labeled `app: nginx`using the `labels` field. * The Pods are labeled `app: nginx`using the `labels` field.
--> -->
* Pod 标记为`app: nginx`,使用`labels`字段。 * Pod 标记为`app: nginx`,使用`labels`字段。
<!-- <!--
* The Pod template's specification, or `.template.spec` field, indicates that * The Pod template's specification, or `.template.spec` field, indicates that
the Pods run one container, `nginx`, which runs the `nginx` the Pods run one container, `nginx`, which runs the `nginx`
[Docker Hub](https://hub.docker.com/) image at version 1.7.9. [Docker Hub](https://hub.docker.com/) image at version 1.7.9.
--> -->
* Pod 模板规范或 `.template.spec` 字段指示 Pods 运行一个容器, `nginx`,运行 `nginx` [Docker Hub](https://hub.docker.com/)版本1.7.9的镜像 。 * Pod 模板规范或 `.template.spec` 字段指示 Pods 运行一个容器, `nginx`,运行 `nginx` [Docker Hub](https://hub.docker.com/)版本1.7.9的镜像 。
<!-- <!--
* Create one container and name it `nginx` using the `name` field. * Create one container and name it `nginx` using the `name` field.
--> -->
@@ -206,6 +218,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
When you inspect the Deployments in your cluster, the following fields are displayed: When you inspect the Deployments in your cluster, the following fields are displayed:
--> -->
检查集群中的 Deployments 时,将显示以下字段: 检查集群中的 Deployments 时,将显示以下字段:
<!-- <!--
* `NAME` lists the names of the Deployments in the cluster. * `NAME` lists the names of the Deployments in the cluster.
* `DESIRED` displays the desired number of _replicas_ of the application, which you define when you create the Deployment. This is the _desired state_. * `DESIRED` displays the desired number of _replicas_ of the application, which you define when you create the Deployment. This is the _desired state_.
@@ -272,6 +285,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
nginx-deployment-75675f5897-kzszj 1/1 Running 0 18s app=nginx,pod-template-hash=3123191453 nginx-deployment-75675f5897-kzszj 1/1 Running 0 18s app=nginx,pod-template-hash=3123191453
nginx-deployment-75675f5897-qqcnn 1/1 Running 0 18s app=nginx,pod-template-hash=3123191453 nginx-deployment-75675f5897-qqcnn 1/1 Running 0 18s app=nginx,pod-template-hash=3123191453
``` ```
<!-- <!--
The created ReplicaSet ensures that there are three `nginx` Pods. The created ReplicaSet ensures that there are three `nginx` Pods.
--> -->
@@ -896,6 +910,7 @@ Follow the steps given below to rollback the Deployment from the current version
NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE
nginx-deployment 3 3 3 3 30m nginx-deployment 3 3 3 3 30m
``` ```
<!-- <!--
3. Get the description of the Deployment: 3. Get the description of the Deployment:
--> -->
@@ -956,6 +971,7 @@ Follow the steps given below to rollback the Deployment from the current version
--> -->
## 缩放 Deployment ## 缩放 Deployment
<!-- <!--
You can scale a Deployment by using the following command: You can scale a Deployment by using the following command:
--> -->
@@ -964,6 +980,7 @@ Follow the steps given below to rollback the Deployment from the current version
```shell ```shell
kubectl scale deployment.v1.apps/nginx-deployment --replicas=10 kubectl scale deployment.v1.apps/nginx-deployment --replicas=10
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -983,6 +1000,7 @@ Pods you want to run based on the CPU utilization of your existing Pods.
```shell ```shell
kubectl autoscale deployment.v1.apps/nginx-deployment --min=10 --max=15 --cpu-percent=80 kubectl autoscale deployment.v1.apps/nginx-deployment --min=10 --max=15 --cpu-percent=80
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1016,6 +1034,7 @@ ReplicaSets (ReplicaSets with Pods) in order to mitigate risk. This is called *p
```shell ```shell
kubectl get deploy kubectl get deploy
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1089,6 +1108,7 @@ kubectl get deploy
NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE
nginx-deployment 15 18 7 8 7m nginx-deployment 15 18 7 8 7m
``` ```
<!-- <!--
The rollout status confirms how the replicas were added to each ReplicaSet. The rollout status confirms how the replicas were added to each ReplicaSet.
--> -->
@@ -1135,6 +1155,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE
nginx 3 3 3 3 1m nginx 3 3 3 3 1m
``` ```
<!-- <!--
Get the rollout status: Get the rollout status:
--> -->
@@ -1142,6 +1163,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
```shell ```shell
kubectl get rs kubectl get rs
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1200,6 +1222,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
REVISION CHANGE-CAUSE REVISION CHANGE-CAUSE
1 <none> 1 <none>
``` ```
<!-- <!--
* Get the rollout status to ensure that the Deployment is updates successfully: * Get the rollout status to ensure that the Deployment is updates successfully:
--> -->
@@ -1283,6 +1306,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
nginx-2142116321 0 0 0 2m nginx-2142116321 0 0 0 2m
nginx-3926361531 3 3 3 20s nginx-3926361531 3 3 3 20s
``` ```
<!-- <!--
* Get the status of the latest rollout: * Get the status of the latest rollout:
--> -->
@@ -1317,6 +1341,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
rolling out a new ReplicaSet, it can be [complete](#complete-deployment), or it can [fail to progress](#failed-deployment). rolling out a new ReplicaSet, it can be [complete](#complete-deployment), or it can [fail to progress](#failed-deployment).
--> -->
一个 Deployment 的生命周期中会有许多状态。当正在生产新的 ReplicaSet 时可能是[正在运行](#progressing-deployment),可能是[已完成](#complete-deployment),也可能是[ Deployment 失败](#failed-deployment)。 一个 Deployment 的生命周期中会有许多状态。当正在生产新的 ReplicaSet 时可能是[正在运行](#progressing-deployment),可能是[已完成](#complete-deployment),也可能是[ Deployment 失败](#failed-deployment)。
<!-- <!--
### Progressing Deployment ### Progressing Deployment
--> -->
@@ -1358,10 +1383,12 @@ Kubernetes 将 Deployment 标记为 _完成_,当它具有以下特征时:
updates you've requested have been completed. updates you've requested have been completed.
--> -->
* 与 Deployment 关联的所有副本都已更新到指定的最新版本,这意味着请求的任何更新都已完成。 * 与 Deployment 关联的所有副本都已更新到指定的最新版本,这意味着请求的任何更新都已完成。
<!-- <!--
* All of the replicas associated with the Deployment are available. * All of the replicas associated with the Deployment are available.
--> -->
* 与 Deployment 关联的所有副本都可用。 * 与 Deployment 关联的所有副本都可用。
<!-- <!--
* No old replicas for the Deployment are running. * No old replicas for the Deployment are running.
--> -->
@@ -1376,6 +1403,7 @@ successfully, `kubectl rollout status` returns a zero exit code.
```shell ```shell
kubectl rollout status deployment.v1.apps/nginx-deployment kubectl rollout status deployment.v1.apps/nginx-deployment
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1396,7 +1424,7 @@ $ echo $?
Your Deployment may get stuck trying to deploy its newest ReplicaSet without ever completing. This can occur Your Deployment may get stuck trying to deploy its newest ReplicaSet without ever completing. This can occur
due to some of the following factors: due to some of the following factors:
--> -->
的 Deployment 可能会在未完成的情况下尝试 Deployment 其最新的 ReplicaSet 时遇到问题。可能发生此情况由于以下一些因素: 的 Deployment 可能会在未完成的情况下尝试 Deployment 其最新的 ReplicaSet 时遇到问题。可能发生此情况由于以下一些因素:
<!-- <!--
* Insufficient quota * Insufficient quota
@@ -1430,6 +1458,7 @@ lack of progress for a Deployment after 10 minutes:
```shell ```shell
kubectl patch deployment.v1.apps/nginx-deployment -p '{"spec":{"progressDeadlineSeconds":600}}' kubectl patch deployment.v1.apps/nginx-deployment -p '{"spec":{"progressDeadlineSeconds":600}}'
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1437,6 +1466,7 @@ kubectl patch deployment.v1.apps/nginx-deployment -p '{"spec":{"progressDeadline
``` ```
deployment.apps/nginx-deployment patched deployment.apps/nginx-deployment patched
``` ```
<!-- <!--
Once the deadline has been exceeded, the Deployment controller adds a DeploymentCondition with the following Once the deadline has been exceeded, the Deployment controller adds a DeploymentCondition with the following
attributes to the Deployment's `.status.conditions`: attributes to the Deployment's `.status.conditions`:
@@ -1480,6 +1510,7 @@ insufficient quota. If you describe the Deployment you will notice the following
```shell ```shell
kubectl describe deployment nginx-deployment kubectl describe deployment nginx-deployment
``` ```
<!-- <!--
The output is similar to this: The output is similar to this:
--> -->
@@ -1846,6 +1877,7 @@ a Pod is considered ready, see [Container Probes](/docs/concepts/workloads/pods/
Field `.spec.rollbackTo` has been deprecated in API versions `extensions/v1beta1` and `apps/v1beta1`, and is no longer supported in API versions starting `apps/v1beta2`. Instead, `kubectl rollout undo` as introduced in [Rolling Back to a Previous Revision](#rolling-back-to-a-previous-revision) should be used. Field `.spec.rollbackTo` has been deprecated in API versions `extensions/v1beta1` and `apps/v1beta1`, and is no longer supported in API versions starting `apps/v1beta2`. Instead, `kubectl rollout undo` as introduced in [Rolling Back to a Previous Revision](#rolling-back-to-a-previous-revision) should be used.
--> -->
`.spec.rollbackTo` 字段已经在 API 版本 `extensions/v1beta1``apps/v1beta1`中废弃了,并且从 `apps/v1beta2`版本开始不在支持。相应的,会开始使用已经引入[回滚到上一个版本](#rolling-back-to-a-previous-revision)中的 `kubectl rollout undo` `.spec.rollbackTo` 字段已经在 API 版本 `extensions/v1beta1``apps/v1beta1`中废弃了,并且从 `apps/v1beta2`版本开始不在支持。相应的,会开始使用已经引入[回滚到上一个版本](#rolling-back-to-a-previous-revision)中的 `kubectl rollout undo`
<!-- <!--
### Revision History Limit ### Revision History Limit
--> -->
@@ -1894,6 +1926,7 @@ it is created.
<!-- <!--
[`kubectl rolling update`](/docs/reference/generated/kubectl/kubectl-commands#rolling-update) updates Pods and ReplicationControllers [`kubectl rolling update`](/docs/reference/generated/kubectl/kubectl-commands#rolling-update) updates Pods and ReplicationControllers
--> -->
<!-- <!--
in a similar fashion. But Deployments are recommended, since they are declarative, server side, and have in a similar fashion. But Deployments are recommended, since they are declarative, server side, and have
additional features, such as rolling back to any previous revision even after the rolling update is done. additional features, such as rolling back to any previous revision even after the rolling update is done.
@@ -44,6 +44,7 @@ Read operations:
* nodes * nodes
* pods * pods
* secrets、configmaps、以及绑定到 kubelet 的节点的 pod 的持久卷申领和持久卷 * secrets、configmaps、以及绑定到 kubelet 的节点的 pod 的持久卷申领和持久卷
<!-- <!--
* services * services
* endpoints * endpoints
@@ -60,6 +61,7 @@ Write operations:
* 节点和节点状态(启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改自己的节点) * 节点和节点状态(启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改自己的节点)
* Pod 和 Pod 状态 (启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改绑定到自身的 Pod) * Pod 和 Pod 状态 (启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改绑定到自身的 Pod)
* 事件 * 事件
<!-- <!--
* nodes and node status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify its own node) * nodes and node status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify its own node)
* pods and pod status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify pods bound to itself) * pods and pod status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify pods bound to itself)
@@ -73,6 +75,7 @@ Auth-related operations:
* 对于基于 TLS 的启动引导过程时使用的 certificationsigningrequests API 的读/写权限 * 对于基于 TLS 的启动引导过程时使用的 certificationsigningrequests API 的读/写权限
* 为委派的身份验证/授权检查创建 tokenreviews 和 subjectaccessreviews 的能力 * 为委派的身份验证/授权检查创建 tokenreviews 和 subjectaccessreviews 的能力
<!-- <!--
* read/write access to the certificationsigningrequests API for TLS bootstrapping * read/write access to the certificationsigningrequests API for TLS bootstrapping
* the ability to create tokenreviews and subjectaccessreviews for delegated authentication/authorization checks * the ability to create tokenreviews and subjectaccessreviews for delegated authentication/authorization checks
@@ -529,6 +529,7 @@ kubectl [flags]
* [kubectl api-versions](/docs/reference/generated/kubectl/kubectl-commands#api-versions) - 以“组/版本”的格式输出服务端所支持的 API 版本 * [kubectl api-versions](/docs/reference/generated/kubectl/kubectl-commands#api-versions) - 以“组/版本”的格式输出服务端所支持的 API 版本
* [kubectl apply](/docs/reference/generated/kubectl/kubectl-commands#apply) - 基于文件名或标准输入,将新的配置应用到资源上 * [kubectl apply](/docs/reference/generated/kubectl/kubectl-commands#apply) - 基于文件名或标准输入,将新的配置应用到资源上
* [kubectl attach](/docs/reference/generated/kubectl/kubectl-commands#attach) - 连接到一个正在运行的容器 * [kubectl attach](/docs/reference/generated/kubectl/kubectl-commands#attach) - 连接到一个正在运行的容器
<!-- <!--
* [kubectl auth](/docs/reference/generated/kubectl/kubectl-commands#auth) - Inspect authorization * [kubectl auth](/docs/reference/generated/kubectl/kubectl-commands#auth) - Inspect authorization
* [kubectl autoscale](/docs/reference/generated/kubectl/kubectl-commands#autoscale) - Auto-scale a Deployment, ReplicaSet, or ReplicationController * [kubectl autoscale](/docs/reference/generated/kubectl/kubectl-commands#autoscale) - Auto-scale a Deployment, ReplicaSet, or ReplicationController
@@ -543,6 +544,7 @@ kubectl [flags]
* [kubectl cluster-info](/docs/reference/generated/kubectl/kubectl-commands#cluster-info) - 显示集群信息 * [kubectl cluster-info](/docs/reference/generated/kubectl/kubectl-commands#cluster-info) - 显示集群信息
* [kubectl completion](/docs/reference/generated/kubectl/kubectl-commands#completion) - 根据已经给出的 Shellbash 或 zsh),输出 Shell 补全后的代码 * [kubectl completion](/docs/reference/generated/kubectl/kubectl-commands#completion) - 根据已经给出的 Shellbash 或 zsh),输出 Shell 补全后的代码
* [kubectl config](/docs/reference/generated/kubectl/kubectl-commands#config) - 修改 kubeconfig 配置文件 * [kubectl config](/docs/reference/generated/kubectl/kubectl-commands#config) - 修改 kubeconfig 配置文件
<!-- <!--
* [kubectl convert](/docs/reference/generated/kubectl/kubectl-commands#convert) - Convert config files between different API versions * [kubectl convert](/docs/reference/generated/kubectl/kubectl-commands#convert) - Convert config files between different API versions
* [kubectl cordon](/docs/reference/generated/kubectl/kubectl-commands#cordon) - Mark node as unschedulable * [kubectl cordon](/docs/reference/generated/kubectl/kubectl-commands#cordon) - Mark node as unschedulable
@@ -555,6 +557,7 @@ kubectl [flags]
* [kubectl cp](/docs/reference/generated/kubectl/kubectl-commands#cp) - 将文件和目录拷入/拷出容器。 * [kubectl cp](/docs/reference/generated/kubectl/kubectl-commands#cp) - 将文件和目录拷入/拷出容器。
* [kubectl create](/docs/reference/generated/kubectl/kubectl-commands#create) - 通过文件或标准输入来创建资源 * [kubectl create](/docs/reference/generated/kubectl/kubectl-commands#create) - 通过文件或标准输入来创建资源
* [kubectl delete](/docs/reference/generated/kubectl/kubectl-commands#delete) - 通过文件名、标准输入、资源和名字删除资源,或者通过资源和标签选择器来删除资源 * [kubectl delete](/docs/reference/generated/kubectl/kubectl-commands#delete) - 通过文件名、标准输入、资源和名字删除资源,或者通过资源和标签选择器来删除资源
<!-- <!--
* [kubectl describe](/docs/reference/generated/kubectl/kubectl-commands#describe) - Show details of a specific resource or group of resources * [kubectl describe](/docs/reference/generated/kubectl/kubectl-commands#describe) - Show details of a specific resource or group of resources
* [kubectl diff](/docs/reference/generated/kubectl/kubectl-commands#diff) - Diff live version against would-be applied version * [kubectl diff](/docs/reference/generated/kubectl/kubectl-commands#diff) - Diff live version against would-be applied version
@@ -571,6 +574,7 @@ kubectl [flags]
* [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands#exec) - 在容器中执行相关命令 * [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands#exec) - 在容器中执行相关命令
* [kubectl explain](/docs/reference/generated/kubectl/kubectl-commands#explain) - 显示资源文档说明 * [kubectl explain](/docs/reference/generated/kubectl/kubectl-commands#explain) - 显示资源文档说明
* [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands#expose) - 给定副本控制器、服务、Deployment 或 Pod,将其暴露为新的 kubernetes Service * [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands#expose) - 给定副本控制器、服务、Deployment 或 Pod,将其暴露为新的 kubernetes Service
<!-- <!--
* [kubectl get](/docs/reference/generated/kubectl/kubectl-commands#get) - Display one or many resources * [kubectl get](/docs/reference/generated/kubectl/kubectl-commands#get) - Display one or many resources
* [kubectl kustomize](/docs/reference/generated/kubectl/kubectl-commands#kustomize) - Build a kustomization target from a directory or a remote url. * [kubectl kustomize](/docs/reference/generated/kubectl/kubectl-commands#kustomize) - Build a kustomization target from a directory or a remote url.
@@ -585,6 +589,7 @@ kubectl [flags]
* [kubectl logs](/docs/reference/generated/kubectl/kubectl-commands#logs) - 输出 pod 中某容器的日志 * [kubectl logs](/docs/reference/generated/kubectl/kubectl-commands#logs) - 输出 pod 中某容器的日志
* [kubectl options](/docs/reference/generated/kubectl/kubectl-commands#options) - 打印所有命令都支持的共有参数列表 * [kubectl options](/docs/reference/generated/kubectl/kubectl-commands#options) - 打印所有命令都支持的共有参数列表
* [kubectl patch](/docs/reference/generated/kubectl/kubectl-commands#patch) - 基于策略性合并修补(Stategic Merge Patch)规则更新某资源中的字段 * [kubectl patch](/docs/reference/generated/kubectl/kubectl-commands#patch) - 基于策略性合并修补(Stategic Merge Patch)规则更新某资源中的字段
<!-- <!--
* [kubectl plugin](/docs/reference/generated/kubectl/kubectl-commands#plugin) - Provides utilities for interacting with plugins. * [kubectl plugin](/docs/reference/generated/kubectl/kubectl-commands#plugin) - Provides utilities for interacting with plugins.
* [kubectl port-forward](/docs/reference/generated/kubectl/kubectl-commands#port-forward) - Forward one or more local ports to a pod * [kubectl port-forward](/docs/reference/generated/kubectl/kubectl-commands#port-forward) - Forward one or more local ports to a pod
@@ -599,6 +604,7 @@ kubectl [flags]
* [kubectl replace](/docs/reference/generated/kubectl/kubectl-commands#replace) - 基于文件名或标准输入替换资源 * [kubectl replace](/docs/reference/generated/kubectl/kubectl-commands#replace) - 基于文件名或标准输入替换资源
* [kubectl rollout](/docs/reference/generated/kubectl/kubectl-commands#rollout) - 管理资源的上线 * [kubectl rollout](/docs/reference/generated/kubectl/kubectl-commands#rollout) - 管理资源的上线
* [kubectl run](/docs/reference/generated/kubectl/kubectl-commands#run) - 在集群中使用指定镜像启动容器 * [kubectl run](/docs/reference/generated/kubectl/kubectl-commands#run) - 在集群中使用指定镜像启动容器
<!-- <!--
* [kubectl scale](/docs/reference/generated/kubectl/kubectl-commands#scale) - Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job * [kubectl scale](/docs/reference/generated/kubectl/kubectl-commands#scale) - Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job
* [kubectl set](/docs/reference/generated/kubectl/kubectl-commands#set) - Set specific features on objects * [kubectl set](/docs/reference/generated/kubectl/kubectl-commands#set) - Set specific features on objects
@@ -186,6 +186,7 @@ for LoadBalancer and NodePort type services, but risks potentially imbalanced
traffic spreading. traffic spreading.
--> -->
* `service.spec.externalTrafficPolicy` - 表示此服务是否希望将外部流量路由到节点本地或集群范围的端点。有两个可用选项:Cluster(默认)和 Local。Cluster 隐藏了客户端源 IP,可能导致第二跳到另一个节点,但具有良好的整体负载分布。Local 保留客户端源 IP 并避免 LoadBalancer 和 NodePort 类型服务的第二跳,但存在潜在的不均衡流量传播风险。 * `service.spec.externalTrafficPolicy` - 表示此服务是否希望将外部流量路由到节点本地或集群范围的端点。有两个可用选项:Cluster(默认)和 Local。Cluster 隐藏了客户端源 IP,可能导致第二跳到另一个节点,但具有良好的整体负载分布。Local 保留客户端源 IP 并避免 LoadBalancer 和 NodePort 类型服务的第二跳,但存在潜在的不均衡流量传播风险。
<!-- <!--
* `service.spec.healthCheckNodePort` - specifies the health check nodePort * `service.spec.healthCheckNodePort` - specifies the health check nodePort
(numeric port number) for the service. If not specified, `healthCheckNodePort` is (numeric port number) for the service. If not specified, `healthCheckNodePort` is
@@ -44,18 +44,21 @@ ip-masq-agent 配置 iptables 规则以隐藏位于集群节点 IP 地址后面
--> -->
* **NAT (网络地址解析)** * **NAT (网络地址解析)**
是一种通过修改 IP 地址头中的源和/或目标地址信息将一个 IP 地址重新映射到另一个 IP 地址的方法。通常由执行 IP 路由的设备执行。 是一种通过修改 IP 地址头中的源和/或目标地址信息将一个 IP 地址重新映射到另一个 IP 地址的方法。通常由执行 IP 路由的设备执行。
<!-- <!--
* **Masquerading** * **Masquerading**
A form of NAT that is typically used to perform a many to one address translation, where multiple source IP addresses are masked behind a single address, which is typically the device doing the IP routing. In Kubernetes this is the Node's IP address. A form of NAT that is typically used to perform a many to one address translation, where multiple source IP addresses are masked behind a single address, which is typically the device doing the IP routing. In Kubernetes this is the Node's IP address.
--> -->
* **伪装** * **伪装**
NAT 的一种形式,通常用于执行多对一地址转换,其中多个源 IP 地址被隐藏在单个地址后面,该地址通常是执行 IP 路由的设备。在 Kubernetes 中,这是节点的 IP 地址。 NAT 的一种形式,通常用于执行多对一地址转换,其中多个源 IP 地址被隐藏在单个地址后面,该地址通常是执行 IP 路由的设备。在 Kubernetes 中,这是节点的 IP 地址。
<!-- <!--
* **CIDR (Classless Inter-Domain Routing)** * **CIDR (Classless Inter-Domain Routing)**
Based on the variable-length subnet masking, allows specifying arbitrary-length prefixes. CIDR introduced a new method of representation for IP addresses, now commonly known as **CIDR notation**, in which an address or routing prefix is written with a suffix indicating the number of bits of the prefix, such as 192.168.2.0/24. Based on the variable-length subnet masking, allows specifying arbitrary-length prefixes. CIDR introduced a new method of representation for IP addresses, now commonly known as **CIDR notation**, in which an address or routing prefix is written with a suffix indicating the number of bits of the prefix, such as 192.168.2.0/24.
--> -->
* **CIDR (无类别域间路由)** * **CIDR (无类别域间路由)**
基于可变长度子网掩码,允许指定任意长度的前缀。CIDR 引入了一种新的 IP 地址表示方法,现在通常称为**CIDR表示法**,其中地址或路由前缀后添加一个后缀,用来表示前缀的位数,例如 192.168.2.0/24。 基于可变长度子网掩码,允许指定任意长度的前缀。CIDR 引入了一种新的 IP 地址表示方法,现在通常称为**CIDR表示法**,其中地址或路由前缀后添加一个后缀,用来表示前缀的位数,例如 192.168.2.0/24。
<!-- <!--
* **Link Local** * **Link Local**
A link-local address is a network address that is valid only for communications within the network segment or the broadcast domain that the host is connected to. Link-local addresses for IPv4 are defined in the address block 169.254.0.0/16 in CIDR notation. A link-local address is a network address that is valid only for communications within the network segment or the broadcast domain that the host is connected to. Link-local addresses for IPv4 are defined in the address block 169.254.0.0/16 in CIDR notation.
@@ -79,10 +82,12 @@ The agent configuration file must be written in YAML or JSON syntax, and may con
* **nonMasqueradeCIDRs:** A list of strings in [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation that specify the non-masquerade ranges. * **nonMasqueradeCIDRs:** A list of strings in [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation that specify the non-masquerade ranges.
--> -->
* **nonMasqueradeCIDRs:** [CIDR](https://zh.wikipedia.org/wiki/%E6%97%A0%E7%B1%BB%E5%88%AB%E5%9F%9F%E9%97%B4%E8%B7%AF%E7%94%B1) 表示法中的字符串列表,用于指定不需伪装的地址范围。 * **nonMasqueradeCIDRs:** [CIDR](https://zh.wikipedia.org/wiki/%E6%97%A0%E7%B1%BB%E5%88%AB%E5%9F%9F%E9%97%B4%E8%B7%AF%E7%94%B1) 表示法中的字符串列表,用于指定不需伪装的地址范围。
<!-- <!--
* **masqLinkLocal:** A Boolean (true / false) which indicates whether to masquerade traffic to the link local prefix 169.254.0.0/16. False by default. * **masqLinkLocal:** A Boolean (true / false) which indicates whether to masquerade traffic to the link local prefix 169.254.0.0/16. False by default.
--> -->
* **masqLinkLocal:** 布尔值 (true / false),表示是否将流量伪装到本地链路前缀169.254.0.0/16。 默认为 false。 * **masqLinkLocal:** 布尔值 (true / false),表示是否将流量伪装到本地链路前缀169.254.0.0/16。 默认为 false。
<!-- <!--
* **resyncInterval:** An interval at which the agent attempts to reload config from disk. e.g. '30s' where 's' is seconds, 'ms' is milliseconds etc... * **resyncInterval:** An interval at which the agent attempts to reload config from disk. e.g. '30s' where 's' is seconds, 'ms' is milliseconds etc...
--> -->
@@ -120,6 +120,7 @@ This works for e2e clusters created on GCE. On all other environments, the follo
* A yaml similar to [this](https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml) can be applied using `kubectl create -f` command. * A yaml similar to [this](https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml) can be applied using `kubectl create -f` command.
--> -->
* 可以使用 `kubectl create -f` 命令应用类似于[这个](https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml)的 Yaml 。 * 可以使用 `kubectl create -f` 命令应用类似于[这个](https://github.com/kubernetes/kubernetes/blob/master/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml)的 Yaml 。
<!-- <!--
* --cluster-dns flag to kubelet needs to be modified to use the LOCAL_DNS IP that NodeLocal DNSCache is listening on (169.254.20.10 by default) * --cluster-dns flag to kubelet needs to be modified to use the LOCAL_DNS IP that NodeLocal DNSCache is listening on (169.254.20.10 by default)
--> -->
@@ -40,6 +40,7 @@ applications, such as key-value stores (such as Redis) and databases.
## 为 Pod 配置卷 ## 为 Pod 配置卷
在本练习中,您将创建一个运行 Pod,该 Pod 仅运行一个容器并拥有一个类型为 [emptyDir](/docs/concepts/storage/volumes/#emptydir) 的卷,在整个 Pod 生命周期中一直存在,即使 Pod 中的容器被终止和重启。以下是 Pod 的配置: 在本练习中,您将创建一个运行 Pod,该 Pod 仅运行一个容器并拥有一个类型为 [emptyDir](/docs/concepts/storage/volumes/#emptydir) 的卷,在整个 Pod 生命周期中一直存在,即使 Pod 中的容器被终止和重启。以下是 Pod 的配置:
<!-- <!--
## Configure a volume for a Pod ## Configure a volume for a Pod
@@ -185,6 +186,7 @@ of `Always`.
* 参阅 [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)。 * 参阅 [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)。
* 除了 `emptyDir` 提供的本地磁盘存储外,Kubernetes 还支持许多不同的网络附加存储解决方案,包括 GCE 上的 PD 和 EC2 上的 EBS,它们是关键数据的首选,并将处理节点上的一些细节,例如安装和卸载设备。了解更多详情请参阅[](/docs/concepts/storage/volumes/)。 * 除了 `emptyDir` 提供的本地磁盘存储外,Kubernetes 还支持许多不同的网络附加存储解决方案,包括 GCE 上的 PD 和 EC2 上的 EBS,它们是关键数据的首选,并将处理节点上的一些细节,例如安装和卸载设备。了解更多详情请参阅[](/docs/concepts/storage/volumes/)。
<!-- <!--
* See [Volume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#volume-v1-core). * See [Volume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#volume-v1-core).
@@ -36,6 +36,7 @@ parallelism and completions exist across the registered clusters.
* {{< include "federated-task-tutorial-prereqs.md" >}} * {{< include "federated-task-tutorial-prereqs.md" >}}
* 你需要具备基本的 [Kubernetes 的工作知识](/docs/tutorials/kubernetes-basics/),特别是 [job](/docs/concepts/workloads/controllers/jobs-run-to-completion/)。 * 你需要具备基本的 [Kubernetes 的工作知识](/docs/tutorials/kubernetes-basics/),特别是 [job](/docs/concepts/workloads/controllers/jobs-run-to-completion/)。
<!-- <!--
* You should also have a basic * You should also have a basic
[working knowledge of Kubernetes](/docs/tutorials/kubernetes-basics/) in [working knowledge of Kubernetes](/docs/tutorials/kubernetes-basics/) in