From 78a113146b69c015194ef05aa64e624647781369 Mon Sep 17 00:00:00 2001
From: Babajide Fowotade
Date: Sun, 25 Sep 2016 21:00:28 +0100
Subject: [PATCH 001/195] Update nodeJS code to supported es6 version LTS
Nodejs now support some es6 features, on it's latest stable version 4.5.
https://nodejs.org/dist/latest-v4.x/docs/api/synopsis.html
---
docs/hellonode.md | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/docs/hellonode.md b/docs/hellonode.md
index e489927aff..df3106c83c 100755
--- a/docs/hellonode.md
+++ b/docs/hellonode.md
@@ -59,13 +59,13 @@ The first step is to write the application. Save this code in a folder called "`
#### server.js
```javascript
-var http = require('http');
-var handleRequest = function(request, response) {
+const http = require('http');
+const handleRequest = (request, response) => {
console.log('Received request for URL: ' + request.url);
response.writeHead(200);
response.end('Hello World!');
};
-var www = http.createServer(handleRequest);
+const www = http.createServer(handleRequest);
www.listen(8080);
```
@@ -88,7 +88,7 @@ Next, create a file, also within `hellonode/` named `Dockerfile`. A Dockerfile d
#### Dockerfile
```conf
-FROM node:4.4
+FROM node:4.5
EXPOSE 8080
COPY server.js .
CMD node server.js
From d59443b6fbea2717a228c8a013733006799ed00c Mon Sep 17 00:00:00 2001
From: Steven Pousty
Date: Fri, 30 Sep 2016 14:44:18 -0700
Subject: [PATCH 002/195] Clarifying the purpose and intended use of a
ConfigMap
---
docs/user-guide/configmap/index.md | 2 ++
1 file changed, 2 insertions(+)
diff --git a/docs/user-guide/configmap/index.md b/docs/user-guide/configmap/index.md
index f37c83f4ac..e6d8686f00 100644
--- a/docs/user-guide/configmap/index.md
+++ b/docs/user-guide/configmap/index.md
@@ -19,6 +19,8 @@ or used to store configuration data for system components such as controllers.
to [Secrets](/docs/user-guide/secrets/), but designed to more conveniently support working with strings that do not
contain sensitive information.
+Note: ConfigMaps are not intended to act as a replacement for a properties file. ConfigMaps are more intended to act a reference to multipe propertie files. You can think of them as way to represent something similar to the /etc directory and all it's files on a Linux computer. This model for ConfigMaps becomes especially apparent when looking at creating Volumes from ConfigMaps. Each data item in the ConfigMap becomes a new file.
+
Let's look at a made-up example:
```yaml
From 0884c3a5976dd98c730f4066f59756c1434a525f Mon Sep 17 00:00:00 2001
From: David Newswanger
Date: Mon, 7 Nov 2016 13:37:33 -0500
Subject: [PATCH 003/195] made some minor fixes to the centos guide to make it
a little easier for beginners to follow
---
.../centos/centos_manual_config.md | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/docs/getting-started-guides/centos/centos_manual_config.md b/docs/getting-started-guides/centos/centos_manual_config.md
index 08419bcff7..bd791f0172 100644
--- a/docs/getting-started-guides/centos/centos_manual_config.md
+++ b/docs/getting-started-guides/centos/centos_manual_config.md
@@ -78,9 +78,10 @@ KUBE_ALLOW_PRIV="--allow-privileged=false"
KUBE_MASTER="--master=http://centos-master:8080"
```
-* Disable the firewall on the master and all the nodes, as docker does not play well with other firewall rule managers
+* Disable the firewall on the master and all the nodes, as docker does not play well with other firewall rule managers. CentOS won't let you disable the firewall as long as SELinux is enforcing, so that needs to be disabled first.
```shell
+setenforce 0
systemctl disable iptables-services firewalld
systemctl stop iptables-services firewalld
```
@@ -118,10 +119,11 @@ KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
KUBE_API_ARGS=""
```
-* Configure ETCD to hold the network overlay configuration on master:
+* Start ETCD and configure it to hold the network overlay configuration on master:
**Warning** This network must be unused in your network infrastructure! `172.30.0.0/16` is free in our network.
```shell
+$ systemctl start etcd
$ etcdctl mkdir /kube-centos/network
$ etcdctl mk /kube-centos/network/config "{ \"Network\": \"172.30.0.0/16\", \"SubnetLen\": 24, \"Backend\": { \"Type\": \"vxlan\" } }"
```
@@ -164,7 +166,8 @@ KUBELET_ADDRESS="--address=0.0.0.0"
KUBELET_PORT="--port=10250"
# You may leave this blank to use the actual hostname
-KUBELET_HOSTNAME="--hostname-override=centos-minion-n" # Check the node number!
+# Check the node number!
+KUBELET_HOSTNAME="--hostname-override=centos-minion-n"
# Location of the api-server
KUBELET_API_SERVER="--api-servers=http://centos-master:8080"
@@ -228,4 +231,3 @@ IaaS Provider | Config. Mgmt | OS | Networking | Docs
Bare-metal | custom | CentOS | flannel | [docs](/docs/getting-started-guides/centos/centos_manual_config) | | Community ([@coolsvap](https://github.com/coolsvap))
For support level information on all solutions, see the [Table of solutions](/docs/getting-started-guides/#table-of-solutions) chart.
-
From b716a92b5e40e1c2ecaf67f186c1df61d4710574 Mon Sep 17 00:00:00 2001
From: Jason Murray
Date: Tue, 15 Nov 2016 07:37:30 +0100
Subject: [PATCH 004/195] Improve Grammar for Authentication strategies
---
docs/admin/authentication.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/admin/authentication.md b/docs/admin/authentication.md
index 6819677107..4015610e52 100644
--- a/docs/admin/authentication.md
+++ b/docs/admin/authentication.md
@@ -35,7 +35,7 @@ or be treated as an anonymous user.
Kubernetes uses client certificates, bearer tokens, or HTTP basic auth to
authenticate API requests through authentication plugins. As HTTP request are
-made to the API server plugins attempts to associate the following attributes
+made to the API server, plugins attempt to associate the following attributes
with the request:
* Username: a string which identifies the end user. Common values might be `kube-admin` or `jane@example.com`.
From 8c4fc0351ac5fa4b0f396b7c1c17b43e0ecb54f4 Mon Sep 17 00:00:00 2001
From: Chris Riviere
Date: Mon, 21 Nov 2016 11:27:15 -0800
Subject: [PATCH 005/195] clarification on type LoadBalancer for exposing
Took me a bit of time to learn that type LadBalancer wasn't fully working in an OpenStack environment as I was going through this.
---
docs/user-guide/quick-start.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/user-guide/quick-start.md b/docs/user-guide/quick-start.md
index 9e9e59dbd8..fcb3b079b9 100644
--- a/docs/user-guide/quick-start.md
+++ b/docs/user-guide/quick-start.md
@@ -22,7 +22,7 @@ $ kubectl run my-nginx --image=nginx --replicas=2 --port=80
deployment "my-nginx" created
```
-To expose your service to the public internet, run:
+To expose your service to the public internet, run the following. Note, the type, LoadBalancer, is highly dependant upon the underlying platform that Kubernetes is running on. Type LoadBalancer may work in public cloud environments just fine but may require some additional configuration in a private cloud environment (ie. OpenStack).
```shell
$ kubectl expose deployment my-nginx --target-port=80 --type=LoadBalancer
From 08577c385a27a32056c876307986428689f9e6b9 Mon Sep 17 00:00:00 2001
From: Chris Riviere
Date: Mon, 21 Nov 2016 12:08:25 -0800
Subject: [PATCH 006/195] minor changes
moved text under command and changed wording based on some feedback. With regards to mentioning cloud providers. I think a lot of this documentation in general assumes a public cloud like Google so it may be worthwhile to mention a specific private cloud where this isn't implemented.
---
docs/user-guide/quick-start.md | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/docs/user-guide/quick-start.md b/docs/user-guide/quick-start.md
index fcb3b079b9..6e0920f973 100644
--- a/docs/user-guide/quick-start.md
+++ b/docs/user-guide/quick-start.md
@@ -22,12 +22,13 @@ $ kubectl run my-nginx --image=nginx --replicas=2 --port=80
deployment "my-nginx" created
```
-To expose your service to the public internet, run the following. Note, the type, LoadBalancer, is highly dependant upon the underlying platform that Kubernetes is running on. Type LoadBalancer may work in public cloud environments just fine but may require some additional configuration in a private cloud environment (ie. OpenStack).
+To expose your service to the public internet, run the following:
```shell
$ kubectl expose deployment my-nginx --target-port=80 --type=LoadBalancer
service "my-nginx" exposed
```
+Note: The type, LoadBalancer, is highly dependant upon the underlying platform that Kubernetes is running on. If your cloudprovider doesn't have a loadbalancer implementation (e.g. OpenStack) for Kubernetes, you can simply use the allocated [nodePort](link to nodeport service) as a rudimentary form of loadblancing across your endpoints.
You can see that they are running by:
From 18068bae8037d5c0f4779c7133fc3edfc5595585 Mon Sep 17 00:00:00 2001
From: Chris Riviere
Date: Mon, 21 Nov 2016 12:09:05 -0800
Subject: [PATCH 007/195] minor text change
---
docs/user-guide/quick-start.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/user-guide/quick-start.md b/docs/user-guide/quick-start.md
index 6e0920f973..0cf35997b4 100644
--- a/docs/user-guide/quick-start.md
+++ b/docs/user-guide/quick-start.md
@@ -22,7 +22,7 @@ $ kubectl run my-nginx --image=nginx --replicas=2 --port=80
deployment "my-nginx" created
```
-To expose your service to the public internet, run the following:
+To expose your service to the public internet, run:
```shell
$ kubectl expose deployment my-nginx --target-port=80 --type=LoadBalancer
From e73c755de32eac119a5828c922b1e584cb00f06b Mon Sep 17 00:00:00 2001
From: Anirudh Ramanathan
Date: Mon, 21 Nov 2016 13:11:19 -0800
Subject: [PATCH 008/195] Updated link and fixed typo
---
docs/user-guide/quick-start.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/user-guide/quick-start.md b/docs/user-guide/quick-start.md
index 0cf35997b4..e64f9d1d19 100644
--- a/docs/user-guide/quick-start.md
+++ b/docs/user-guide/quick-start.md
@@ -28,7 +28,7 @@ To expose your service to the public internet, run:
$ kubectl expose deployment my-nginx --target-port=80 --type=LoadBalancer
service "my-nginx" exposed
```
-Note: The type, LoadBalancer, is highly dependant upon the underlying platform that Kubernetes is running on. If your cloudprovider doesn't have a loadbalancer implementation (e.g. OpenStack) for Kubernetes, you can simply use the allocated [nodePort](link to nodeport service) as a rudimentary form of loadblancing across your endpoints.
+Note: The type, LoadBalancer, is highly dependent upon the underlying platform that Kubernetes is running on. If your cloudprovider doesn't have a loadbalancer implementation (e.g. OpenStack) for Kubernetes, you can simply use the allocated [NodePort](http://kubernetes.io/docs/user-guide/services/#type-nodeport) as a rudimentary form of loadblancing across your endpoints.
You can see that they are running by:
From 4a32cb82da3be836358f3e1a9cc55860a80f6eb9 Mon Sep 17 00:00:00 2001
From: Zihong Zheng
Date: Mon, 21 Nov 2016 19:38:20 -0800
Subject: [PATCH 009/195] Updates addons section for cluster-components
---
docs/admin/cluster-components.md | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/docs/admin/cluster-components.md b/docs/admin/cluster-components.md
index c1bcae8577..823ebd64d6 100644
--- a/docs/admin/cluster-components.md
+++ b/docs/admin/cluster-components.md
@@ -61,12 +61,12 @@ selects a node for them to run on.
### addons
-Addons are pods and services that implement cluster features. They don't run on
-the master VM, but currently the default setup scripts that make the API calls
-to create these pods and services does run on the master VM. See:
-[kube-master-addons](http://releases.k8s.io/HEAD/cluster/saltbase/salt/kube-master-addons/kube-master-addons.sh)
+Addons are pods and services that implement cluster features. The pods may be managed
+by Deployments, ReplicationContollers, etc. Namespaced addon objects are created in
+the "kube-system" namespace.
-Addon objects are created in the "kube-system" namespace.
+Addon manager takes the responsibility for creating and maintaining addon resources.
+See [here](http://releases.k8s.io/HEAD/cluster/addons) for more details.
#### DNS
From 3a9566810ee116658dd9f3d05a9bc34fcf6fc8a0 Mon Sep 17 00:00:00 2001
From: Cao Shufeng
Date: Tue, 22 Nov 2016 06:03:28 -0500
Subject: [PATCH 010/195] [kubenet] add description about non-masquerade-cidr
For kubenet, users should run kubelet with argument
--non-masquerade-cidr, or pods may have problem when access
"10.0.0.0/8" cidr. Also, if --pod-cidr is set outside the scope
of --non-masquerade-cidr, node will do ip masquerade for ingress
packets, which is not excepted.
---
docs/admin/network-plugins.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/docs/admin/network-plugins.md b/docs/admin/network-plugins.md
index 6c5f354423..5f138da005 100644
--- a/docs/admin/network-plugins.md
+++ b/docs/admin/network-plugins.md
@@ -57,6 +57,7 @@ The plugin requires a few things:
* The standard CNI `bridge`, `lo` and `host-local` plugins are required, at minimum version 0.2.0. Kubenet will first search for them in `/opt/cni/bin`. Specify `network-plugin-dir` to supply additional search path. The first found match will take effect.
* Kubelet must be run with the `--network-plugin=kubenet` argument to enable the plugin
* Kubelet must also be run with the `--reconcile-cidr` argument to ensure the IP subnet assigned to the node by configuration or the controller-manager is propagated to the plugin
+* Kubelet should also be run with the `--non-masquerade-cidr=` argumment to ensure traffic to IPs outside this range will use IP masquerade.
* The node must be assigned an IP subnet through either the `--pod-cidr` kubelet command-line option or the `--allocate-node-cidrs=true --cluster-cidr=` controller-manager command-line options.
### Customizing the MTU (with kubenet)
From d4b9023a7f3c64266385721332954d169a1c013a Mon Sep 17 00:00:00 2001
From: pospispa
Date: Mon, 7 Nov 2016 15:59:24 +0100
Subject: [PATCH 011/195] Added a Recycler Pod Template Example
Recycle pod template example is missing in the documentation.
That's why it is now added.
---
docs/user-guide/persistent-volumes/index.md | 31 ++++++++++++++++++++-
1 file changed, 30 insertions(+), 1 deletion(-)
diff --git a/docs/user-guide/persistent-volumes/index.md b/docs/user-guide/persistent-volumes/index.md
index ffab80a61b..eb579145ec 100644
--- a/docs/user-guide/persistent-volumes/index.md
+++ b/docs/user-guide/persistent-volumes/index.md
@@ -70,7 +70,36 @@ When a user is done with their volume, they can delete the PVC objects from the
### Reclaiming
-The reclaim policy for a `PersistentVolume` tells the cluster what to do with the volume after it has been released of its claim. Currently, volumes can either be Retained, Recycled or Deleted. Retention allows for manual reclamation of the resource. For those volume plugins that support it, deletion removes both the `PersistentVolume` object from Kubernetes as well as deletes associated storage asset in external infrastructure such as AWS EBS, GCE PD or Cinder volume. Volumes that were dynamically provisioned are always deleted. If supported by appropriate volume plugin, recycling performs a basic scrub (`rm -rf /thevolume/*`) on the volume and makes it available again for a new claim.
+The reclaim policy for a `PersistentVolume` tells the cluster what to do with the volume after it has been released of its claim. Currently, volumes can either be Retained, Recycled or Deleted. Retention allows for manual reclamation of the resource. For those volume plugins that support it, deletion removes both the `PersistentVolume` object from Kubernetes as well as deletes associated storage asset in external infrastructure such as AWS EBS, GCE PD or Cinder volume. Volumes that were dynamically provisioned are always deleted.
+
+#### Recycling
+
+If supported by appropriate volume plugin, recycling performs a basic scrub (`rm -rf /thevolume/*`) on the volume and makes it available again for a new claim.
+
+However, an administrator can configure a custom recycler pod templates using the Kubernetes controller manager command line arguments as described [here](/docs/admin/kube-controller-manager/). The custom recycler pod template must contain a `volumes` specification, as shown in the example below:
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+ name: pv-recycler-
+ namespace: default
+spec:
+ restartPolicy: Never
+ volumes:
+ - name: vol
+ hostPath:
+ path: /any/path/it/will/be/replaced
+ containers:
+ - name: pv-recycler
+ image: "gcr.io/google_containers/busybox"
+ command: ["/bin/sh", "-c", "test -e /scrub && rm -rf /scrub/..?* /scrub/.[!.]* /scrub/* && test -z \"$(ls -A /scrub)\" || exit 1"]
+ volumeMounts:
+ - name: vol
+ mountPath: /scrub
+```
+
+However, the particular path specified in the custom recycler pod template in the `volumes` part is replaced with the particular path of the volume that is being recycled.
## Types of Persistent Volumes
From 448b8c074f640c312e03a1ad2e7af7e70f61fef2 Mon Sep 17 00:00:00 2001
From: pao
Date: Mon, 14 Nov 2016 13:42:40 +0800
Subject: [PATCH 012/195] Update dns.md: add details about subdomain.
---
docs/admin/dns.md | 39 ++++++++++++++++++++++++++++++++++-----
1 file changed, 34 insertions(+), 5 deletions(-)
diff --git a/docs/admin/dns.md b/docs/admin/dns.md
index d75acfa093..f474f31885 100644
--- a/docs/admin/dns.md
+++ b/docs/admin/dns.md
@@ -94,13 +94,42 @@ Example:
```yaml
apiVersion: v1
+kind: Service
+metadata:
+ name: default-subdomain
+spec:
+ selector:
+ name: busybox
+ ports:
+ - name: foo # Actually, no port is needed.
+ port: 1234
+ targetPort: 1234
+---
+apiVersion: v1
kind: Pod
metadata:
- name: busybox
- namespace: default
+ name: busybox1
+ labels:
+ name: busybox
spec:
hostname: busybox-1
- subdomain: default
+ subdomain: default-subdomain
+ containers:
+ - image: busybox
+ command:
+ - sleep
+ - "3600"
+ name: busybox
+---
+apiVersion: v1
+kind: Pod
+metadata:
+ name: busybox2
+ labels:
+ name: busybox
+spec:
+ hostname: busybox-2
+ subdomain: default-subdomain
containers:
- image: busybox
command:
@@ -110,9 +139,9 @@ spec:
```
If there exists a headless service in the same namespace as the pod and with the same name as the subdomain, the cluster's KubeDNS Server also returns an A record for the Pod's fully qualified hostname.
-Given a Pod with the hostname set to "foo" and the subdomain set to "bar", and a headless Service named "bar" in the same namespace, the pod will see it's own FQDN as "foo.bar.my-namespace.svc.cluster.local". DNS serves an A record at that name, pointing to the Pod's IP.
+Given a Pod with the hostname set to "busybox-1" and the subdomain set to "default-subdomain", and a headless Service named "default-subdomain" in the same namespace, the pod will see it's own FQDN as "busybox-1.default-subdomain.my-namespace.svc.cluster.local". DNS serves an A record at that name, pointing to the Pod's IP. Both pods "busybox1" and "busybox2" can have their distinct A records.
-With v1.2, the Endpoints object also has a new annotation `endpoints.beta.kubernetes.io/hostnames-map`. Its value is the json representation of map[string(IP)][endpoints.HostRecord], for example: '{"10.245.1.6":{HostName: "my-webserver"}}'.
+As of Kubernetes v1.2, the Endpoints object also has the annotation `endpoints.beta.kubernetes.io/hostnames-map`. Its value is the json representation of map[string(IP)][endpoints.HostRecord], for example: '{"10.245.1.6":{HostName: "my-webserver"}}'.
If the Endpoints are for a headless service, an A record is created with the format ...svc.
For the example json, if endpoints are for a headless service named "bar", and one of the endpoints has IP "10.245.1.6", an A is created with the name "my-webserver.bar.my-namespace.svc.cluster.local" and the A record lookup would return "10.245.1.6".
This endpoints annotation generally does not need to be specified by end-users, but can used by the internal service controller to deliver the aforementioned feature.
From 5dbabed7a96c61937267a434e0f150c6213faed6 Mon Sep 17 00:00:00 2001
From: Brandon Philips
Date: Tue, 29 Nov 2016 12:27:56 -0800
Subject: [PATCH 013/195] docs: create /security endpoint
Create an easy to remember and locate URL for security disclosure
process. This URL will need to be placed in lots of templates and tools
so make it easy.
---
docs/reporting-security-issues.md | 22 +---------------------
security.md | 28 ++++++++++++++++++++++++++++
2 files changed, 29 insertions(+), 21 deletions(-)
create mode 100644 security.md
diff --git a/docs/reporting-security-issues.md b/docs/reporting-security-issues.md
index da4da20b3c..28e40cea9c 100644
--- a/docs/reporting-security-issues.md
+++ b/docs/reporting-security-issues.md
@@ -5,24 +5,4 @@ assignees:
---
-If you believe you have discovered a vulnerability or a have a security incident to report, please follow the steps below. This applies to Kubernetes releases v1.0 or later.
-
-To watch for security and major API announcements, please join our [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group.
-
-## Reporting a security issue
-
-To report an issue, please:
-
-- Submit a bug report [here](http://goo.gl/vulnz).
- - Select 'I want to report a technical security bug in a Google product (SQLi, XSS, etc.).'?
- - Select 'Other'? as the Application Type.
-- Under reproduction steps, please additionally include
- - the words "Kubernetes Security issue"
- - Description of the issue
- - Kubernetes release (e.g. output of `kubectl version` command, which includes server version.)
- - Environment setup (e.g. which "Getting Started Guide" you followed, if any; what node operating system used; what service or software creates your virtual machines, if any)
-
-An online submission will have the fastest response; however, if you prefer email, please send mail to security@google.com. If you feel the need, please use the [PGP public key](https://services.google.com/corporate/publickey.txt) to encrypt communications.
-
-
-
+This document has moved to [http://kubernetes.io/security](http://kubernetes.io/security).
diff --git a/security.md b/security.md
new file mode 100644
index 0000000000..da4da20b3c
--- /dev/null
+++ b/security.md
@@ -0,0 +1,28 @@
+---
+assignees:
+- eparis
+- erictune
+
+---
+
+If you believe you have discovered a vulnerability or a have a security incident to report, please follow the steps below. This applies to Kubernetes releases v1.0 or later.
+
+To watch for security and major API announcements, please join our [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group.
+
+## Reporting a security issue
+
+To report an issue, please:
+
+- Submit a bug report [here](http://goo.gl/vulnz).
+ - Select 'I want to report a technical security bug in a Google product (SQLi, XSS, etc.).'?
+ - Select 'Other'? as the Application Type.
+- Under reproduction steps, please additionally include
+ - the words "Kubernetes Security issue"
+ - Description of the issue
+ - Kubernetes release (e.g. output of `kubectl version` command, which includes server version.)
+ - Environment setup (e.g. which "Getting Started Guide" you followed, if any; what node operating system used; what service or software creates your virtual machines, if any)
+
+An online submission will have the fastest response; however, if you prefer email, please send mail to security@google.com. If you feel the need, please use the [PGP public key](https://services.google.com/corporate/publickey.txt) to encrypt communications.
+
+
+
From b6cd807bacb503cc118016a73a69d6de1bdc48c6 Mon Sep 17 00:00:00 2001
From: Martin Rauscher
Date: Thu, 1 Dec 2016 11:51:20 +0100
Subject: [PATCH 014/195] allow copy&paste of sample code
multi-line code samples should not be prefixed with stuff that makes copy&paste hard!
---
docs/getting-started-guides/kubeadm.md | 22 +++++++++++-----------
1 file changed, 11 insertions(+), 11 deletions(-)
diff --git a/docs/getting-started-guides/kubeadm.md b/docs/getting-started-guides/kubeadm.md
index a122180b23..f6f0021eef 100644
--- a/docs/getting-started-guides/kubeadm.md
+++ b/docs/getting-started-guides/kubeadm.md
@@ -69,18 +69,18 @@ For each host in turn:
* SSH into the machine and become `root` if you are not already (for example, run `sudo su -`).
* If the machine is running Ubuntu 16.04 or HypriotOS v1.0.1, run:
- # curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
- # cat < /etc/apt/sources.list.d/kubernetes.list
+ curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
+ cat < /etc/apt/sources.list.d/kubernetes.list
deb http://apt.kubernetes.io/ kubernetes-xenial main
EOF
- # apt-get update
- # # Install docker if you don't have it already.
- # apt-get install -y docker.io
- # apt-get install -y kubelet kubeadm kubectl kubernetes-cni
+ apt-get update
+ # Install docker if you don't have it already.
+ apt-get install -y docker.io
+ apt-get install -y kubelet kubeadm kubectl kubernetes-cni
If the machine is running CentOS 7, run:
- # cat < /etc/yum.repos.d/kubernetes.repo
+ cat < /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://yum.kubernetes.io/repos/kubernetes-el7-x86_64
@@ -90,10 +90,10 @@ For each host in turn:
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg
https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
EOF
- # setenforce 0
- # yum install -y docker kubelet kubeadm kubectl kubernetes-cni
- # systemctl enable docker && systemctl start docker
- # systemctl enable kubelet && systemctl start kubelet
+ setenforce 0
+ yum install -y docker kubelet kubeadm kubectl kubernetes-cni
+ systemctl enable docker && systemctl start docker
+ systemctl enable kubelet && systemctl start kubelet
The kubelet is now restarting every few seconds, as it waits in a crashloop for `kubeadm` to tell it what to do.
From 6fb18ed5ddabe4aa1c9fd00a0096a58d3544cfe4 Mon Sep 17 00:00:00 2001
From: Brandon Philips
Date: Tue, 29 Nov 2016 13:35:54 -0800
Subject: [PATCH 015/195] security: add the new disclosure process
This is the new disclosure process as discussed here: https://github.com/kubernetes/kubernetes/issues/35462
This relies on a doc to be merged into docs/devel/security-release-process.md but this doc can be reviewed in parallel.
You can find a draft of the content of that doc on #35462
---
security.md | 28 ----------------------------
security/index.md | 46 ++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 46 insertions(+), 28 deletions(-)
delete mode 100644 security.md
create mode 100644 security/index.md
diff --git a/security.md b/security.md
deleted file mode 100644
index da4da20b3c..0000000000
--- a/security.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-assignees:
-- eparis
-- erictune
-
----
-
-If you believe you have discovered a vulnerability or a have a security incident to report, please follow the steps below. This applies to Kubernetes releases v1.0 or later.
-
-To watch for security and major API announcements, please join our [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group.
-
-## Reporting a security issue
-
-To report an issue, please:
-
-- Submit a bug report [here](http://goo.gl/vulnz).
- - Select 'I want to report a technical security bug in a Google product (SQLi, XSS, etc.).'?
- - Select 'Other'? as the Application Type.
-- Under reproduction steps, please additionally include
- - the words "Kubernetes Security issue"
- - Description of the issue
- - Kubernetes release (e.g. output of `kubectl version` command, which includes server version.)
- - Environment setup (e.g. which "Getting Started Guide" you followed, if any; what node operating system used; what service or software creates your virtual machines, if any)
-
-An online submission will have the fastest response; however, if you prefer email, please send mail to security@google.com. If you feel the need, please use the [PGP public key](https://services.google.com/corporate/publickey.txt) to encrypt communications.
-
-
-
diff --git a/security/index.md b/security/index.md
new file mode 100644
index 0000000000..5fe3b5b13c
--- /dev/null
+++ b/security/index.md
@@ -0,0 +1,46 @@
+---
+layout: docwithnav
+title: Kubernetes Security and Disclosure Information
+permalink: /security/
+assignees:
+- eparis
+- erictune
+- philips
+- jessfraz
+---
+
+## Security Announcements
+
+Join the [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group for emails about security and major API announcements.
+
+## Report a Vulnerability
+
+We’re extremely grateful for security researchers and users that report vulnerabilities to the Kubernetes Open Source Community. All reports are thoroughly investigated by a set of community volunteers.
+
+To make a report, please email the private [kubernetes-security@googlegroups.com](mailto:kubernetes-security@googlegroups.com) list with the security details and the details expected for [all Kubernetes bug reports](https://github.com/kubernetes/kubernetes/blob/master/.github/ISSUE_TEMPLATE.md).
+
+You may encrypt your email to this list using the GPG keys of the [Product Security Team members](https://github.com/kubernetes/community/blob/master/contributors/devel/security-release-process.md#product-security-team-pst). Encryption using GPG is NOT required to make a disclosure.
+
+### When Should I Report a Vulnerability?
+
+- You think you discovered a potential security vulnerability in Kubernetes
+- You are unsure how a vulnerability affects Kubernetes
+- You think you discovered a vulnerability in another project that Kubernetes depends on (e.g. docker, rkt, etcd)
+
+### When Should I NOT Report a Vulnerability?
+
+- You need help tuning Kubernetes components for security
+- You need help applying security related updates
+- Your issue is not security related
+
+## Security Vulnerability Response
+
+Each report is acknowledged and analyzed by Product Security Team members within 3 working days. This will set off the [Security Release Process](https://github.com/kubernetes/community/blob/master/contributors/devel/security-release-process.md#product-security-team-pst).
+
+Any vulnerability information shared with Product Security Team stays within Kubernetes project and will not be disseminated to other projects unless it is necessary to get the issue fixed.
+
+As the security issue moves from triage, to identified fix, to release planning we will keep the reporter updated.
+
+## Public Disclosure Timing
+
+A public disclosure date is negotiated by the Kubernetes product security team and the bug submitter. We prefer to fully disclose the bug as soon as possible once a user mitigation is available. It is reasonable to delay disclosure when the bug or the fix is not yet fully understood, the solution is not well-tested, or for vendor coordination. The timeframe for disclosure is from immediate (especially if it's already publicly known) to a few weeks. As a basic default, we expect report date to disclosure date to be on the order of 7 days. The Kubernetes product security team holds the final say when setting a disclosure date.
From cf65f25ca974dc1da2298cd3a5c93650251ee9c5 Mon Sep 17 00:00:00 2001
From: Jess Frazelle
Date: Fri, 2 Dec 2016 14:13:32 -0800
Subject: [PATCH 016/195] dockerfile: change to alpine base and cleanup
This makes the image a lot smaller and it's using an official image
as the base to make sure we get security updates etc.
The image size went from:
```
REPOSITORY SIZE
gcr.io/google-samples/k8sdocs 837 MB
```
To:
```
REPOSITORY SIZE
gcr.io/google-samples/k8sdocs 227 MB
```
Signed-off-by: Jess Frazelle
---
staging-container/Dockerfile | 21 +++++++++++++++++----
staging-container/start.sh | 7 +++++++
2 files changed, 24 insertions(+), 4 deletions(-)
create mode 100755 staging-container/start.sh
diff --git a/staging-container/Dockerfile b/staging-container/Dockerfile
index a5b41625b5..cb0d6a0f70 100644
--- a/staging-container/Dockerfile
+++ b/staging-container/Dockerfile
@@ -1,13 +1,26 @@
-FROM starefossen/ruby-node:2-4
+FROM alpine:3.3
-RUN gem install github-pages
+RUN apk add --no-cache \
+ build-base \
+ ca-certificates \
+ libffi-dev \
+ nodejs \
+ ruby-dev \
+ ruby-nokogiri \
+ zlib-dev
+
+RUN gem install \
+ bundler \
+ github-pages \
+ io-console \
+ --no-rdoc --no-ri
VOLUME /k8sdocs
EXPOSE 4000
+COPY start.sh /start.sh
WORKDIR /k8sdocs
-CMD bundle && jekyll clean && jekyll serve -H 0.0.0.0 -P 4000
-
+CMD [ "/start.sh" ]
# For instructions, see http://kubernetes.io/editdocs/
diff --git a/staging-container/start.sh b/staging-container/start.sh
new file mode 100755
index 0000000000..890e4bb385
--- /dev/null
+++ b/staging-container/start.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -e
+set -x
+
+bundle
+bundle exec jekyll clean
+bundle exec jekyll serve -H 0.0.0.0 -P 4000
From 01043efa7e40b0432f92db434c5dde57fb7f9c5b Mon Sep 17 00:00:00 2001
From: Bryan Boreham
Date: Tue, 18 Oct 2016 11:01:46 +0100
Subject: [PATCH 017/195] Update out-of-date text about creating a client
---
docs/user-guide/accessing-the-cluster.md | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/docs/user-guide/accessing-the-cluster.md b/docs/user-guide/accessing-the-cluster.md
index 63134b4909..b08dfa8eb6 100644
--- a/docs/user-guide/accessing-the-cluster.md
+++ b/docs/user-guide/accessing-the-cluster.md
@@ -182,9 +182,8 @@ From within a pod the recommended ways to connect to API are:
Kubernetes API to the localhost interface of the pod, so that other processes
in any container of the pod can access it. See this [example of using kubectl proxy
in a pod](https://github.com/kubernetes/kubernetes/tree/{{page.githubbranch}}/examples/kubectl-container/).
- - use the Go client library, and create a client using the `client.NewInCluster()` factory.
- This handles locating and authenticating to the apiserver. See this [example of using Go client
- library in a pod](https://github.com/kubernetes/client-go/blob/master/examples/in-cluster/main.go).
+ - use the Go client library, and create a client using the `rest.InClusterConfig()` and `kubernetes.NewForConfig()` functions.
+ They handle locating and authenticating to the apiserver. [example](https://github.com/kubernetes/client-go/blob/master/examples/in-cluster/main.go)
In each case, the credentials of the pod are used to communicate securely with the apiserver.
From 30652c7847c6cb31b6b2cf171934f7a1b7c535f2 Mon Sep 17 00:00:00 2001
From: Matt Baldwin
Date: Tue, 6 Dec 2016 14:51:23 -0800
Subject: [PATCH 018/195] Adding Stackpoint.io as a turn-key provider.
Change-Id: I017e314f67ca3945f658f834ae5b908f30ddd65a
---
_data/guides.yml | 2 +
docs/getting-started-guides/index.md | 1 +
docs/getting-started-guides/stackpoint.md | 203 ++++++++++++++++++++++
3 files changed, 206 insertions(+)
create mode 100644 docs/getting-started-guides/stackpoint.md
diff --git a/_data/guides.yml b/_data/guides.yml
index 0c1a785720..6aa0b74c09 100644
--- a/_data/guides.yml
+++ b/_data/guides.yml
@@ -179,6 +179,8 @@ toc:
path: /docs/getting-started-guides/clc/
- title: Running Kubernetes on IBM SoftLayer
path: https://github.com/patrocinio/kubernetes-softlayer
+ - title: Running Kubernetes on Multiple Clouds with Stackpoint.io
+ path: /docs/getting-started-guides/stackpoint/
- title: Running Kubernetes on Custom Solutions
section:
- title: Creating a Custom Cluster from Scratch
diff --git a/docs/getting-started-guides/index.md b/docs/getting-started-guides/index.md
index 609a0cc03d..daa2217c5e 100644
--- a/docs/getting-started-guides/index.md
+++ b/docs/getting-started-guides/index.md
@@ -58,6 +58,7 @@ few commands, and have active community support.
- [Azure](/docs/getting-started-guides/coreos/azure/) (Weave-based, contributed by WeaveWorks employees)
- [CenturyLink Cloud](/docs/getting-started-guides/clc)
- [IBM SoftLayer](https://github.com/patrocinio/kubernetes-softlayer)
+- [Stackpoint.io](/docs/getting-started-guides/stackpoint/)
### Custom Solutions
diff --git a/docs/getting-started-guides/stackpoint.md b/docs/getting-started-guides/stackpoint.md
new file mode 100644
index 0000000000..6cba8f5efb
--- /dev/null
+++ b/docs/getting-started-guides/stackpoint.md
@@ -0,0 +1,203 @@
+---
+assignees:
+- baldwinspc
+
+---
+
+* TOC
+{:toc}
+
+
+## Introduction
+
+StackPointCloud is the universal control plane for Kubernetes Anywhere. StackPointCloud allows you to deploy and manage a Kubernetes cluster to the cloud provider of your choice in 3 steps using a web-based interface.
+
+## AWS
+
+To create a Kubernetes cluster on AWS, you will need an Access Key ID and a Secret Access Key from AWS.
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select Amazon Web Services (AWS).
+
+### Configure Your Provider
+
+Add your Access Key ID and a Secret Access Key from AWS. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on AWS, [consult the Kubernetes documentation](http://kubernetes.io/docs/getting-started-guides/aws/).
+
+
+
+
+## GCE
+
+To create a Kubernetes cluster on GCE, you will need the Service Account JSON Data from Google.
+
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select Google Compute Engine (GCE).
+
+### Configure Your Provider
+
+Add your Service Account JSON Data from Google. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on GCE, [consult the Kubernetes documentation](http://kubernetes.io/docs/getting-started-guides/gce).
+
+
+
+
+
+## GKE
+
+To create a Kubernetes cluster on GKE, you will need the Service Account JSON Data from Google.
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select Google Container Engine (GKE).
+
+### Configure Your Provider
+
+Add your Service Account JSON Data from Google. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on GKE, consult [the official documentation](http://kubernetes.io/docs/).
+
+
+
+
+
+## DigitalOcean
+
+To create a Kubernetes cluster on DigitalOcean, you will need a DigitalOcean API Token.
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select DigitalOcean.
+
+### Configure Your Provider
+
+Add your DigitalOcean API Token. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on DigitalOcean, consult [the official documentation](http://kubernetes.io/docs/).
+
+
+
+
+
+## Microsoft Azure
+
+To create a Kubernetes cluster on Microsoft Azure, you will need an Azure Subscription ID, Username/Email, and Password.
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select Microsoft Azure.
+
+### Configure Your Provider
+
+Add your Azure Subscription ID, Username/Email, and Password. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on Azure, [consult the Kubernetes documentation](http://kubernetes.io/docs/getting-started-guides/azure/).
+
+
+
+
+
+## Packet
+
+To create a Kubernetes cluster on Packet, you will need a Packet API Key.
+
+### Choose a Provider
+
+Log in to [stackpoint.io](https://stackpoint.io) with a GitHub, Google, or Twitter account.
+
+Click **+ADD A CLUSTER NOW**.
+
+Click to select Packet.
+
+### Configure Your Provider
+
+Add your Packet API Key. Select your default StackPointCloud SSH keypair, or click **ADD SSH KEY** to add a new keypair.
+
+Click **SUBMIT** to submit the authorization information.
+
+### Configure Your Cluster
+
+Choose any extra options you may want to include with your cluster, then click **SUBMIT** to create the cluster.
+
+### Running the Cluster
+
+You can monitor the status of your cluster and suspend or delete it from [your stackpoint.io dashboard](https://stackpoint.io/#/clusters).
+
+For information on using and managing a Kubernetes cluster on Packet, consult [the official documentation](http://kubernetes.io/docs/).
From 0142f40d590dff710f5595a02c9125aad4088dfa Mon Sep 17 00:00:00 2001
From: Cao Shufeng
Date: Thu, 8 Dec 2016 07:41:32 -0500
Subject: [PATCH 019/195] [authorization] update doc about roleRef
This update is made according to this commit in code:
https://github.com/kubernetes/kubernetes/commit/8c788233e778f3b0ebef560762c1433c12ea1d43
It has already be released with k8s v1.5, so it's reasonable to
update the doc now.
---
docs/admin/authorization.md | 11 +++++------
1 file changed, 5 insertions(+), 6 deletions(-)
diff --git a/docs/admin/authorization.md b/docs/admin/authorization.md
index 1a86359a92..dfec38b216 100644
--- a/docs/admin/authorization.md
+++ b/docs/admin/authorization.md
@@ -297,9 +297,8 @@ subjects:
name: jane
roleRef:
kind: Role
- namespace: default
name: pod-reader
- apiVersion: rbac.authorization.k8s.io/v1alpha1
+ apiGroup: rbac.authorization.k8s.io
```
`RoleBindings` may also refer to a `ClusterRole`. However, a `RoleBinding` that
@@ -324,7 +323,7 @@ subjects:
roleRef:
kind: ClusterRole
name: secret-reader
- apiVersion: rbac.authorization.k8s.io/v1alpha1
+ apiGroup: rbac.authorization.k8s.io
```
Finally a `ClusterRoleBinding` may be used to grant permissions in all
@@ -336,14 +335,14 @@ namespaces. The following `ClusterRoleBinding` allows any user in the group
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1alpha1
metadata:
- name: read-secrets
+ name: read-secrets-global
subjects:
- kind: Group # May be "User", "Group" or "ServiceAccount"
name: manager
roleRef:
kind: ClusterRole
- name: secret-reader
- apiVersion: rbac.authorization.k8s.io/v1alpha1
+ name: secret-reader-global
+ apiGroup: rbac.authorization.k8s.io
```
### Referring to Resources
From eed33495017b9fa557cfb47b713b12e00ad1107f Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 13:41:49 +0000
Subject: [PATCH 020/195] getting-started: replace 'yum' with 'dnf' in Fedora
docs
dnf has replaced yum as the standard package install tool
in all versions of Fedora that are currently supported.
Signed-off-by: Daniel P. Berrange
---
.../fedora/fedora_ansible_config.md | 2 +-
.../getting-started-guides/fedora/fedora_manual_config.md | 8 ++++----
.../fedora/flannel_multi_node_cluster.md | 2 +-
3 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_ansible_config.md b/docs/getting-started-guides/fedora/fedora_ansible_config.md
index b5fe3802e0..3f4848f692 100644
--- a/docs/getting-started-guides/fedora/fedora_ansible_config.md
+++ b/docs/getting-started-guides/fedora/fedora_ansible_config.md
@@ -37,7 +37,7 @@ master,etcd = kube-master.example.com
If not
```shell
-yum install -y ansible git python-netaddr
+dnf install -y ansible git python-netaddr
```
**Now clone down the Kubernetes repository**
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index d1948530a8..134ebabff1 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -33,18 +33,18 @@ fed-node = 192.168.121.65
**Prepare the hosts:**
* Install Kubernetes on all hosts - fed-{master,node}. This will also pull in docker. Also install etcd on fed-master. This guide has been tested with kubernetes-0.18 and beyond.
-* The [--enablerepo=updates-testing](https://fedoraproject.org/wiki/QA:Updates_Testing) directive in the yum command below will ensure that the most recent Kubernetes version that is scheduled for pre-release will be installed. This should be a more recent version than the Fedora "stable" release for Kubernetes that you would get without adding the directive.
-* If you want the very latest Kubernetes release [you can download and yum install the RPM directly from Fedora Koji](http://koji.fedoraproject.org/koji/packageinfo?packageID=19202) instead of using the yum install command below.
+* The [--enablerepo=updates-testing](https://fedoraproject.org/wiki/QA:Updates_Testing) directive in the dnf command below will ensure that the most recent Kubernetes version that is scheduled for pre-release will be installed. This should be a more recent version than the Fedora "stable" release for Kubernetes that you would get without adding the directive.
+* If you want the very latest Kubernetes release [you can download and dnf install the RPM directly from Fedora Koji](http://koji.fedoraproject.org/koji/packageinfo?packageID=19202) instead of using the dnf install command below.
* Running on AWS EC2 with RHEL 7.2, you need to enable "extras" repository for yum by editing `/etc/yum.repos.d/redhat-rhui.repo` and changing the changing the `enable=0` to `enable=1` for extras.
```shell
-yum -y install --enablerepo=updates-testing kubernetes
+dnf -y install --enablerepo=updates-testing kubernetes
```
* Install etcd and iptables
```shell
-yum -y install etcd iptables
+dnf -y install etcd iptables
```
* Add master and node to /etc/hosts on all machines (not needed if hostnames already in DNS). Make sure that communication works between fed-master and fed-node by using a utility such as ping.
diff --git a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
index bcd10f57b9..494f7cd343 100644
--- a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
+++ b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
@@ -148,7 +148,7 @@ bash-4.3#
This will place you inside the container. Install iproute and iputils packages to install ip and ping utilities. Due to a [bug](https://bugzilla.redhat.com/show_bug.cgi?id=1142311), it is required to modify capabilities of ping binary to work around "Operation not permitted" error.
```shell
-bash-4.3# yum -y install iproute iputils
+bash-4.3# dnf -y install iproute iputils
bash-4.3# setcap cap_net_raw-ep /usr/bin/ping
```
From 28b636c466e8ebe1b8693cc86a8d2dedf702f187 Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 13:43:01 +0000
Subject: [PATCH 021/195] getting-started: don't use updates-testing repo for
Fedora
There is no reason to tell people to enable updates-testing
repo for Fedora by default. The latest stable packages are
already in the main repos and updates-testing should only be
used by people wishing to test & report quality of pre-released
software, not general Kubnetes users.
Also remove the link to Koji builds - any Koji build which
is working well enough to user will be submitted as an update.
Telling users to install packages straight from Koji will
lead to them using potentially unstable / buggy builds.
Signed-off-by: Daniel P. Berrange
---
docs/getting-started-guides/fedora/fedora_manual_config.md | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index 134ebabff1..20deecf4cc 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -33,12 +33,10 @@ fed-node = 192.168.121.65
**Prepare the hosts:**
* Install Kubernetes on all hosts - fed-{master,node}. This will also pull in docker. Also install etcd on fed-master. This guide has been tested with kubernetes-0.18 and beyond.
-* The [--enablerepo=updates-testing](https://fedoraproject.org/wiki/QA:Updates_Testing) directive in the dnf command below will ensure that the most recent Kubernetes version that is scheduled for pre-release will be installed. This should be a more recent version than the Fedora "stable" release for Kubernetes that you would get without adding the directive.
-* If you want the very latest Kubernetes release [you can download and dnf install the RPM directly from Fedora Koji](http://koji.fedoraproject.org/koji/packageinfo?packageID=19202) instead of using the dnf install command below.
* Running on AWS EC2 with RHEL 7.2, you need to enable "extras" repository for yum by editing `/etc/yum.repos.d/redhat-rhui.repo` and changing the changing the `enable=0` to `enable=1` for extras.
```shell
-dnf -y install --enablerepo=updates-testing kubernetes
+dnf -y install kubernetes
```
* Install etcd and iptables
From d35fdeb503fcba2d02aef7b86123ccf8555070d4 Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 14:17:27 +0000
Subject: [PATCH 022/195] getting-started: only list config vars that need
changing
The KUBE_LOGTOSTDERR, KUBE_LOG_LEVEL and KUBE_ALLOW_PRIV
settings will already have correct values out of the box,
so no need to tell people to set them.
Signed-off-by: Daniel P. Berrange
---
.../fedora/fedora_manual_config.md | 14 +++-----------
1 file changed, 3 insertions(+), 11 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index 20deecf4cc..0086af1d14 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -52,20 +52,12 @@ echo "192.168.121.9 fed-master
192.168.121.65 fed-node" >> /etc/hosts
```
-* Edit /etc/kubernetes/config which will be the same on all hosts (master and node) to contain:
+* Edit /etc/kubernetes/config (which should be the same on all hosts) to set
+the name of the master server:
```shell
# Comma separated list of nodes in the etcd cluster
KUBE_MASTER="--master=http://fed-master:8080"
-
-# logging to stderr means we get it in the systemd journal
-KUBE_LOGTOSTDERR="--logtostderr=true"
-
-# journal message level, 0 is debug
-KUBE_LOG_LEVEL="--v=0"
-
-# Should this cluster be allowed to run privileged docker containers
-KUBE_ALLOW_PRIV="--allow-privileged=false"
```
* Disable the firewall on both the master and node, as docker does not play well with other firewall rule managers. Please note that iptables-services does not exist on default fedora server install.
@@ -93,7 +85,7 @@ KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
KUBE_API_ARGS=""
```
-* Edit /etc/etcd/etcd.conf,let the etcd to listen all the ip instead of 127.0.0.1, if not, you will get the error like "connection refused". Note that Fedora 22 uses etcd 2.0, One of the changes in etcd 2.0 is that now uses port 2379 and 2380 (as opposed to etcd 0.46 which userd 4001 and 7001).
+* Edit /etc/etcd/etcd.conf to let etcd listen on all available IPs instead of 127.0.0.1; If you have not done this, you might see an error such as "connection refused". Note that Fedora 22 uses etcd 2.0, One of the changes in etcd 2.0 is that now uses port 2379 and 2380 (as opposed to etcd 0.46 which userd 4001 and 7001).
```shell
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:4001"
From 363052020c483f13a533775266891eb15ffdaf3d Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 14:19:21 +0000
Subject: [PATCH 023/195] getting-started: update to assume port numbers for
etcd >= 2.0
The docs still refer to etcd using port 4001, but in all
currently released Fedora versions it will be using 2379
Signed-off-by: Daniel P. Berrange
---
docs/getting-started-guides/fedora/fedora_manual_config.md | 6 +++---
.../fedora/flannel_multi_node_cluster.md | 4 ++--
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index 0086af1d14..52627c9f47 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -76,7 +76,7 @@ systemctl stop iptables-services firewalld
KUBE_API_ADDRESS="--address=0.0.0.0"
# Comma separated list of nodes in the etcd cluster
-KUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:4001"
+KUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:2379"
# Address range to use for services
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
@@ -85,10 +85,10 @@ KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
KUBE_API_ARGS=""
```
-* Edit /etc/etcd/etcd.conf to let etcd listen on all available IPs instead of 127.0.0.1; If you have not done this, you might see an error such as "connection refused". Note that Fedora 22 uses etcd 2.0, One of the changes in etcd 2.0 is that now uses port 2379 and 2380 (as opposed to etcd 0.46 which userd 4001 and 7001).
+* Edit /etc/etcd/etcd.conf to let etcd listen on all available IPs instead of 127.0.0.1; If you have not done this, you might see an error such as "connection refused".
```shell
-ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:4001"
+ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
```
* Create /var/run/kubernetes on master:
diff --git a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
index 494f7cd343..a7f25b0d14 100644
--- a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
+++ b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
@@ -55,7 +55,7 @@ Edit the flannel configuration file /etc/sysconfig/flanneld as follows:
# Flanneld configuration options
# etcd url location. Point this to the server where etcd runs
-FLANNEL_ETCD="http://fed-master:4001"
+FLANNEL_ETCD="http://fed-master:2379"
# etcd config key. This is the configuration key that flannel queries
# For address range assignment
@@ -104,7 +104,7 @@ Now check the interfaces on the nodes. Notice there is now a flannel.1 interface
From any node in the cluster, check the cluster members by issuing a query to etcd server via curl (only partial output is shown using `grep -E "\{|\}|key|value"`). If you set up a 1 master and 3 nodes cluster, you should see one block for each node showing the subnets they have been assigned. You can associate those subnets to each node by the MAC address (VtepMAC) and IP address (Public IP) that is listed in the output.
```shell
-curl -s http://fed-master:4001/v2/keys/coreos.com/network/subnets | python -mjson.tool
+curl -s http://fed-master:2379/v2/keys/coreos.com/network/subnets | python -mjson.tool
```
```json
From 0275ca78d048b23d57b5e45a9446c2c759bffa75 Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 14:23:07 +0000
Subject: [PATCH 024/195] getting-started: remove note to create
/var/run/kubernetes
The /var/run/kubernetes directory is already created by
installation of the kubernetes RPM with correct user
and group ownership and permissions.
Signed-off-by: Daniel P. Berrange
---
.../getting-started-guides/fedora/fedora_manual_config.md | 8 --------
1 file changed, 8 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index 52627c9f47..7b196a0711 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -91,14 +91,6 @@ KUBE_API_ARGS=""
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
```
-* Create /var/run/kubernetes on master:
-
-```shell
-mkdir /var/run/kubernetes
-chown kube:kube /var/run/kubernetes
-chmod 750 /var/run/kubernetes
-```
-
* Start the appropriate services on master:
```shell
From 33a83b1221b71835f3fcf4fc73c9503306acd6e7 Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 13:49:06 +0000
Subject: [PATCH 025/195] getting-started: remove note about installing
iptables on Fedora
The install of kubernetes pulls in docker, which has a direct
dependancy on iptables. So there is no need to tell people to
yum install iptables manually.
Signed-off-by: Daniel P. Berrange
---
docs/getting-started-guides/fedora/fedora_manual_config.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index 7b196a0711..d404aa315c 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -39,10 +39,10 @@ fed-node = 192.168.121.65
dnf -y install kubernetes
```
-* Install etcd and iptables
+* Install etcd
```shell
-dnf -y install etcd iptables
+dnf -y install etcd
```
* Add master and node to /etc/hosts on all machines (not needed if hostnames already in DNS). Make sure that communication works between fed-master and fed-node by using a utility such as ping.
From a6e375a4b1ff5262ff05069884a4a5f1de5ea196 Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Fri, 11 Nov 2016 15:07:16 +0000
Subject: [PATCH 026/195] getting-started: add instruction to install flannel
The Fedora multi-node doc need to tell users to install
flannel, since previous setup won't have brought it in.
Signed-off-by: Daniel P. Berrange
---
.../fedora/flannel_multi_node_cluster.md | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
index a7f25b0d14..a0a5c80cb4 100644
--- a/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
+++ b/docs/getting-started-guides/fedora/flannel_multi_node_cluster.md
@@ -49,6 +49,12 @@ etcdctl get /coreos.com/network/config
**Perform following commands on all Kubernetes nodes**
+Install the flannel package
+
+```shell
+# dnf -y install flannel
+```
+
Edit the flannel configuration file /etc/sysconfig/flanneld as follows:
```shell
From f891170c92a1ccf1d84ebe2cd83e9a80bc712e7a Mon Sep 17 00:00:00 2001
From: "Daniel P. Berrange"
Date: Mon, 21 Nov 2016 15:28:31 +0000
Subject: [PATCH 027/195] getting-started: note that Fedora can use VMs or bare
metal
Although the Fedora install docs are under the "Bare Metal"
section in the docs, the instructions provided work fine
for Fedora installs in virtual machines
Signed-off-by: Daniel P. Berrange
---
docs/getting-started-guides/fedora/fedora_manual_config.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/getting-started-guides/fedora/fedora_manual_config.md b/docs/getting-started-guides/fedora/fedora_manual_config.md
index d404aa315c..d111c7c771 100644
--- a/docs/getting-started-guides/fedora/fedora_manual_config.md
+++ b/docs/getting-started-guides/fedora/fedora_manual_config.md
@@ -11,7 +11,7 @@ assignees:
## Prerequisites
-1. You need 2 or more machines with Fedora installed.
+1. You need 2 or more machines with Fedora installed. These can be either bare metal machines or virtual machines.
## Instructions
From c029794dc87aabe3f47a51dae5db769531823d77 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexandre=20Gonz=C3=A1lez?=
Date: Sun, 13 Nov 2016 22:47:32 +0100
Subject: [PATCH 028/195] Use --decode for base64 command
`-d` is used for the Linux version of the command but in the Mac/BSD version they use `-D`.
Using `--decode` we are sure that the flag is compatible with both.
---
docs/user-guide/secrets/index.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/user-guide/secrets/index.md b/docs/user-guide/secrets/index.md
index c55868f1f1..13f5a1eec1 100644
--- a/docs/user-guide/secrets/index.md
+++ b/docs/user-guide/secrets/index.md
@@ -158,7 +158,7 @@ type: Opaque
Decode the password field:
```shell
-$ echo "MWYyZDFlMmU2N2Rm" | base64 -d
+$ echo "MWYyZDFlMmU2N2Rm" | base64 --decode
1f2d1e2e67df
```
From 54a08f7bdb77d8675c066fefac8479994a8c4446 Mon Sep 17 00:00:00 2001
From: Jeff Schroeder
Date: Thu, 8 Dec 2016 16:59:52 -0600
Subject: [PATCH 029/195] Linkify issue for audit support in kubernetes
---
docs/admin/audit.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/admin/audit.md b/docs/admin/audit.md
index c3a6fda6da..e195d0909f 100644
--- a/docs/admin/audit.md
+++ b/docs/admin/audit.md
@@ -23,7 +23,7 @@ answer the following questions:
- to where was it going?
NOTE: Currently, Kubernetes provides only basic audit capabilities, there is still a lot
-of work going on to provide fully featured auditing capabilities (see https://github.com/kubernetes/features/issues/22).
+of work going on to provide fully featured auditing capabilities (see [this issue](https://github.com/kubernetes/features/issues/22)).
Kubernetes audit is part of [kube-apiserver](/docs/admin/kube-apiserver) logging all requests
coming to the server. Each audit log contains two entries:
From 2a122c7a00b891ec6a3ad9fe24255b65a91c7c2c Mon Sep 17 00:00:00 2001
From: CaoShuFeng
Date: Thu, 8 Dec 2016 17:28:56 -0600
Subject: [PATCH 030/195] Update authorization.md
fix role name
---
docs/admin/authorization.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/admin/authorization.md b/docs/admin/authorization.md
index dfec38b216..57018e35fa 100644
--- a/docs/admin/authorization.md
+++ b/docs/admin/authorization.md
@@ -341,7 +341,7 @@ subjects:
name: manager
roleRef:
kind: ClusterRole
- name: secret-reader-global
+ name: secret-reader
apiGroup: rbac.authorization.k8s.io
```
From cb85b960e301d5561df89091772464d0d303657c Mon Sep 17 00:00:00 2001
From: Bilgin Ibryam
Date: Fri, 9 Dec 2016 00:16:46 +0000
Subject: [PATCH 031/195] Fixed wrong URL
---
docs/contribute/write-new-topic.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/contribute/write-new-topic.md b/docs/contribute/write-new-topic.md
index c34f3cfde1..d4037e724b 100644
--- a/docs/contribute/write-new-topic.md
+++ b/docs/contribute/write-new-topic.md
@@ -77,7 +77,7 @@ Depending page type, create an entry in one of these files:
{% capture whatsnext %}
* Learn about [using page templates](/docs/contribute/page-templates/).
* Learn about [staging your changes](/docs/contribute/stage-documentation-changes).
-* Learn about [creating a pull request](/docs/contribute/write-new-topic).
+* Learn about [creating a pull request](/docs/contribute/create-pull-request/).
{% endcapture %}
{% include templates/task.md %}
From 3ebef7eeceb9a93f19be6947961c2dd9738d9a5d Mon Sep 17 00:00:00 2001
From: Bilgin Ibryam
Date: Fri, 9 Dec 2016 08:49:26 +0000
Subject: [PATCH 032/195] Fixed typos
---
docs/admin/dns.md | 20 ++++++++++----------
1 file changed, 10 insertions(+), 10 deletions(-)
diff --git a/docs/admin/dns.md b/docs/admin/dns.md
index d75acfa093..5e9d55f822 100644
--- a/docs/admin/dns.md
+++ b/docs/admin/dns.md
@@ -70,7 +70,7 @@ is no longer supported.
When enabled, pods are assigned a DNS A record in the form of `pod-ip-address.my-namespace.pod.cluster.local`.
-For example, a pod with ip `1.2.3.4` in the namespace `default` with a dns name of `cluster.local` would have an entry: `1-2-3-4.default.pod.cluster.local`.
+For example, a pod with ip `1.2.3.4` in the namespace `default` with a DNS name of `cluster.local` would have an entry: `1-2-3-4.default.pod.cluster.local`.
#### A Records and hostname based on Pod's hostname and subdomain fields
@@ -171,7 +171,7 @@ busybox 1/1 Running 0
Once that pod is running, you can exec nslookup in that environment:
```
-kubectl exec busybox -- nslookup kubernetes.default
+kubectl exec -ti busybox -- nslookup kubernetes.default
```
You should see something like:
@@ -194,10 +194,10 @@ If the nslookup command fails, check the following:
Take a look inside the resolv.conf file. (See "Inheriting DNS from the node" and "Known issues" below for more information)
```
-cat /etc/resolv.conf
+kubectl exec busybox cat /etc/resolv.conf
```
-Verify that the search path and name server are set up like the following (note that seach path may vary for different cloud providers):
+Verify that the search path and name server are set up like the following (note that search path may vary for different cloud providers):
```
search default.svc.cluster.local svc.cluster.local cluster.local google.internal c.gce_project_id.internal
@@ -210,7 +210,7 @@ options ndots:5
Errors such as the following indicate a problem with the kube-dns add-on or associated Services:
```
-$ kubectl exec busybox -- nslookup kubernetes.default
+$ kubectl exec -ti busybox -- nslookup kubernetes.default
Server: 10.0.0.10
Address 1: 10.0.0.10
@@ -220,7 +220,7 @@ nslookup: can't resolve 'kubernetes.default'
or
```
-$ kubectl exec busybox -- nslookup kubernetes.default
+$ kubectl exec -ti busybox -- nslookup kubernetes.default
Server: 10.0.0.10
Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
@@ -244,7 +244,7 @@ kube-dns-v19-ezo1y 3/3 Running 0
...
```
-If you see that no pod is running or that the pod has failed/completed, the dns add-on may not be deployed by default in your current environment and you will have to deploy it manually.
+If you see that no pod is running or that the pod has failed/completed, the DNS add-on may not be deployed by default in your current environment and you will have to deploy it manually.
#### Check for Errors in the DNS pod
@@ -258,7 +258,7 @@ kubectl logs --namespace=kube-system $(kubectl get pods --namespace=kube-system
See if there is any suspicious log. W, E, F letter at the beginning represent Warning, Error and Failure. Please search for entries that have these as the logging level and use [kubernetes issues](https://github.com/kubernetes/kubernetes/issues) to report unexpected errors.
-#### Is dns service up?
+#### Is DNS service up?
Verify that the DNS service is up by using the `kubectl get service` command.
@@ -277,7 +277,7 @@ kube-dns 10.0.0.10 53/UDP,53/TCP 1h
If you have created the service or in the case it should be created by default but it does not appear, see this [debugging services page](http://kubernetes.io/docs/user-guide/debugging-services/) for more information.
-#### Are dns endpoints exposed?
+#### Are DNS endpoints exposed?
You can verify that dns endpoints are exposed by using the `kubectl get endpoints` command.
@@ -348,7 +348,7 @@ some of those settings will be lost. As a partial workaround, the node can run
`dnsmasq` which will provide more `nameserver` entries, but not more `search`
entries. You can also use kubelet's `--resolv-conf` flag.
-If you are using Alpine version 3.3 or earlier as your base image, dns may not
+If you are using Alpine version 3.3 or earlier as your base image, DNS may not
work properly owing to a known issue with Alpine. Check [here](https://github.com/kubernetes/kubernetes/issues/30215)
for more information.
From 8dad44f45c892bf4b4117ae6d8731d9bfcd97a6e Mon Sep 17 00:00:00 2001
From: Derek Carr
Date: Thu, 8 Dec 2016 14:34:33 -0500
Subject: [PATCH 033/195] quota by storage class
---
docs/admin/resourcequota/index.md | 21 +++++++++++++++++++--
1 file changed, 19 insertions(+), 2 deletions(-)
diff --git a/docs/admin/resourcequota/index.md b/docs/admin/resourcequota/index.md
index ff76942702..93da108b99 100644
--- a/docs/admin/resourcequota/index.md
+++ b/docs/admin/resourcequota/index.md
@@ -52,8 +52,7 @@ Resource Quota is enforced in a particular namespace when there is a
## Compute Resource Quota
-You can limit the total sum of [compute resources](/docs/user-guide/compute-resources) and [storage resources](/docs/user-guide/persistent-volumes)
-that can be requested in a given namespace.
+You can limit the total sum of [compute resources](/docs/user-guide/compute-resources) that can be requested in a given namespace.
The following resource types are supported:
@@ -65,7 +64,25 @@ The following resource types are supported:
| `memory` | Across all pods in a non-terminal state, the sum of memory requests cannot exceed this value. |
| `requests.cpu` | Across all pods in a non-terminal state, the sum of CPU requests cannot exceed this value. |
| `requests.memory` | Across all pods in a non-terminal state, the sum of memory requests cannot exceed this value. |
+
+## Storage Resource Quota
+
+You can limit the total sum of [storage resources](/docs/user-guide/persistent-volumes) that can be requested in a given namespace.
+
+In addition, you can limit consumption of storage resources based on associated storage-class.
+
+| Resource Name | Description |
+| --------------------- | ----------------------------------------------------------- |
| `requests.storage` | Across all persistent volume claims, the sum of storage requests cannot exceed this value. |
+| `persistentvolumeclaims` | The total number of [persistent volume claims](/docs/user-guide/persistent-volumes/#persistentvolumeclaims) that can exist in the namespace. |
+| `.storageclass.storage.k8s.io/requests.storage` | Across all persistent volume claims associated with the storage-class-name, the sum of storage requests cannot exceed this value. |
+| `.storageclass.storage.k8s.io/persistentvolumeclaims` | Across all persistent volume claims associated with the storage-class-name, the total number of [persistent volume claims](/docs/user-guide/persistent-volumes/#persistentvolumeclaims) that can exist in the namespace. |
+
+For example, if an operator wants to quota storage with `gold` storage class separate from `bronze` storage class, the operator can
+define a quota as follows:
+
+* `gold.storageclass.storage.k8s.io/requests.storage: 500Gi`
+* `bronze.storageclass.storage.k8s.io/requests.storage: 100Gi`
## Object Count Quota
From 08a199d6d17009a85edc3aaa226845d91079fb36 Mon Sep 17 00:00:00 2001
From: Eric Baum
Date: Fri, 9 Dec 2016 23:03:48 +0000
Subject: [PATCH 034/195] Update header
Updates header to remove hamburger on desktop, set 100px margin, and
adds 100px margin to body.
---
_includes/head-header.html | 10 +++++-
_sass/_base.sass | 71 ++++++++++++++++++++++++++++++++++++++
_sass/_desktop.sass | 20 +++++++++--
images/search-icon.svg | 13 +++++++
js/script.js | 18 ++++++++++
5 files changed, 128 insertions(+), 4 deletions(-)
create mode 100644 images/search-icon.svg
diff --git a/_includes/head-header.html b/_includes/head-header.html
index 17a83fa31e..598f6e80fb 100644
--- a/_includes/head-header.html
+++ b/_includes/head-header.html
@@ -20,8 +20,16 @@
+
diff --git a/_sass/_base.sass b/_sass/_base.sass
index 635012a39b..7ef5103ff8 100644
--- a/_sass/_base.sass
+++ b/_sass/_base.sass
@@ -234,6 +234,40 @@ header
color: $blue
text-decoration: none
+// Global Nav - 12/9/2016 Update
+
+ul.global-nav
+ display: none
+
+ li
+ display: inline-block
+ margin-right: 14px
+
+ a
+ color: #fff
+ font-weight: bold
+ padding: 0
+ position: relative
+
+ &.active:after
+ position: absolute
+ width: 100%
+ height: 2px
+ content: ''
+ bottom: -4px
+ left: 0
+ background: #fff
+
+
+.flip-nav ul.global-nav li a,
+.open-nav ul.global-nav li a,
+ color: #333
+
+.flip-nav ul.global-nav li a.active:after,
+.open-nav ul.global-nav li a.active:after,
+
+ background: $blue
+
// FLIP NAV
.flip-nav
header
@@ -301,6 +335,26 @@ header
padding-left: 0
padding-right: 0
margin-bottom: 0
+ position: relative
+
+ &.bot-bar:after
+ display: block
+ margin-bottom: -20px
+ height: 8px
+ width: 100%
+ background-color: transparentize(white, 0.9)
+ content: ''
+
+ &.no-sub
+
+ h5
+ display: none
+
+ h1
+ margin-bottom: 20px
+
+#home #hero:after
+ display: none
// VENDOR STRIP
#vendorStrip
@@ -482,6 +536,19 @@ section
margin: 0 auto
height: 44px
line-height: 44px
+ position: relative
+
+ &:before
+ position: absolute
+ width: 15px
+ height: 15px
+ content: ''
+ right: 8px
+ top: 7px
+ background-image: url(/images/search-icon.svg)
+ background-repeat: no-repeat
+ background-size: 100% 100%
+ z-index: 1
#search
width: 100%
@@ -490,6 +557,10 @@ section
line-height: 30px
font-size: 16px
vertical-align: top
+ background: #fff
+ border: none
+ border-radius: 4px
+ position: relative
#encyclopedia
diff --git a/_sass/_desktop.sass b/_sass/_desktop.sass
index 2e70b23e8a..27fbc46ae1 100644
--- a/_sass/_desktop.sass
+++ b/_sass/_desktop.sass
@@ -3,6 +3,15 @@ $vendor-strip-height: 44px
$video-section-height: 550px
@media screen and (min-width: 1025px)
+ #hamburger
+ display: none
+
+ ul.global-nav
+ display: inline-block
+
+ #docs #vendorStrip #searchBox:before
+ top: 15px
+
#vendorStrip
height: $vendor-strip-height
line-height: $vendor-strip-height
@@ -40,7 +49,7 @@ $video-section-height: 550px
#searchBox
float: right
- width: 30%
+ width: 320px
#search
vertical-align: middle
@@ -65,7 +74,7 @@ $video-section-height: 550px
#encyclopedia
- padding: 50px 50px 20px 20px
+ padding: 50px 50px 100px 100px
clear: both
#docsToc
@@ -88,6 +97,11 @@ $video-section-height: 550px
section, header, footer
main
max-width: $main-max-width
+
+ header, #vendorStrip, #encyclopedia, #hero h1, #hero h5, #docs #hero h1, #docs #hero h5,
+ #community #hero h1, .gridPage #hero h1, #community #hero h5, .gridPage #hero h5
+ padding-left: 100px
+ padding-right: 100px
#home
section, header, footer
@@ -276,7 +290,7 @@ $video-section-height: 550px
text-align: left
h1
- padding: 20px
+ padding: 20px 100px
#tryKubernetes
width: auto
diff --git a/images/search-icon.svg b/images/search-icon.svg
new file mode 100644
index 0000000000..285f57caff
--- /dev/null
+++ b/images/search-icon.svg
@@ -0,0 +1,13 @@
+
+
+
+
diff --git a/js/script.js b/js/script.js
index 22eff0a1b4..b944d91175 100755
--- a/js/script.js
+++ b/js/script.js
@@ -503,3 +503,21 @@ var pushmenu = (function(){
show: show
};
})();
+
+$(function() {
+
+ // Make global nav be active based on pathname
+ if ((location.pathname.split("/")[1]) !== ""){
+ $('.global-nav li a[href^="/' + location.pathname.split("/")[1] + '"]').addClass('active');
+ }
+
+ // If vendor strip doesn't exist add className
+ if ( !$('#vendorStrip').length > 0 ) {
+ $('#hero').addClass('bot-bar');
+ }
+
+ // If is not homepage add class to hero section
+ if (!$('#home').length > 0 ) {
+ $('#hero').addClass('no-sub');
+ }
+});
\ No newline at end of file
From fb7cca7a2fe9ef91b3cd094d734cb52c575c61c1 Mon Sep 17 00:00:00 2001
From: "xialong.lee"
Date: Sat, 10 Dec 2016 13:19:49 +0800
Subject: [PATCH 035/195] fix-typo
---
docs/admin/dns.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/docs/admin/dns.md b/docs/admin/dns.md
index d75acfa093..44dd79b557 100644
--- a/docs/admin/dns.md
+++ b/docs/admin/dns.md
@@ -60,7 +60,7 @@ of the form `auto-generated-name.my-svc.my-namespace.svc.cluster.local`.
### Backwards compatibility
-Previous versions of kube-dns made names of the for
+Previous versions of kube-dns made names of the form
`my-svc.my-namespace.cluster.local` (the 'svc' level was added later). This
is no longer supported.
@@ -114,7 +114,7 @@ Given a Pod with the hostname set to "foo" and the subdomain set to "bar", and a
With v1.2, the Endpoints object also has a new annotation `endpoints.beta.kubernetes.io/hostnames-map`. Its value is the json representation of map[string(IP)][endpoints.HostRecord], for example: '{"10.245.1.6":{HostName: "my-webserver"}}'.
If the Endpoints are for a headless service, an A record is created with the format ...svc.
-For the example json, if endpoints are for a headless service named "bar", and one of the endpoints has IP "10.245.1.6", an A is created with the name "my-webserver.bar.my-namespace.svc.cluster.local" and the A record lookup would return "10.245.1.6".
+For the example json, if endpoints are for a headless service named "bar", and one of the endpoints has IP "10.245.1.6", an A record is created with the name "my-webserver.bar.my-namespace.svc.cluster.local" and the A record lookup would return "10.245.1.6".
This endpoints annotation generally does not need to be specified by end-users, but can used by the internal service controller to deliver the aforementioned feature.
With v1.3, The Endpoints object can specify the `hostname` for any endpoint, along with its IP. The hostname field takes precedence over the hostname value
From 7fcf266a242fb64a75008b8a6a8b4fc94a38c0a9 Mon Sep 17 00:00:00 2001
From: craigbox
Date: Sat, 10 Dec 2016 18:10:54 +0000
Subject: [PATCH 036/195] Adjust header formatting
There are too many horizontal lines in the documentation, which makes knowing which things are headings (h2) and which are sub-headings (h3) almost impossible.
I've tidied up the weights a little to make it more obvious and trimmed some excess whitespace. Ultimately I think a typographer's eye on the single choice of font-face (perhaps a serif for headings?) would be worthwhile.
---
_sass/_base.sass | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/_sass/_base.sass b/_sass/_base.sass
index 109124052f..3fba0239c8 100644
--- a/_sass/_base.sass
+++ b/_sass/_base.sass
@@ -712,7 +712,6 @@ dd
font-weight: 500
margin-bottom: 30px
padding-bottom: 10px
- border-bottom: 1px solid #cccccc
// Make sure anchor links aren't hidden by the header
&:before
@@ -722,6 +721,9 @@ dd
height: $header-clearance
visibility: hidden
+ h1,h2
+ border-bottom: 1px solid #cccccc
+
h1
font-size: 32px
padding-right: 60px
@@ -731,9 +733,12 @@ dd
h3
font-size: 24px
+ font-weight: 300
+ margin-bottom: 5px
h4
font-size: 20px
+ margin-bottom: 0px
h5, h6
font-size: 16px
From af3d24c7ef9ca8fce02eecf63d3d74c356888ed8 Mon Sep 17 00:00:00 2001
From: craigbox
Date: Sat, 10 Dec 2016 18:20:24 +0000
Subject: [PATCH 037/195] Change vertical alignment of code blocks
Things looked odd due to the padding on code blocks; they sat 2px above the text surrounding them. This PR will fix that by aligning inline code blocks, and the text surrounding them, on their baseline.
---
_sass/_base.sass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/_sass/_base.sass b/_sass/_base.sass
index 109124052f..c4db0c93ec 100644
--- a/_sass/_base.sass
+++ b/_sass/_base.sass
@@ -753,7 +753,7 @@ dd
background-color: $light-grey
color: $dark-grey
font-family: $mono-font
- vertical-align: bottom
+ vertical-align: baseline
font-size: 14px
font-weight: bold
padding: 2px 4px
From 53d55320e778c1346c8b7654b21f2e9d0abaa41b Mon Sep 17 00:00:00 2001
From: Junaid Ali
Date: Mon, 12 Dec 2016 22:03:46 +0500
Subject: [PATCH 038/195] Improving expose-intro.html
- Fixed a typo
Signed-off-by: Junaid Ali
---
docs/tutorials/kubernetes-basics/expose-intro.html | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/tutorials/kubernetes-basics/expose-intro.html b/docs/tutorials/kubernetes-basics/expose-intro.html
index 524e051c68..4e65a16988 100644
--- a/docs/tutorials/kubernetes-basics/expose-intro.html
+++ b/docs/tutorials/kubernetes-basics/expose-intro.html
@@ -31,7 +31,7 @@
This abstraction will allow us to expose Pods to traffic originating from outside the cluster. Services have their own unique cluster-private IP address and expose a port to receive traffic. If you choose to expose the service outside the cluster, the options are:
-
LoadBalancer - provides a public IP address (what you would typically use when you run Kubernetes on GKE or AWS)
+
LoadBalancer - provides a public IP address (what you would typically use when you run Kubernetes on GCE or AWS)
NodePort - exposes the Service on the same port on each Node of the cluster using NAT (available on all Kubernetes clusters, and in Minikube)
From e8b2830a070d2fab7a5cc309dd6e03766e4444a2 Mon Sep 17 00:00:00 2001
From: Ahmet Alp Balkan
Date: Mon, 12 Dec 2016 20:59:10 -0800
Subject: [PATCH 039/195] Fix bullet list syntax
---
docs/getting-started-guides/windows/index.md | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/docs/getting-started-guides/windows/index.md b/docs/getting-started-guides/windows/index.md
index a28e037908..fb692d7a63 100644
--- a/docs/getting-started-guides/windows/index.md
+++ b/docs/getting-started-guides/windows/index.md
@@ -47,8 +47,11 @@ To run Windows Server Containers on Kubernetes, you'll need to set up both your
2. CNI network plugin installed.
### Component Setup
+
Requirements
-* Git, Go 1.7.1+
+
+* Git
+* Go 1.7.1+
* make (if using Linux or MacOS)
* Important notes and other dependencies are listed [here](https://github.com/kubernetes/kubernetes/blob/master/docs/devel/development.md#building-kubernetes-on-a-local-osshell-environment)
From dafc22c79aba088801577ee22afc049d77e001d1 Mon Sep 17 00:00:00 2001
From: Ahmet Alp Balkan
Date: Mon, 12 Dec 2016 21:03:11 -0800
Subject: [PATCH 040/195] Add empty space before code blocks to render
If there is no empty space before the 3-backtick code blocks,
they are rendered incorrectly on the website.
---
docs/getting-started-guides/windows/index.md | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/docs/getting-started-guides/windows/index.md b/docs/getting-started-guides/windows/index.md
index a28e037908..ff7cf971fb 100644
--- a/docs/getting-started-guides/windows/index.md
+++ b/docs/getting-started-guides/windows/index.md
@@ -80,12 +80,14 @@ The below example setup assumes one Linux and two Windows Server 2016 nodes and
| Win02 | `` | 192.168.2.0/24 |
**Lin01**
+
```
ip route add 192.168.1.0/24 via
ip route add 192.168.2.0/24 via
```
**Win01**
+
```
docker network create -d transparent --gateway 192.168.1.1 --subnet 192.168.1.0/24
# A bridge is created with Adapter name "vEthernet (HNSTransparent)". Set its IP address to transparent network gateway
@@ -95,6 +97,7 @@ route add 192.168.2.0 mask 255.255.255.0 192.168.2.1 if
# A bridge is created with Adapter name "vEthernet (HNSTransparent)". Set its IP address to transparent network gateway
@@ -129,6 +132,7 @@ Run the following in a PowerShell window with administrative privileges. Be awar
## Scheduling Pods on Windows
Because your cluster has both Linux and Windows nodes, you must explictly set the nodeSelector constraint to be able to schedule Pods to Windows nodes. You must set nodeSelector with the label beta.kubernetes.io/os to the value windows; see the following example:
+
```
{
"apiVersion": "v1",
From ad99f86c357b45ceeb2e9eb6e82ab3a0d8c72dc3 Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 13:54:28 -0500
Subject: [PATCH 041/195] Use the GitHub Pages Gem
The GitHub Pages Gem (https://github.com/github/pages-gem)
is a meta-gem that does two things:
1. It locks dependencies to the same version used by GitHub Pages
ensuring that when you build the site locally, you're using the same
version of plugins and other dependencies used in production.
2. When loaded as part of the :jekyll_plugins group, it allows
the Gem to set certain configuration defaults and overrides
(such as activating default plugins) to ensure, once again
that your local preview replicates the production version
as closely as possible.
---
Gemfile | 19 +---------
Gemfile.lock | 104 ++++++++++++++++++++++++++++++++-------------------
2 files changed, 66 insertions(+), 57 deletions(-)
diff --git a/Gemfile b/Gemfile
index e29e26cdc8..0c8671cdee 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,20 +1,3 @@
source "https://rubygems.org"
-gem "jekyll", "3.2.1"
-gem "jekyll-sass-converter", "1.3.0"
-gem "minima", "1.1.0"
-gem "kramdown", "1.11.1"
-gem "liquid", "3.0.6"
-gem "rouge", "1.11.1"
-gem "jemoji", "0.7.0"
-gem "jekyll-mentions", "1.2.0"
-gem "jekyll-redirect-from", "0.11.0"
-gem "jekyll-sitemap", "0.10.0"
-gem "jekyll-feed", "0.5.1"
-gem "jekyll-gist", "1.4.0"
-gem "jekyll-paginate", "1.1.0"
-gem "jekyll-coffeescript", "1.0.1"
-gem "jekyll-seo-tag", "2.0.0"
-gem "jekyll-github-metadata", "2.0.2"
-gem "listen", "3.0.6"
-gem "activesupport", "4.2.7"
+gem "github-pages", group: :jekyll_plugins
diff --git a/Gemfile.lock b/Gemfile.lock
index ee385b958b..c6f7150060 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -11,19 +11,52 @@ GEM
coffee-script (2.4.1)
coffee-script-source
execjs
- coffee-script-source (1.10.0)
+ coffee-script-source (1.11.1)
colorator (1.1.0)
+ ethon (0.10.1)
+ ffi (>= 1.3.0)
execjs (2.7.0)
- faraday (0.9.2)
+ faraday (0.10.0)
multipart-post (>= 1.2, < 3)
ffi (1.9.14)
forwardable-extended (2.6.0)
gemoji (2.1.0)
+ github-pages (104)
+ activesupport (= 4.2.7)
+ github-pages-health-check (= 1.2.0)
+ jekyll (= 3.3.0)
+ jekyll-avatar (= 0.4.2)
+ jekyll-coffeescript (= 1.0.1)
+ jekyll-feed (= 0.8.0)
+ jekyll-gist (= 1.4.0)
+ jekyll-github-metadata (= 2.2.0)
+ jekyll-mentions (= 1.2.0)
+ jekyll-paginate (= 1.1.0)
+ jekyll-redirect-from (= 0.11.0)
+ jekyll-sass-converter (= 1.3.0)
+ jekyll-seo-tag (= 2.1.0)
+ jekyll-sitemap (= 0.12.0)
+ jekyll-swiss (= 0.4.0)
+ jemoji (= 0.7.0)
+ kramdown (= 1.11.1)
+ liquid (= 3.0.6)
+ listen (= 3.0.6)
+ mercenary (~> 0.3)
+ minima (= 2.0.0)
+ rouge (= 1.11.1)
+ terminal-table (~> 1.4)
+ github-pages-health-check (1.2.0)
+ addressable (~> 2.3)
+ net-dns (~> 0.8)
+ octokit (~> 4.0)
+ public_suffix (~> 1.4)
+ typhoeus (~> 0.7)
html-pipeline (2.4.2)
activesupport (>= 2)
nokogiri (>= 1.4)
i18n (0.7.0)
- jekyll (3.2.1)
+ jekyll (3.3.0)
+ addressable (~> 2.4)
colorator (~> 1.0)
jekyll-sass-converter (~> 1.0)
jekyll-watch (~> 1.1)
@@ -33,14 +66,17 @@ GEM
pathutil (~> 0.9)
rouge (~> 1.7)
safe_yaml (~> 1.0)
+ jekyll-avatar (0.4.2)
+ jekyll (~> 3.0)
jekyll-coffeescript (1.0.1)
coffee-script (~> 2.2)
- jekyll-feed (0.5.1)
+ jekyll-feed (0.8.0)
+ jekyll (~> 3.3)
jekyll-gist (1.4.0)
octokit (~> 4.2)
- jekyll-github-metadata (2.0.2)
+ jekyll-github-metadata (2.2.0)
jekyll (~> 3.1)
- octokit (~> 4.0)
+ octokit (~> 4.0, != 4.4.0)
jekyll-mentions (1.2.0)
activesupport (~> 4.0)
html-pipeline (~> 2.3)
@@ -50,9 +86,11 @@ GEM
jekyll (>= 2.0)
jekyll-sass-converter (1.3.0)
sass (~> 3.2)
- jekyll-seo-tag (2.0.0)
- jekyll (~> 3.1)
- jekyll-sitemap (0.10.0)
+ jekyll-seo-tag (2.1.0)
+ jekyll (~> 3.3)
+ jekyll-sitemap (0.12.0)
+ jekyll (~> 3.3)
+ jekyll-swiss (0.4.0)
jekyll-watch (1.5.0)
listen (~> 3.0, < 3.1)
jemoji (0.7.0)
@@ -68,52 +106,40 @@ GEM
rb-inotify (>= 0.9.7)
mercenary (0.3.6)
mini_portile2 (2.1.0)
- minima (1.1.0)
- minitest (5.9.0)
+ minima (2.0.0)
+ minitest (5.10.1)
multipart-post (2.0.0)
- nokogiri (1.6.8)
+ net-dns (0.8.0)
+ nokogiri (1.6.8.1)
mini_portile2 (~> 2.1.0)
- pkg-config (~> 1.1.7)
- octokit (4.3.0)
- sawyer (~> 0.7.0, >= 0.5.3)
+ octokit (4.6.2)
+ sawyer (~> 0.8.0, >= 0.5.3)
pathutil (0.14.0)
forwardable-extended (~> 2.6)
- pkg-config (1.1.7)
- rb-fsevent (0.9.7)
+ public_suffix (1.5.3)
+ rb-fsevent (0.9.8)
rb-inotify (0.9.7)
ffi (>= 0.5.0)
rouge (1.11.1)
safe_yaml (1.0.4)
sass (3.4.22)
- sawyer (0.7.0)
- addressable (>= 2.3.5, < 2.5)
- faraday (~> 0.8, < 0.10)
+ sawyer (0.8.1)
+ addressable (>= 2.3.5, < 2.6)
+ faraday (~> 0.8, < 1.0)
+ terminal-table (1.7.3)
+ unicode-display_width (~> 1.1.1)
thread_safe (0.3.5)
+ typhoeus (0.8.0)
+ ethon (>= 0.8.0)
tzinfo (1.2.2)
thread_safe (~> 0.1)
+ unicode-display_width (1.1.2)
PLATFORMS
ruby
DEPENDENCIES
- activesupport (= 4.2.7)
- jekyll (= 3.2.1)
- jekyll-coffeescript (= 1.0.1)
- jekyll-feed (= 0.5.1)
- jekyll-gist (= 1.4.0)
- jekyll-github-metadata (= 2.0.2)
- jekyll-mentions (= 1.2.0)
- jekyll-paginate (= 1.1.0)
- jekyll-redirect-from (= 0.11.0)
- jekyll-sass-converter (= 1.3.0)
- jekyll-seo-tag (= 2.0.0)
- jekyll-sitemap (= 0.10.0)
- jemoji (= 0.7.0)
- kramdown (= 1.11.1)
- liquid (= 3.0.6)
- listen (= 3.0.6)
- minima (= 1.1.0)
- rouge (= 1.11.1)
+ github-pages
BUNDLED WITH
- 1.11.2
+ 1.13.6
From f08e807226c86204a2e448d3c90a4c9380f5c08b Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 13:56:49 -0500
Subject: [PATCH 042/195] Use Jekyll Feed to generate the Atom feed.
Jekyll Feed (https://github.com/jekyll/jekyll-feed) is an official
Jekyll plugin which should replicate the existing feed nearly
identically, but with a shared, battle-tested template that
accounts for all sorts of edge cases like relative links in feed
entries.
It should be a drop in replacement and "just work" without any
additional configuration.
---
_config.yml | 1 +
feed.xml | 29 -----------------------------
2 files changed, 1 insertion(+), 29 deletions(-)
delete mode 100644 feed.xml
diff --git a/_config.yml b/_config.yml
index 5b7f442fd8..ea24a1bfc0 100644
--- a/_config.yml
+++ b/_config.yml
@@ -30,3 +30,4 @@ permalink: pretty
gems:
- jekyll-redirect-from
+ - jekyll-feed
diff --git a/feed.xml b/feed.xml
deleted file mode 100644
index ae253f98b5..0000000000
--- a/feed.xml
+++ /dev/null
@@ -1,29 +0,0 @@
----
----
-
-
-
- {{ site.title | xml_escape }}
- {{ site.description | xml_escape }}
- {{ site.url }}{{ site.baseurl }}/
-
- {{ site.time | date_to_rfc822 }}
- {{ site.time | date_to_rfc822 }}
- Jekyll v{{ jekyll.version }}
- {% for post in site.posts limit:10 %}
-
- {{ post.title | xml_escape }}
- {{ post.content | xml_escape }}
- {{ post.date | date_to_rfc822 }}
- {{ post.url | prepend: site.baseurl | prepend: site.url }}
- {{ post.url | prepend: site.baseurl | prepend: site.url }}
- {% for tag in post.tags %}
- {{ tag | xml_escape }}
- {% endfor %}
- {% for cat in post.categories %}
- {{ cat | xml_escape }}
- {% endfor %}
-
- {% endfor %}
-
-
From 8f1f8d47bbb2f8b3233c525fbafe35dc5a1b137b Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 13:58:48 -0500
Subject: [PATCH 043/195] Use Jekyll Sitemap to generate the sitemap.
Jekyll Sitemap (https://github.com/jekyll/jekyll-sitemap) is an
official Jekyll plugin, which should serve as a drop-in replacement
for the existing sitemap.xml. The resulting sitemap should be largely
similar to the existing sitemap, but with a shared, battle-tested
template that accounts for all sorts of edge cases, handles collections
and static files, etc.
---
_config.yml | 1 +
sitemap.xml | 18 ------------------
2 files changed, 1 insertion(+), 18 deletions(-)
delete mode 100644 sitemap.xml
diff --git a/_config.yml b/_config.yml
index ea24a1bfc0..2c3c51a83b 100644
--- a/_config.yml
+++ b/_config.yml
@@ -31,3 +31,4 @@ permalink: pretty
gems:
- jekyll-redirect-from
- jekyll-feed
+ - jekyll-sitemap
diff --git a/sitemap.xml b/sitemap.xml
deleted file mode 100644
index ff1dd0d398..0000000000
--- a/sitemap.xml
+++ /dev/null
@@ -1,18 +0,0 @@
----
----
-
-
-
-
- http://kubernetes.io/
- {{ site.time | date_to_xmlschema }}
-
-{% for page in site.pages %}{% if page.url != "/404.html" and page.url != "/sitemap.xml" and page.url != "/css/styles.css" %}
- http://kubernetes.io{{ page.url }}
- {% if page.date %}{{ page.date | date_to_xmlschema }}{% else %}{{ site.time | date_to_xmlschema }}{% endif %}
-{% endif %}{% endfor %}
-
From cb9c9dccfd81dec094a43a2123f8fcdef2394ff3 Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:03:11 -0500
Subject: [PATCH 044/195] Add title and description to _config.yml
Although the title already has a "name" entry, this commit replicates
the name as "title", and adds a "description" entry, both of which
are shared across common, official Jekyll plugins like jekyll-feed
and jekyll-sitemap.
This allows the feed and sitemap to properly output the title and
description in various places.
---
_config.yml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/_config.yml b/_config.yml
index 2c3c51a83b..c95c693508 100644
--- a/_config.yml
+++ b/_config.yml
@@ -1,4 +1,6 @@
name: Kubernetes
+title: Kubernetes
+description: Production-Grade Container Orchestration
markdown: kramdown
kramdown:
input: GFM
From 69a6958209c5887ca4d6a88dc2fca4aed0db7a3d Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:04:51 -0500
Subject: [PATCH 045/195] Remove "baseurl" from _config.yml
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Remove baseurl from the config for three reasons:
1. It's not used anyplace within the site
2. The site’s base URL is only to be used when the resulting site
lives at a subpath of the domain. Otherwise, the subpath should be
nil, not /.
3. When the Pages Gem is loaded as part of the :jekyll_plugins
group, baseurl and url are set automatically.
---
_config.yml | 1 -
1 file changed, 1 deletion(-)
diff --git a/_config.yml b/_config.yml
index c95c693508..b5c1134b21 100644
--- a/_config.yml
+++ b/_config.yml
@@ -7,7 +7,6 @@ kramdown:
html_to_native: true
hard_wrap: false
syntax_highlighter: rouge
-baseurl: /
incremental: true
safe: false
From dd1fa0039dfaac6564472515543396b2d02a5ccb Mon Sep 17 00:00:00 2001
From: hasahni
Date: Tue, 13 Dec 2016 11:06:35 -0800
Subject: [PATCH 046/195] Add Nuage as a networking plugin for Kubernetes.
(#1849)
---
docs/admin/networking.md | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/docs/admin/networking.md b/docs/admin/networking.md
index 28c259a5f7..9b77b3557a 100644
--- a/docs/admin/networking.md
+++ b/docs/admin/networking.md
@@ -169,6 +169,12 @@ Follow the "With Linux Bridge devices" section of [this very nice
tutorial](http://blog.oddbit.com/2014/08/11/four-ways-to-connect-a-docker/) from
Lars Kellogg-Stedman.
+### Nuage Networks VCS (Virtualized Cloud Services)
+
+[Nuage](www.nuagenetworks.net) provides a highly scalable policy-based Software-Defined Networking (SDN) platform. Nuage uses the open source Open vSwitch for the data plane along with a feature rich SDN Controller built on open standards.
+
+The Nuage platform uses overlays to provide seamless policy-based networking between Kubernetes Pods and non-Kubernetes environments (VMs and bare metal servers). Nuage’s policy abstraction model is designed with applications in mind and makes it easy to declare fine-grained policies for applications.The platform’s real-time analytics engine enables visibility and security monitoring for Kubernetes applications.
+
### OpenVSwitch
[OpenVSwitch](/docs/admin/ovs-networking) is a somewhat more mature but also
From 91634d19c0a12266d3fff01a30ea3a70fe93720e Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:07:53 -0500
Subject: [PATCH 047/195] Use absolute_url to generate the cannonical URL
Starting with Jekyll v3.3, Jekyll ships with `relative_url` and
`absolute_url` filters. Rather than manual concatenating strings,
we can rely on Jekyll to handle the logic in Ruby land, which
takes into account the site's URL (locally and in production), and
handles things like double "/"s.
---
_includes/head-header.html | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/_includes/head-header.html b/_includes/head-header.html
index 17a83fa31e..28cec80a84 100644
--- a/_includes/head-header.html
+++ b/_includes/head-header.html
@@ -2,7 +2,7 @@
- {% if !page.no_canonical %}{% endif %}
+ {% if !page.no_canonical %}{% endif %}
From 00abb3c8439b74489c04752645238129679feaf2 Mon Sep 17 00:00:00 2001
From: Alejandro Escobar
Date: Tue, 13 Dec 2016 10:59:56 -0800
Subject: [PATCH 048/195] added .idea to gitignore since this is a viable ide
to write markdown text with.
---
.gitignore | 1 +
1 file changed, 1 insertion(+)
diff --git a/.gitignore b/.gitignore
index de345e5f59..c54db9289e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@ _site/**
.sass-cache/**
CNAME
.travis.yml
+.idea/
From aeefabff875e57e52f119324f418aa74b8de59f6 Mon Sep 17 00:00:00 2001
From: steveperry-53
Date: Wed, 23 Nov 2016 22:14:09 -0800
Subject: [PATCH 049/195] Move README content to contribution section.
---
README.md | 175 +-----------------
_data/support.yml | 4 +-
docs/contribute/create-pull-request.md | 6 +
.../contribute/stage-documentation-changes.md | 12 +-
docs/contribute/write-new-topic.md | 46 ++++-
editdocs.md | 13 +-
partners/index.html | 4 +
7 files changed, 80 insertions(+), 180 deletions(-)
diff --git a/README.md b/README.md
index 2801eaead0..845b56b29e 100644
--- a/README.md
+++ b/README.md
@@ -1,182 +1,19 @@
-## Instructions for Contributing to the Docs/Website
+## Instructions for Contributing to the Kubernetes Documentation
-Welcome! We are very pleased you want to contribute to the documentation and/or website for Kubernetes.
+Welcome! We are very pleased you want to contribute to the Kubernetes documentation.
-You can click the "Fork" button in the upper-right area of the screen to create a copy of our site on your GitHub account called a "fork." Make any changes you want in your fork, and when you are ready to send those changes to us, go to the index page for your fork and click "New Pull Request" to let us know about it.
+You can click the **Fork** button in the upper-right area of the screen to create a copy of this repository in your GitHub account called a *fork*. Make any changes you want in your fork, and when you are ready to send those changes to us, go to your fork and create a new pull request to let us know about it.
For more information about contributing to the Kubernetes documentation, see:
+* [Contributing to the kubernetes Documentation](http://kubernetes.io/editdocs/)
* [Creating a Documentation Pull Request](http://kubernetes.io/docs/contribute/create-pull-request/)
* [Writing a New Topic](http://kubernetes.io/docs/contribute/write-new-topic/)
* [Staging Your Documentation Changes](http://kubernetes.io/docs/contribute/stage-documentation-changes/)
* [Using Page Templates](http://kubernetes.io/docs/contribute/page-templates/)
-
-## Automatic Staging for Pull Requests
-
-When you create a pull request (either against master or the upcoming release), your changes are staged in a custom subdomain on Netlify so that you can see your changes in rendered form before the PR is merged. You can use this to verify that everything is correct before the PR gets merged. To view your changes:
-
-- Scroll down to the PR's list of Automated Checks
-- Click "Show All Checks"
-- Look for "deploy/netlify"; you'll see "Deploy Preview Ready!" if staging was successful
-- Click "Details" to bring up the staged site and navigate to your changes
-
-## Branch structure and staging
-
-The current version of the website is served out of the `master` branch. To make changes to the live docs, such as bug fixes, broken links, typos, etc, **target your pull request to the master branch**
-
-The `release-1.x` branch stores changes for **upcoming releases of Kubernetes**. For example, the `release-1.5` branch has changes for the 1.5 release. These changes target branches (and *not* master) to avoid publishing documentation updates prior to the release for which they're relevant. If you have a change for an upcoming release of Kubernetes, **target your pull request to the appropriate release branch**.
-
-The staging site for the next upcoming Kubernetes release is here: [http://kubernetes-io-vnext-staging.netlify.com/](http://kubernetes-io-vnext-staging.netlify.com/). The staging site reflects the current state of what's been merged in the release branch, or in other words, what the docs will look like for the next upcoming release. It's automatically updated as new PRs get merged.
-
-## Staging the site locally (using Docker)
-
-Don't like installing stuff? Download and run a local staging server with a single `docker run` command.
-
- git clone https://github.com/kubernetes/kubernetes.github.io.git
- cd kubernetes.github.io
- docker run -ti --rm -v "$PWD":/k8sdocs -p 4000:4000 gcr.io/google-samples/k8sdocs:1.0
-
-Then visit [http://localhost:4000](http://localhost:4000) to see our site. Any changes you make on your local machine will be automatically staged.
-
-If you're interested you can view [the Dockerfile for this image](https://github.com/kubernetes/kubernetes.github.io/blob/master/staging-container/Dockerfile).
-
-## Staging the site locally (from scratch setup)
-
-The below commands to setup your environment for running GitHub pages locally. Then, any edits you make will be viewable
-on a lightweight webserver that runs on your local machine.
-
-This will typically be the fastest way (by far) to iterate on docs changes and see them staged, once you get this set up, but it does involve several install steps that take awhile to complete, and makes system-wide modifications.
-
-Install Ruby 2.2 or higher. If you're on Linux, run these commands:
-
- apt-get install software-properties-common
- apt-add-repository ppa:brightbox/ruby-ng
- apt-get install ruby2.2
- apt-get install ruby2.2-dev
-
-* If you're on a Mac, follow [these instructions](https://gorails.com/setup/osx/).
-* If you're on a Windows machine you can use the [Ruby Installer](http://rubyinstaller.org/downloads/). During the installation make sure to check the option for *Add Ruby executables to your PATH*.
-
-The remainder of the steps should work the same across operating systems.
-
-To confirm you've installed Ruby correctly, at the command prompt run `gem --version` and you should get a response with your version number. Likewise you can confirm you have Git installed properly by running `git --version`, which will respond with your version of Git.
-
-Install the GitHub Pages package, which includes Jekyll:
-
- gem install github-pages
-
-Clone our site:
-
- git clone https://github.com/kubernetes/kubernetes.github.io.git
-
-Make any changes you want. Then, to see your changes locally:
-
- cd kubernetes.github.io
- jekyll serve
-
-Your copy of the site will then be viewable at: [http://localhost:4000](http://localhost:4000)
-(or wherever Jekyll tells you).
-
-## GitHub help
-
-If you're a bit rusty with git/GitHub, you might want to read
-[this](http://readwrite.com/2013/10/02/github-for-beginners-part-2) for a refresher.
-
-## Common Tasks
-
-### Edit Page Titles or Change the Left Navigation
-
-Edit the yaml files in `/_data/` for the Guides, Reference, Samples, or Support areas.
-
-You may have to exit and `jekyll clean` before restarting the `jekyll serve` to
-get changes to files in `/_data/` to show up.
-
-### Add Images
-
-Put the new image in `/images/docs/` if it's for the documentation, and just `/images/` if it's for the website.
-
-**For diagrams, we greatly prefer SVG files!**
-
-### Include code from another file
-
-To include a file that is hosted on this GitHub repo, insert this code:
-
-
{% include code.html language="<LEXERVALUE>" file="<RELATIVEPATH>" ghlink="<PATHFROMROOT>" %}
-
-* `LEXERVALUE`: The language in which the file was written; must be [a value supported by Rouge](https://github.com/jneen/rouge/wiki/list-of-supported-languages-and-lexers).
-* `RELATIVEPATH`: The path to the file you're including, relative to the current file.
-* `PATHFROMROOT`: The path to the file relative to root, e.g. `/docs/admin/foo.yaml`
-
-To include a file that is hosted in the external, main Kubernetes repo, make sure it's added to [/update-imported-docs.sh](https://github.com/kubernetes/kubernetes.github.io/blob/master/update-imported-docs.sh), and run it so that the file gets downloaded, then enter:
-
-
{% include code.html language="<LEXERVALUE>" file="<RELATIVEPATH>" k8slink="<PATHFROMK8SROOT>" %}
-
-* `PATHFROMK8SROOT`: The path to the file relative to the root of [the Kubernetes repo](https://github.com/kubernetes/kubernetes/tree/release-1.2), e.g. `/examples/rbd/foo.yaml`
-
-## Using tabs for multi-language examples
-
-By specifying some inline CSV in a varable called `tabspec`, you can include a file
-called `tabs.html` that generates tabs showing code examples in multiple langauges.
-
-
-
-In English, this would read: "Create a set of tabs with the alias `servicesample`,
-and have tabs visually labeled "JSON" and "YAML" that use `json` and `yaml` Rouge syntax highlighting, which display the contents of
-`service-sample.{extension}` on the page, and link to the file in GitHub at (full path)."
-
-Example file: [Pods: Multi-Container](http://kubernetes.io/docs/user-guide/pods/multi-container/).
-
-## Use a global variable
-
-The `/_config.yml` file defines some useful variables you can use when editing docs.
-
-* `page.githubbranch`: The name of the GitHub branch on the Kubernetes repo that is associated with this branch of the docs. e.g. `release-1.2`
-* `page.version` The version of Kubernetes associated with this branch of the docs. e.g. `v1.2`
-* `page.docsbranch` The name of the GitHub branch on the Docs/Website repo that you are currently using. e.g. `release-1.1` or `master`
-
-This keeps the docs you're editing aligned with the Kubernetes version you're talking about. For example, if you define a link like so, you'll never have to worry about it going stale in future doc branches:
-
-
View the README [here](http://releases.k8s.io/{{page.githubbranch}}/cluster/addons/README.md).
-
-That, of course, will send users to:
-
-[http://releases.k8s.io/release-1.2/cluster/addons/README.md](http://releases.k8s.io/release-1.2/cluster/addons/README.md)
-
-(Or whatever Kubernetes release that docs branch is associated with.)
-
-## Config yaml guidelines
-
-Guidelines for config yamls that are included in the site docs. These
-are the yaml or json files that contain Kubernetes object
-configuration to be used with `kubectl create -f` Config yamls should
-be:
-
-* Separate deployable files, not embedded in the document, unless very
- small variations of a full config.
-* Included in the doc with the include code
- [above.](#include-code-from-another-file)
-* In the same directory as the doc that they are being used in
- * If you are re-using a yaml from another doc, that is OK, just
- leave it there, don't move it up to a higher level directory.
-* Tested in
- [test/examples_test.go](https://github.com/kubernetes/kubernetes.github.io/blob/master/test/examples_test.go)
-* Follows
- [best practices.](http://kubernetes.io/docs/user-guide/config-best-practices/)
-
-Don't assume the reader has this repository checked out, use `kubectl
-create -f https://github...` in example commands. For Docker images
-used in config yamls, try to use an image from an existing Kubernetes
-example. If creating an image for a doc, follow the
-[example guidelines](https://github.com/kubernetes/kubernetes/blob/master/examples/guidelines.md#throughout)
-section on "Docker images" from the Kubernetes repository.
-
-## Partners
-Kubernetes partners refers to the companies who contribute to the Kubernetes core codebase, extend their platform to support Kubernetes or provide managed services to users centered around the Kubernetes platform. Partners can get their services and offerings added to the [partner page](https://k8s.io/partners) by completing and submitting the [partner request form](https://goo.gl/qcSnZF). Once the information and assets are verified, the partner product/services will be listed in the partner page. This would typically take 7-10 days.
+* [Documentation Style Guide](http://kubernetes.io/docs/contribute/style-guide/)
## Thank you!
-Kubernetes thrives on community participation and we really appreciate your
+Kubernetes thrives on community participation, and we really appreciate your
contributions to our site and our documentation!
diff --git a/_data/support.yml b/_data/support.yml
index 3e9ec08ee4..487ff3d614 100644
--- a/_data/support.yml
+++ b/_data/support.yml
@@ -6,6 +6,8 @@ toc:
- title: Contributing to the Kubernetes Docs
section:
+ - title: Contributing to the Kubernetes Documentation
+ path: /editdocs/
- title: Creating a Documentation Pull Request
path: /docs/contribute/create-pull-request/
- title: Writing a New Topic
@@ -51,5 +53,3 @@ toc:
path: https://github.com/kubernetes/kubernetes/releases/
- title: Release Roadmap
path: https://github.com/kubernetes/kubernetes/milestones/
- - title: Contributing to Kubernetes Documentation
- path: /editdocs/
diff --git a/docs/contribute/create-pull-request.md b/docs/contribute/create-pull-request.md
index 7f42bfb125..e74b49436e 100644
--- a/docs/contribute/create-pull-request.md
+++ b/docs/contribute/create-pull-request.md
@@ -80,6 +80,12 @@ site where you can verify that your changes have rendered correctly.
If needed, revise your pull request by committing changes to your
new branch in your fork.
+The staging site for the upcoming Kubernetes release is here:
+[http://kubernetes-io-vnext-staging.netlify.com/](http://kubernetes-io-vnext-staging.netlify.com/).
+The staging site reflects the current state of what's been merged in the
+release branch, or in other words, what the docs will look like for the
+next upcoming release. It's automatically updated as new PRs get merged.
+
{% endcapture %}
{% capture whatsnext %}
diff --git a/docs/contribute/stage-documentation-changes.md b/docs/contribute/stage-documentation-changes.md
index 8c01d92158..56177a3e3f 100644
--- a/docs/contribute/stage-documentation-changes.md
+++ b/docs/contribute/stage-documentation-changes.md
@@ -33,16 +33,18 @@ the master branch.
### Staging a pull request
-When you create pull request against the Kubernetes documentation
-repository, you can see your changes on a staging server.
+When you create a pull request, either against the master or <vnext>
+branch, your changes are staged in a custom subdomain on Netlify so that
+you can see your changes in rendered form before the pull request is merged.
1. In your GitHub account, in your new branch, submit a pull request to the
kubernetes/kubernetes.github.io repository. This opens a page that shows the
status of your pull request.
-1. Click **Show all checks**. Wait for the **deploy/netlify** check to complete.
-To the right of **deploy/netlify**, click **Details**. This opens a staging
-site where you see your changes.
+1. Scroll down to the list of automated checks. Click **Show all checks**.
+Wait for the **deploy/netlify** check to complete. To the right of
+**deploy/netlify**, click **Details**. This opens a staging site where you
+can see your changes.
### Staging locally using Docker
diff --git a/docs/contribute/write-new-topic.md b/docs/contribute/write-new-topic.md
index c34f3cfde1..9941ef5082 100644
--- a/docs/contribute/write-new-topic.md
+++ b/docs/contribute/write-new-topic.md
@@ -34,7 +34,7 @@ is the best fit for your content:
A concept page explains some aspect of Kubernetes. For example, a concept page might describe the Kubernetes Deployment object and explain the role it plays as an application is deployed, scaled, and updated. Typically, concept pages don't include sequences of steps, but instead provide links to tasks or tutorials.
-
+
Each page type has a
[template](/docs/contribute/page-templates/)
@@ -72,6 +72,50 @@ Depending page type, create an entry in one of these files:
* /_data/tutorials.yaml
* /_data/concepts.yaml
+### Including code from another file
+
+To include a code file in your topic, place the code file in the Kubernetes
+documentation repository, preferably in the same directory as your topic
+file. In your topic file, use the `include` tag:
+
+
{% include code.html language="<LEXERVALUE>" file="<RELATIVEPATH>" ghlink="/<PATHFROMROOT>" %}
+
+where:
+
+* `` is the language in which the file was written. This must be
+[a value supported by Rouge](https://github.com/jneen/rouge/wiki/list-of-supported-languages-and-lexers).
+* `` is the path to the file you're including, relative to the current file, for example, `gce-volume.yaml`.
+* `` is the path to the file relative to root, for example, `docs/tutorials/stateful-application/gce-volume.yaml`.
+
+Here's an example of using the `include` tag:
+
+
{% include code.html language="yaml" file="gce-volume.yaml" ghlink="/docs/tutorials/stateful-application/gce-volume.yaml" %}
+
+### Showing how to create an API object from a configuration file
+
+If you need to show the reader how to create an API object based on a
+configuration file, place the configuration file in the Kubernetes documentation
+repository, preferably in the same directory as your topic file.
+
+In your topic, show this command:
+
+ kubectl create -f http://k8s.io/
+
+where `` is the path to the configuration file relative to root,
+for example, `docs/tutorials/stateful-application/gce-volume.yaml`.
+
+Here's an example of a command that creates an API object from a configuration file:
+
+ kubectl create -f http://k8s.io/docs/tutorials/stateful-application/gce-volume.yaml
+
+For an example of a topic that uses this technique, see
+[Running a Single-Instance Stateful Application](/docs/tutorials/stateful-application/run-stateful-application/).
+
+### Adding images to a topic
+
+Put image files in the `/images` directory. The preferred
+image format is SVG.
+
{% endcapture %}
{% capture whatsnext %}
diff --git a/editdocs.md b/editdocs.md
index 0291912aca..1553e80aab 100644
--- a/editdocs.md
+++ b/editdocs.md
@@ -22,7 +22,7 @@ $( document ).ready(function() {
Continue your edit
-
Click the below link to edit the page you were just on. When you are done, press "Commit Changes" at the bottom of the screen. This will create a copy of our site on your GitHub account called a "fork." You can make other changes in your fork after it is created, if you want. When you are ready to send us all your changes, go to the index page for your fork and click "New Pull Request" to let us know about it.
+
Click the button below to edit the page you were just on. When you are done, click Commit Changes at the bottom of the screen. This creates a copy of our site in your GitHub account called a fork. You can make other changes in your fork after it is created, if you want. When you are ready to send us all your changes, go to the index page for your fork and click New Pull Request to let us know about it.
Click the below button to visit the repo for our site. You can then click the "Fork" button in the upper-right area of the screen to create a copy of our site on your GitHub account called a "fork." Make any changes you want in your fork, and when you are ready to send those changes to us, go to the index page for your fork and click "New Pull Request" to let us know about it.
+
Click the button below to visit the repo for our site. You can then click the Fork button in the upper-right area of the screen to create a copy of our site in your GitHub account called a fork. Make any changes you want in your fork, and when you are ready to send those changes to us, go to the index page for your fork and click New Pull Request to let us know about it.
+
-{% include_relative README.md %}
+For more information about contributing to the Kubernetes documentation, see:
+
+* [Creating a Documentation Pull Request](http://kubernetes.io/docs/contribute/create-pull-request/)
+* [Writing a New Topic](http://kubernetes.io/docs/contribute/write-new-topic/)
+* [Staging Your Documentation Changes](http://kubernetes.io/docs/contribute/stage-documentation-changes/)
+* [Using Page Templates](http://kubernetes.io/docs/contribute/page-templates/)
+* [Documentation Style Guide](http://kubernetes.io/docs/contribute/style-guide/)
diff --git a/partners/index.html b/partners/index.html
index 9adf7206d9..1b558f882e 100644
--- a/partners/index.html
+++ b/partners/index.html
@@ -14,7 +14,11 @@ title: Partners
+<<<<<<< HEAD
We are working with a broad group of partners who contribute to the Kubernetes core codebase, making it stronger and richer. These partners create a vibrant Kubernetes ecosystem supporting a spectrum of complementing platforms, from open source solutions to market-leading technologies.
+=======
+
We are working with a broad group of partners who contribute to the Kubernetes core codebase, making it stronger and richer. There partners create a vibrant Kubernetes ecosystem supporting a spectrum of complementing platforms, from open source solutions to market-leading technologies. Partners can get their services and offerings added to this page by completing and submitting the partner request form.
+>>>>>>> ebaa392... Addressed comments by jaredbhatti.
Technology Partners
Services Partners
From 731f5bac1aea36e1b3fa937552f27b3d503cf83a Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:16:54 -0500
Subject: [PATCH 050/195] Use Jekyll SEO Tag to generate the search engine HEAD
meta.
This commit moves the site to use the official Jekyll SEO Tag
plugin (https://github.com/jekyll/jekyll-seo-tag) to generate the
search-engine meta in the HEAD of each page. The title and canonical
URL output should be largely the same as before, but with additional
metadata, such as JSON-LD (for richer indexing), Twitter card
metadat, etc.
Like the other plugins, this should largely work out-of-the-box,
with no additional day-to-day configuration, but is customizable
where desired.
---
_config.yml | 6 ++++++
_includes/head-header.html | 3 +--
2 files changed, 7 insertions(+), 2 deletions(-)
diff --git a/_config.yml b/_config.yml
index b5c1134b21..8b131eb433 100644
--- a/_config.yml
+++ b/_config.yml
@@ -33,3 +33,9 @@ gems:
- jekyll-redirect-from
- jekyll-feed
- jekyll-sitemap
+ - jekyll-seo-tag
+
+# SEO
+logo: /images/favicon.png
+twitter:
+ username: kubernetesio
diff --git a/_includes/head-header.html b/_includes/head-header.html
index 28cec80a84..e2b18fa6ee 100644
--- a/_includes/head-header.html
+++ b/_includes/head-header.html
@@ -2,7 +2,6 @@
- {% if !page.no_canonical %}{% endif %}
@@ -14,7 +13,7 @@
- Kubernetes - {{ title }}
+ {% seo %}
From 5de11038b15670f28a4362f6f13afbc8f774d447 Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:21:22 -0500
Subject: [PATCH 051/195] Exclude 404.html from the sitemap.
See https://github.com/jekyll/jekyll-sitemap/issues/113#issuecomment-266834805
for making this the default behavior.
---
404.md | 1 +
1 file changed, 1 insertion(+)
diff --git a/404.md b/404.md
index 3d32e81bcf..8354c87820 100644
--- a/404.md
+++ b/404.md
@@ -3,6 +3,7 @@ layout: docwithnav
title: 404 Error!
permalink: /404.html
no_canonical: true
+sitemap: false
---
From e66750603f5a627c6ecbb5dda6698d045b219696 Mon Sep 17 00:00:00 2001
From: Ben Balter
Date: Tue, 13 Dec 2016 14:39:22 -0500
Subject: [PATCH 052/195] Don't use the site description as the index title
---
index.html | 10 ++++------
1 file changed, 4 insertions(+), 6 deletions(-)
diff --git a/index.html b/index.html
index a603025150..728100db84 100644
--- a/index.html
+++ b/index.html
@@ -1,9 +1,8 @@
---
-title: Production-Grade Container Orchestration
---
-
+
{% include head-header.html %}
@@ -22,7 +21,7 @@ title: Production-Grade Container Orchestration
-
+
@@ -110,7 +109,7 @@ title: Production-Grade Container Orchestration
exposing secrets in your stack configuration.
DesiredNumberScheduled is the total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: http://releases.k8s.io/HEAD/docs/admin/daemons.md
+
true
+
integer (int32)
+
+
+
+
numberReady
+
NumberReady is the number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.
+
true
+
integer (int32)
+
+
+
+
+
+
+
+
v1beta1.Job
+
+
Job represents the configuration of a single job. DEPRECATED: extensions/v1beta1.Job is deprecated, use batch/v1.Job instead.
ObjectFieldSelector selects an APIVersioned field of an object.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
apiVersion
+
Version of the schema the FieldPath is written in terms of, defaults to "v1".
+
false
+
string
+
+
+
+
fieldPath
+
Path of the field to select in the specified API version.
+
true
+
string
+
+
+
+
+
+
+
+
v1.SELinuxOptions
+
+
SELinuxOptions are the labels to be applied to the container
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
user
+
User is a SELinux user label that applies to the container.
+
false
+
string
+
+
+
+
role
+
Role is a SELinux role label that applies to the container.
+
false
+
string
+
+
+
+
type
+
Type is a SELinux type label that applies to the container.
+
false
+
string
+
+
+
+
level
+
Level is SELinux level label that applies to the container.
+
false
+
string
+
+
+
+
+
+
+
+
v1.VolumeMount
+
+
VolumeMount describes a mounting of a Volume within a container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
This must match the Name of a Volume.
+
true
+
string
+
+
+
+
readOnly
+
Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
+
false
+
boolean
+
false
+
+
+
mountPath
+
Path within the container at which the volume should be mounted. Must not contain :.
+
true
+
string
+
+
+
+
subPath
+
Path within the volume from which the container’s volume should be mounted. Defaults to "" (volume’s root).
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.IngressSpec
+
+
IngressSpec describes the Ingress the user wishes to exist.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
backend
+
A default backend capable of servicing requests that don’t match any rule. At least one of backend or rules must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.
TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
unversioned.StatusCause
+
+
StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
reason
+
A machine-readable description of the cause of the error. If this value is empty there is no information available.
+
false
+
string
+
+
+
+
message
+
A human-readable description of the cause of the error. This field may be presented as-is to a reader.
+
false
+
string
+
+
+
+
field
+
The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
+
+Examples:
+ "name" - the field "name" on the current resource
+ "items[0].name" - the field "name" on the first array entry in "items"
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.ReplicaSetCondition
+
+
ReplicaSetCondition describes the state of a replica set at a certain point.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
Type of replica set condition.
+
true
+
string
+
+
+
+
status
+
Status of the condition, one of True, False, Unknown.
+
true
+
string
+
+
+
+
lastTransitionTime
+
The last time the condition transitioned from one status to another.
+
false
+
string (date-time)
+
+
+
+
reason
+
The reason for the condition’s last transition.
+
false
+
string
+
+
+
+
message
+
A human readable message indicating details about the transition.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.NetworkPolicyList
+
+
Network Policy List is a list of NetworkPolicy objects.
Represents a Persistent Disk resource in Google Compute Engine.
+
+
+
A GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
+
false
+
string
+
+
+
+
partition
+
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
Spec to control the desired behavior of rolling update.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
maxUnavailable
+
The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0 if MaxSurge is 0. By default, a fixed value of 1 is used. Example: when this is set to 30%, the old RC can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.
+
false
+
string
+
+
+
+
maxSurge
+
The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. By default, a value of 1 is used. Example: when this is set to 30%, the new RC can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of desired pods.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.HTTPIngressRuleValue
+
+
HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://<host>/<path>?<searchpart> → backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last / and before the first ? or #.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
paths
+
A collection of paths that map requests to backends.
The contents of the target ConfigMap’s Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.
If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error. Paths must be relative and may not contain the .. path or start with ...
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.GitRepoVolumeSource
+
+
Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
repository
+
Repository URL
+
true
+
string
+
+
+
+
revision
+
Commit hash for the specified revision.
+
false
+
string
+
+
+
+
directory
+
Target directory name. Must not contain or start with ... If . is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
StartTime represents time when the job was acknowledged by the Job Manager. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
+
false
+
string (date-time)
+
+
+
+
completionTime
+
CompletionTime represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
+
false
+
string (date-time)
+
+
+
+
active
+
Active is the number of actively running pods.
+
false
+
integer (int32)
+
+
+
+
succeeded
+
Succeeded is the number of pods which reached Phase Succeeded.
+
false
+
integer (int32)
+
+
+
+
failed
+
Failed is the number of pods which reached Phase Failed.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.Capabilities
+
+
Adds and removes POSIX capabilities from running containers.
Command is the command line to execute inside the container, the working directory for the command is root (/) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions ('
+
', etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+
false
+
string array
+
+
+
+
+
+
+
v1.ObjectMeta
+
+
ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names
+
false
+
string
+
+
+
+
generateName
+
GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.
+
+If this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).
+
+Applied only if Name is not specified. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#idempotency
+
false
+
string
+
+
+
+
namespace
+
Namespace defines the space within each name must be unique. An empty namespace is equivalent to the "default" namespace, but "default" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.
+
+Must be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces
+
false
+
string
+
+
+
+
selfLink
+
SelfLink is a URL representing this object. Populated by the system. Read-only.
+
false
+
string
+
+
+
+
uid
+
UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.
+
+Populated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids
+
false
+
string
+
+
+
+
resourceVersion
+
An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.
+
+Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#concurrency-control-and-consistency
+
false
+
string
+
+
+
+
generation
+
A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.
+
false
+
integer (int64)
+
+
+
+
creationTimestamp
+
CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
+
+Populated by the system. Read-only. Null for lists. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
+
false
+
string (date-time)
+
+
+
+
deletionTimestamp
+
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.
+
+Populated by the system when a graceful deletion is requested. Read-only. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
+
false
+
string (date-time)
+
+
+
+
deletionGracePeriodSeconds
+
Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.
+
false
+
integer (int64)
+
+
+
+
labels
+
Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels
+
false
+
object
+
+
+
+
annotations
+
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations
+
false
+
object
+
+
+
+
ownerReferences
+
List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.
Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed.
+
false
+
string array
+
+
+
+
clusterName
+
The name of the cluster which the object belongs to. This is used to distinguish resources with same name and namespace in different clusters. This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.ReplicaSetSpec
+
+
ReplicaSetSpec is the specification of a ReplicaSet.
Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)
+
false
+
integer (int32)
+
+
+
+
selector
+
Selector is a label query over pods that should match the replica count. If the selector is empty, it is defaulted to the labels present on the pod template. Label keys and values that must match in order to be controlled by this replica set. More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
Template is the object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template’s node selector (or on every node if no node selector is specified). More info: http://kubernetes.io/docs/user-guide/replication-controller#pod-template
AzureFile represents an Azure File Service mount on the host and bind mount to the pod.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
secretName
+
the name of secret that contains Azure Storage Account Name and Key
+
true
+
string
+
+
+
+
shareName
+
Share Name
+
true
+
string
+
+
+
+
readOnly
+
Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
types.UID
+
+
+
+
v1.ISCSIVolumeSource
+
+
Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
targetPortal
+
iSCSI target portal. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
+
true
+
string
+
+
+
+
iqn
+
Target iSCSI Qualified Name.
+
true
+
string
+
+
+
+
lun
+
iSCSI target lun number.
+
true
+
integer (int32)
+
+
+
+
iscsiInterface
+
Optional: Defaults to default (tcp). iSCSI interface name that uses an iSCSI transport.
+
false
+
string
+
+
+
+
fsType
+
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#iscsi
+
false
+
string
+
+
+
+
readOnly
+
ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.EmptyDirVolumeSource
+
+
Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
medium
+
What type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir
desired number of instances for the scaled object.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
unversioned.Patch
+
+
Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.
+
+
+
+
v1.FlockerVolumeSource
+
+
Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
datasetName
+
Name of the dataset stored as metadata → name on the dataset for Flocker should be considered as deprecated
+
false
+
string
+
+
+
+
datasetUUID
+
UUID of the dataset. This is unique identifier of a Flocker dataset
+
false
+
string
+
+
+
+
+
+
+
+
v1.PersistentVolumeClaimVolumeSource
+
+
PersistentVolumeClaimVolumeSource references the user’s PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).
Will force the ReadOnly setting in VolumeMounts. Default false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
unversioned.ListMeta
+
+
ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
selfLink
+
SelfLink is a URL representing this object. Populated by the system. Read-only.
A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
matchLabels
+
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
+
false
+
object
+
+
+
+
matchExpressions
+
matchExpressions is a list of label selector requirements. The requirements are ANDed.
The revision to rollback to. If set to 0, rollbck to the last revision.
+
false
+
integer (int64)
+
+
+
+
+
+
+
+
v1.SecretVolumeSource
+
+
Adapts a Secret into a volume.
+
+
+
The contents of the target Secret’s Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.
If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error. Paths must be relative and may not contain the .. path or start with ...
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.EnvVarSource
+
+
EnvVarSource represents a source for the value of an EnvVar.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
fieldRef
+
Selects a field of the pod: supports metadata.name, metadata.namespace, metadata.labels, metadata.annotations, spec.nodeName, spec.serviceAccountName, status.podIP.
Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
driver
+
Driver is the name of the driver to use for this volume.
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends on FlexVolume script.
+
false
+
string
+
+
+
+
secretRef
+
Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
readOnly
+
Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.KeyToPath
+
+
Maps a string key to a path within a volume.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
key
+
The key to project.
+
true
+
string
+
+
+
+
path
+
The relative path of the file to map the key to. May not be an absolute path. May not contain the path element ... May not start with the string ...
+
true
+
string
+
+
+
+
mode
+
Optional: mode bits to use on this file, must be a value between 0 and 0777. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.VsphereVirtualDiskVolumeSource
+
+
Represents a vSphere volume resource.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
volumePath
+
Path that identifies vSphere volume vmdk
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
+
+
+
+
v1.DeleteOptions
+
+
DeleteOptions may be provided when deleting an API object
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int64)
+
+
+
+
preconditions
+
Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.
HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: http://kubernetes.io/docs/user-guide/volumes#hostpath
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
successThreshold
+
Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
failureThreshold
+
Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1beta1.DeploymentSpec
+
+
DeploymentSpec is the specification of the desired behavior of the Deployment.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
replicas
+
Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.
+
false
+
integer (int32)
+
+
+
+
selector
+
Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment.
Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)
+
false
+
integer (int32)
+
+
+
+
revisionHistoryLimit
+
The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified.
+
false
+
integer (int32)
+
+
+
+
paused
+
Indicates that the deployment is paused and will not be processed by the deployment controller.
+
false
+
boolean
+
false
+
+
+
rollbackTo
+
The config this deployment is rolling back to. Will be cleared after rollback is done.
The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Once autoRollback is implemented, the deployment controller will automatically rollback failed deployments. Note that progress will not be estimated during the time a deployment is paused. This is not set by default.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
unversioned.APIResourceList
+
+
APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.
The key of the secret to select from. Must be a valid secret key.
+
true
+
string
+
+
+
+
+
+
+
+
v1.Capability
+
+
+
+
unversioned.APIResource
+
+
APIResource specifies the name of a resource and whether it is namespaced.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
name is the name of the resource.
+
true
+
string
+
+
+
+
namespaced
+
namespaced indicates if a resource is namespaced or not.
+
true
+
boolean
+
false
+
+
+
kind
+
kind is the kind for the resource (e.g. Foo is the kind for a resource foo)
+
true
+
string
+
+
+
+
+
+
+
+
v1.DownwardAPIVolumeFile
+
+
DownwardAPIVolumeFile represents information to create the file containing the pod field
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
path
+
Required: Path is the relative path name of the file to be created. Must not be absolute or contain the .. path. Must be utf-8 encoded. The first item of the relative path must not start with ..
+
true
+
string
+
+
+
+
fieldRef
+
Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
Optional: mode bits to use on this file, must be a value between 0 and 0777. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.ContainerPort
+
+
ContainerPort represents a network port in a single container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
+
false
+
string
+
+
+
+
hostPort
+
Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
+
false
+
integer (int32)
+
+
+
+
containerPort
+
Number of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
+
true
+
integer (int32)
+
+
+
+
protocol
+
Protocol for port. Must be UDP or TCP. Defaults to "TCP".
List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers
Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
+
false
+
integer (int64)
+
+
+
+
activeDeadlineSeconds
+
Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
+
false
+
integer (int64)
+
+
+
+
dnsPolicy
+
Set DNS policy for containers within the pod. One of ClusterFirst or Default. Defaults to "ClusterFirst".
DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
+
false
+
string
+
+
+
+
nodeName
+
NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
+
false
+
string
+
+
+
+
hostNetwork
+
Host networking requested for this pod. Use the host’s network namespace. If this option is set, the ports that will be used must be specified. Default to false.
+
false
+
boolean
+
false
+
+
+
hostPID
+
Use the host’s pid namespace. Optional: Default to false.
+
false
+
boolean
+
false
+
+
+
hostIPC
+
Use the host’s ipc namespace. Optional: Default to false.
+
false
+
boolean
+
false
+
+
+
securityContext
+
SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field.
ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: http://kubernetes.io/docs/user-guide/images#specifying-imagepullsecrets-on-a-pod
Specifies the hostname of the Pod If not specified, the pod’s hostname will be set to a system-defined value.
+
false
+
string
+
+
+
+
subdomain
+
If specified, the fully qualified Pod hostname will be "<hostname>.<subdomain>.<pod namespace>.svc.<cluster domain>". If not specified, the pod will not have a domainname at all.
+
false
+
string
+
+
+
+
+
+
+
+
v1.Lifecycle
+
+
Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
postStart
+
PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
PreStop is called immediately before a container is terminated. The container is terminated after the handler completes. The reason for termination is passed to the handler. Regardless of the outcome of the handler, the container is eventually terminated. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
IngressTLS describes the transport layer security associated with an Ingress.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
hosts
+
Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.
+
false
+
string array
+
+
+
+
secretName
+
SecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the "Host" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.SubresourceReference
+
+
SubresourceReference contains enough information to let you inspect or modify the referred subresource.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#rbd
Represents a Photon Controller persistent disk resource.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
pdID
+
ID that identifies Photon Controller persistent disk
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.NetworkPolicySpec
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
podSelector
+
Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.
List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if namespace.networkPolicy.ingress.isolation is undefined and cluster policy allows it, OR if the traffic source is the pod’s local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not affect ingress isolation. If this field is present and contains at least one rule, this policy allows any traffic which matches at least one of the ingress rules in this list.
HTTPHeader describes a custom header to be used in HTTP probes
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The header field name
+
true
+
string
+
+
+
+
value
+
The header field value
+
true
+
string
+
+
+
+
+
+
+
+
v1beta1.HorizontalPodAutoscalerStatus
+
+
current status of a horizontal pod autoscaler
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
observedGeneration
+
most recent generation observed by this autoscaler.
+
false
+
integer (int64)
+
+
+
+
lastScaleTime
+
last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed.
+
false
+
string (date-time)
+
+
+
+
currentReplicas
+
current number of replicas of pods managed by this autoscaler.
+
true
+
integer (int32)
+
+
+
+
desiredReplicas
+
desired number of replicas of pods managed by this autoscaler.
+
true
+
integer (int32)
+
+
+
+
currentCPUUtilizationPercentage
+
current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.FCVolumeSource
+
+
Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
targetWWNs
+
Required: FC target worldwide names (WWNs)
+
true
+
string array
+
+
+
+
lun
+
Required: FC target lun number
+
true
+
integer (int32)
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
readOnly
+
Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1beta1.ThirdPartyResource
+
+
A ThirdPartyResource is a generic representation of a resource, it is used by add-ons and plugins to add new resource types to the API. It consists of one or more Versions of the api.
IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
host
+
Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in the RFC: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to the
+ IP in the Spec of the parent Ingress.
+2. The : delimiter is not respected because ports are not allowed.
+ Currently the port of an Ingress is implicitly :80 for http and
+ :443 for https.
+Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.
This is a label selector which selects Pods in this namespace. This field follows standard label selector semantics. If not provided, this selector selects no pods. If present but empty, this selector selects all pods in this namespace.
Selects Namespaces using cluster scoped-labels. This matches all pods in all namespaces selected by this label selector. This field follows standard label selector semantics. If omitted, this selector selects no namespaces. If present but empty, this selector selects all namespaces.
StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).
+
false
+
string
+
+
+
+
group
+
The group attribute of the resource associated with the status StatusReason.
Entrypoint array. Not executed within a shell. The docker image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
+
false
+
string array
+
+
+
+
args
+
Arguments to the entrypoint. The docker image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
+
false
+
string array
+
+
+
+
workingDir
+
Container’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
+
false
+
string
+
+
+
+
ports
+
List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
Optional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Defaults to /dev/termination-log. Cannot be updated.
Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
+
false
+
boolean
+
false
+
+
+
stdinOnce
+
Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
+
false
+
boolean
+
false
+
+
+
tty
+
Whether this container should allocate a TTY for itself, also requires stdin to be true. Default is false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.PodSecurityContext
+
+
PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
seLinuxOptions
+
The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
false
+
integer (int64)
+
+
+
+
runAsNonRoot
+
Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
boolean
+
false
+
+
+
supplementalGroups
+
A list of groups applied to the first process run in each container, in addition to the container’s primary GID. If unspecified, no groups will be added to any container.
+
false
+
integer (int32) array
+
+
+
+
fsGroup
+
A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
+
+1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR’d with rw-rw
+
false
+
integer (int64)
+
+
+
+
+
+
+
+
v1beta1.NetworkPolicyIngressRule
+
+
This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
ports
+
List of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is not provided, this rule matches all ports (traffic not restricted by port). If this field is empty, this rule matches no ports (no traffic matches). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.
List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is not provided, this rule matches all sources (traffic not restricted by source). If this field is empty, this rule matches no sources (no traffic matches). If this field is present and contains at least on item, this rule allows traffic only if the traffic matches at least one item in the from list.
OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.
Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.
SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
capabilities
+
The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
+
false
+
boolean
+
false
+
+
+
seLinuxOptions
+
The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
integer (int64)
+
+
+
+
runAsNonRoot
+
Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
boolean
+
false
+
+
+
readOnlyRootFilesystem
+
Whether this container has a read-only root filesystem. Default is false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.Protocol
+
+
+
+
v1.AWSElasticBlockStoreVolumeSource
+
+
Represents a Persistent Disk resource in AWS.
+
+
+
An AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#awselasticblockstore
+
false
+
string
+
+
+
+
partition
+
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty).
reference to Scale subresource; horizontal pod autoscaler will learn the current resource consumption from its status, and will set the desired number of pods by modifying its spec.
lower limit for the number of pods that can be set by the autoscaler, default 1.
+
false
+
integer (int32)
+
+
+
+
maxReplicas
+
upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.
+
true
+
integer (int32)
+
+
+
+
cpuUtilization
+
target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified it defaults to the target CPU utilization at 80% of the requested resources.
Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
registry
+
Registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes
+
true
+
string
+
+
+
+
volume
+
Volume is a string that references an already created Quobyte volume by name.
+
true
+
string
+
+
+
+
readOnly
+
ReadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
+
false
+
boolean
+
false
+
+
+
user
+
User to map volume access to Defaults to serivceaccount user
+
false
+
string
+
+
+
+
group
+
Group to map volume access to Default is no group
+
false
+
string
+
+
+
+
+
+
+
+
v1.EnvVar
+
+
EnvVar represents an environment variable present in a Container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
Name of the environment variable. Must be a C_IDENTIFIER.
+
true
+
string
+
+
+
+
value
+
Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
+
false
+
string
+
+
+
+
valueFrom
+
Source for the environment variable’s value. Cannot be used if value is not empty.
Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: http://kubernetes.io/docs/user-guide/compute-resources/
+
false
+
object
+
+
+
+
+
+
+
+
v1.PodTemplateSpec
+
+
PodTemplateSpec describes the data a pod should have when created from a template
If specified, the port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.DeploymentCondition
+
+
DeploymentCondition describes the state of a deployment at a certain point.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
Type of deployment condition.
+
true
+
string
+
+
+
+
status
+
Status of the condition, one of True, False, Unknown.
+
true
+
string
+
+
+
+
lastUpdateTime
+
The last time this condition was updated.
+
false
+
string (date-time)
+
+
+
+
lastTransitionTime
+
Last time the condition transitioned from one status to another.
+
false
+
string (date-time)
+
+
+
+
reason
+
The reason for the condition’s last transition.
+
false
+
string
+
+
+
+
message
+
A human readable message indicating details about the transition.
+
false
+
string
+
+
+
+
+
+
+
+
v1beta1.JobSpec
+
+
JobSpec describes how the job execution will look like.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
parallelism
+
Parallelism specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) < .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: http://kubernetes.io/docs/user-guide/jobs
+
false
+
integer (int32)
+
+
+
+
completions
+
Completions specifies the desired number of successfully finished pods the job should be run with. Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value. Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: http://kubernetes.io/docs/user-guide/jobs
+
false
+
integer (int32)
+
+
+
+
activeDeadlineSeconds
+
Optional duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer
AutoSelector controls generation of pod labels and pod selectors. It was not present in the original extensions/v1beta1 Job definition, but exists to allow conversion from batch/v1 Jobs, where it corresponds to, but has the opposite meaning as, ManualSelector. More info: http://releases.k8s.io/HEAD/docs/design/selector-generation.md
A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
key
+
key is the label key that the selector applies to.
+
true
+
string
+
+
+
+
operator
+
operator represents a key’s relationship to a set of values. Valid operators ard In, NotIn, Exists and DoesNotExist.
+
true
+
string
+
+
+
+
values
+
values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+
false
+
string array
+
+
+
+
+
+
+
+
unversioned.Status
+
+
Status is a return value for calls that don’t return other objects.
A human-readable description of the status of this operation.
+
false
+
string
+
+
+
+
reason
+
A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.
+
false
+
string
+
+
+
+
details
+
Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.
HTTPIngressPath associates a path regex with a backend. Incoming urls matching the path are forwarded to the backend.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
path
+
Path is an extended POSIX regex as defined by IEEE Std 1003.1, (i.e this follows the egrep/unix syntax, not the perl syntax) matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a /. If unspecified, the path defaults to a catch all sending traffic to the backend.
+
false
+
string
+
+
+
+
backend
+
Backend defines the referenced service endpoint to which the traffic will be forwarded to.
Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
list or watch objects of kind HorizontalPodAutoscaler
+
+
+
GET /apis/extensions/v1beta1/horizontalpodautoscalers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
GET /apis/extensions/v1beta1/namespaces/{namespace}/daemonsets
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/namespaces/{namespace}/deployments
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
list or watch objects of kind HorizontalPodAutoscaler
+
+
+
GET /apis/extensions/v1beta1/namespaces/{namespace}/horizontalpodautoscalers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/namespaces/{namespace}/jobs
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/namespaces/{namespace}/networkpolicies
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/namespaces/{namespace}/replicasets
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of HorizontalPodAutoscaler
+
+
+
GET /apis/extensions/v1beta1/watch/horizontalpodautoscalers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/daemonsets
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/daemonsets/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/deployments
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/deployments/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of HorizontalPodAutoscaler
+
+
+
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/horizontalpodautoscalers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch changes to an object of kind HorizontalPodAutoscaler
+
+
+
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/jobs
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/jobs/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of NetworkPolicy
+
+
+
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/networkpolicies
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/networkpolicies/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/replicasets
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/replicasets/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of NetworkPolicy
+
+
+
GET /apis/extensions/v1beta1/watch/networkpolicies
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of ThirdPartyResource
+
+
+
GET /apis/extensions/v1beta1/watch/thirdpartyresources
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch changes to an object of kind ThirdPartyResource
+
+
+
GET /apis/extensions/v1beta1/watch/thirdpartyresources/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
unversioned.StatusCause
+
+
StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
reason
+
A machine-readable description of the cause of the error. If this value is empty there is no information available.
+
false
+
string
+
+
+
+
message
+
A human-readable description of the cause of the error. This field may be presented as-is to a reader.
+
false
+
string
+
+
+
+
field
+
The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
+
+Examples:
+ "name" - the field "name" on the current resource
+ "items[0].name" - the field "name" on the first array entry in "items"
+
false
+
string
+
+
+
+
+
+
+
+
v1.GCEPersistentDiskVolumeSource
+
+
Represents a Persistent Disk resource in Google Compute Engine.
+
+
+
A GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
+
false
+
string
+
+
+
+
partition
+
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
A human-readable message indicating details about why the volume is in this state.
+
false
+
string
+
+
+
+
reason
+
Reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ConfigMapVolumeSource
+
+
Adapts a ConfigMap into a volume.
+
+
+
The contents of the target ConfigMap’s Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.
If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error. Paths must be relative and may not contain the .. path or start with ...
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
repository
+
Repository URL
+
true
+
string
+
+
+
+
revision
+
Commit hash for the specified revision.
+
false
+
string
+
+
+
+
directory
+
Target directory name. Must not contain or start with ... If . is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ReplicationControllerCondition
+
+
ReplicationControllerCondition describes the state of a replication controller at a certain point.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
Type of replication controller condition.
+
true
+
string
+
+
+
+
status
+
Status of the condition, one of True, False, Unknown.
+
true
+
string
+
+
+
+
lastTransitionTime
+
The last time the condition transitioned from one status to another.
+
false
+
string (date-time)
+
+
+
+
reason
+
The reason for the condition’s last transition.
+
false
+
string
+
+
+
+
message
+
A human readable message indicating details about the transition.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ScaleStatus
+
+
ScaleStatus represents the current status of a scale subresource.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
replicas
+
actual number of observed instances of the scaled object.
+
true
+
integer (int32)
+
+
+
+
selector
+
label query over pods that should match the replicas count. This is same as the label selector but in the string format to avoid introspection by clients. The string will be in the same format as the query-param syntax. More info about label selectors: http://kubernetes.io/docs/user-guide/labels#label-selectors
+
false
+
string
+
+
+
+
+
+
+
+
v1.Capabilities
+
+
Adds and removes POSIX capabilities from running containers.
Used is the current observed total usage of the resource in the namespace.
+
false
+
object
+
+
+
+
+
+
+
+
v1.ExecAction
+
+
ExecAction describes a "run in container" action.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
command
+
Command is the command line to execute inside the container, the working directory for the command is root (/) in the container’s filesystem. The command is simply exec’d, it is not run inside a shell, so traditional shell instructions ('
+
', etc) won’t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+
false
+
string array
+
+
+
+
+
+
+
v1.ObjectMeta
+
+
ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names
+
false
+
string
+
+
+
+
generateName
+
GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.
+
+If this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).
+
+Applied only if Name is not specified. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#idempotency
+
false
+
string
+
+
+
+
namespace
+
Namespace defines the space within each name must be unique. An empty namespace is equivalent to the "default" namespace, but "default" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.
+
+Must be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces
+
false
+
string
+
+
+
+
selfLink
+
SelfLink is a URL representing this object. Populated by the system. Read-only.
+
false
+
string
+
+
+
+
uid
+
UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.
+
+Populated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids
+
false
+
string
+
+
+
+
resourceVersion
+
An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.
+
+Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#concurrency-control-and-consistency
+
false
+
string
+
+
+
+
generation
+
A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.
+
false
+
integer (int64)
+
+
+
+
creationTimestamp
+
CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
+
+Populated by the system. Read-only. Null for lists. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
+
false
+
string (date-time)
+
+
+
+
deletionTimestamp
+
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.
+
+Populated by the system when a graceful deletion is requested. Read-only. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
+
false
+
string (date-time)
+
+
+
+
deletionGracePeriodSeconds
+
Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.
+
false
+
integer (int64)
+
+
+
+
labels
+
Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels
+
false
+
object
+
+
+
+
annotations
+
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations
+
false
+
object
+
+
+
+
ownerReferences
+
List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.
Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed.
+
false
+
string array
+
+
+
+
clusterName
+
The name of the cluster which the object belongs to. This is used to distinguish resources with same name and namespace in different clusters. This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request.
+
false
+
string
+
+
+
+
+
+
+
+
v1.LimitRangeSpec
+
+
LimitRangeSpec defines a min/max usage limit for resources that match on kind.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
limits
+
Limits is the list of LimitRangeItem objects that are enforced.
AzureFile represents an Azure File Service mount on the host and bind mount to the pod.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
secretName
+
the name of secret that contains Azure Storage Account Name and Key
+
true
+
string
+
+
+
+
shareName
+
Share Name
+
true
+
string
+
+
+
+
readOnly
+
Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.ISCSIVolumeSource
+
+
Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
targetPortal
+
iSCSI target portal. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).
+
true
+
string
+
+
+
+
iqn
+
Target iSCSI Qualified Name.
+
true
+
string
+
+
+
+
lun
+
iSCSI target lun number.
+
true
+
integer (int32)
+
+
+
+
iscsiInterface
+
Optional: Defaults to default (tcp). iSCSI interface name that uses an iSCSI transport.
+
false
+
string
+
+
+
+
fsType
+
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#iscsi
+
false
+
string
+
+
+
+
readOnly
+
ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.EmptyDirVolumeSource
+
+
Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
medium
+
What type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir
+
false
+
string
+
+
+
+
+
+
+
+
v1.NodeList
+
+
NodeList is the whole list of all Nodes which have been registered with master.
Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to …/pods/<pod name>/evictions.
ServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets
ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: http://kubernetes.io/docs/user-guide/secrets#manually-specifying-an-imagepullsecret
Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
datasetName
+
Name of the dataset stored as metadata → name on the dataset for Flocker should be considered as deprecated
+
false
+
string
+
+
+
+
datasetUUID
+
UUID of the dataset. This is unique identifier of a Flocker dataset
+
false
+
string
+
+
+
+
+
+
+
+
v1.PersistentVolumeClaimVolumeSource
+
+
PersistentVolumeClaimVolumeSource references the user’s PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).
Will force the ReadOnly setting in VolumeMounts. Default false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
unversioned.ListMeta
+
+
ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
selfLink
+
SelfLink is a URL representing this object. Populated by the system. Read-only.
Represents the actual resources of the underlying volume.
+
false
+
object
+
+
+
+
+
+
+
+
v1.UniqueVolumeName
+
+
+
+
unversioned.LabelSelector
+
+
A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
matchLabels
+
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
+
false
+
object
+
+
+
+
matchExpressions
+
matchExpressions is a list of label selector requirements. The requirements are ANDed.
EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given:
+ {
+ Addresses: [{"ip": "10.10.1.1"}, {"ip": "10.10.2.2"}],
+ Ports: [{"name": "a", "port": 8675}, {"name": "b", "port": 309}]
+ }
+The resulting set of endpoints can be viewed as:
+ a: [ 10.10.1.1:8675, 10.10.2.2:8675 ],
+ b: [ 10.10.1.1:309, 10.10.2.2:309 ]
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
addresses
+
IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.
IP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.
The contents of the target Secret’s Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.
If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error. Paths must be relative and may not contain the .. path or start with ...
Optional: mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.FlexVolumeSource
+
+
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
driver
+
Driver is the name of the driver to use for this volume.
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends on FlexVolume script.
+
false
+
string
+
+
+
+
secretRef
+
Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.
Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
options
+
Optional: Extra command options if any.
+
false
+
object
+
+
+
+
+
+
+
+
v1.EnvVarSource
+
+
EnvVarSource represents a source for the value of an EnvVar.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
fieldRef
+
Selects a field of the pod: supports metadata.name, metadata.namespace, metadata.labels, metadata.annotations, spec.nodeName, spec.serviceAccountName, status.podIP.
Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
readOnly
+
Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.KeyToPath
+
+
Maps a string key to a path within a volume.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
key
+
The key to project.
+
true
+
string
+
+
+
+
path
+
The relative path of the file to map the key to. May not be an absolute path. May not contain the path element ... May not start with the string ...
+
true
+
string
+
+
+
+
mode
+
Optional: mode bits to use on this file, must be a value between 0 and 0777. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.Service
+
+
Service is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy.
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ServiceAccountList
+
+
ServiceAccountList is a list of ServiceAccount objects
The set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int64)
+
+
+
+
preconditions
+
Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.
HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: http://kubernetes.io/docs/user-guide/volumes#hostpath
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
successThreshold
+
Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
failureThreshold
+
Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
unversioned.APIResourceList
+
+
APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.
DownwardAPIVolumeFile represents information to create the file containing the pod field
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
path
+
Required: Path is the relative path name of the file to be created. Must not be absolute or contain the .. path. Must be utf-8 encoded. The first item of the relative path must not start with ..
+
true
+
string
+
+
+
+
fieldRef
+
Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
Optional: mode bits to use on this file, must be a value between 0 and 0777. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers
Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
+
false
+
integer (int64)
+
+
+
+
activeDeadlineSeconds
+
Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
+
false
+
integer (int64)
+
+
+
+
dnsPolicy
+
Set DNS policy for containers within the pod. One of ClusterFirst or Default. Defaults to "ClusterFirst".
DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
+
false
+
string
+
+
+
+
nodeName
+
NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
+
false
+
string
+
+
+
+
hostNetwork
+
Host networking requested for this pod. Use the host’s network namespace. If this option is set, the ports that will be used must be specified. Default to false.
+
false
+
boolean
+
false
+
+
+
hostPID
+
Use the host’s pid namespace. Optional: Default to false.
+
false
+
boolean
+
false
+
+
+
hostIPC
+
Use the host’s ipc namespace. Optional: Default to false.
+
false
+
boolean
+
false
+
+
+
securityContext
+
SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field.
ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: http://kubernetes.io/docs/user-guide/images#specifying-imagepullsecrets-on-a-pod
Specifies the hostname of the Pod If not specified, the pod’s hostname will be set to a system-defined value.
+
false
+
string
+
+
+
+
subdomain
+
If specified, the fully qualified Pod hostname will be "<hostname>.<subdomain>.<pod namespace>.svc.<cluster domain>". If not specified, the pod will not have a domainname at all.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ContainerPort
+
+
ContainerPort represents a network port in a single container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
+
false
+
string
+
+
+
+
hostPort
+
Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
+
false
+
integer (int32)
+
+
+
+
containerPort
+
Number of port to expose on the pod’s IP address. This must be a valid port number, 0 < x < 65536.
+
true
+
integer (int32)
+
+
+
+
protocol
+
Protocol for port. Must be UDP or TCP. Defaults to "TCP".
+
false
+
string
+
+
+
+
hostIP
+
What host IP to bind the external port to.
+
false
+
string
+
+
+
+
+
+
+
+
v1.ResourceQuota
+
+
ResourceQuota sets aggregate quota restrictions enforced per namespace
Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
postStart
+
PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
PreStop is called immediately before a container is terminated. The container is terminated after the handler completes. The reason for termination is passed to the handler. Regardless of the outcome of the handler, the container is eventually terminated. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)
+
false
+
integer (int32)
+
+
+
+
selector
+
Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#rbd
Represents a Photon Controller persistent disk resource.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
pdID
+
ID that identifies Photon Controller persistent disk
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
+
+
+
+
versioned.Event
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
+
true
+
string
+
+
+
+
object
+
+
true
+
string
+
+
+
+
+
+
+
+
v1.PodTemplate
+
+
PodTemplate describes a template for creating copies of a predefined pod.
HTTPHeader describes a custom header to be used in HTTP probes
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The header field name
+
true
+
string
+
+
+
+
value
+
The header field value
+
true
+
string
+
+
+
+
+
+
+
+
v1.FCVolumeSource
+
+
Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
targetWWNs
+
Required: FC target worldwide names (WWNs)
+
true
+
string array
+
+
+
+
lun
+
Required: FC target lun number
+
true
+
integer (int32)
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
readOnly
+
Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.EndpointPort
+
+
EndpointPort is a tuple that describes a single port.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The name of this port (corresponds to ServicePort.Name). Must be a DNS_LABEL. Optional only if one port is defined.
+
false
+
string
+
+
+
+
port
+
The port number of the endpoint.
+
true
+
integer (int32)
+
+
+
+
protocol
+
The IP protocol for this port. Must be UDP or TCP. Default is TCP.
+
false
+
string
+
+
+
+
+
+
+
+
v1.TCPSocketAction
+
+
TCPSocketAction describes an action based on opening a socket
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
port
+
Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
true
+
string
+
+
+
+
+
+
+
+
unversioned.StatusDetails
+
+
StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).
+
false
+
string
+
+
+
+
group
+
The group attribute of the resource associated with the status StatusReason.
Entrypoint array. Not executed within a shell. The docker image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
+
false
+
string array
+
+
+
+
args
+
Arguments to the entrypoint. The docker image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
+
false
+
string array
+
+
+
+
workingDir
+
Container’s working directory. If not specified, the container runtime’s default will be used, which might be configured in the container image. Cannot be updated.
+
false
+
string
+
+
+
+
ports
+
List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
Optional: Path at which the file to which the container’s termination message will be written is mounted into the container’s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Defaults to /dev/termination-log. Cannot be updated.
Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
+
false
+
boolean
+
false
+
+
+
stdinOnce
+
Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
+
false
+
boolean
+
false
+
+
+
tty
+
Whether this container should allocate a TTY for itself, also requires stdin to be true. Default is false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.PodSecurityContext
+
+
PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
seLinuxOptions
+
The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
false
+
integer (int64)
+
+
+
+
runAsNonRoot
+
Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
boolean
+
false
+
+
+
supplementalGroups
+
A list of groups applied to the first process run in each container, in addition to the container’s primary GID. If unspecified, no groups will be added to any container.
+
false
+
integer (int32) array
+
+
+
+
fsGroup
+
A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
+
+1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR’d with rw-rw
+
false
+
integer (int64)
+
+
+
+
+
+
+
+
v1.PersistentVolumeSpec
+
+
PersistentVolumeSpec is the specification of a persistent volume.
HostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: http://kubernetes.io/docs/user-guide/volumes#hostpath
Flocker represents a Flocker volume attached to a kubelet’s host machine and exposed to the pod for its usage. This depends on the Flocker control service being running
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
ClaimRef is part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. claim.VolumeName is the authoritative bind between PV and PVC. More info: http://kubernetes.io/docs/user-guide/persistent-volumes#binding
ServicePort contains information on service’s port.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. This maps to the Name field in EndpointPort objects. Optional if only one ServicePort is defined on this service.
+
false
+
string
+
+
+
+
protocol
+
The IP protocol for this port. Supports "TCP" and "UDP". Default is TCP.
+
false
+
string
+
+
+
+
port
+
The port that will be exposed by this service.
+
true
+
integer (int32)
+
+
+
+
targetPort
+
Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod’s container ports. If this is not specified, the value of the port field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the port field. More info: http://kubernetes.io/docs/user-guide/services#defining-a-service
+
false
+
string
+
+
+
+
nodePort
+
The port on each node on which this service is exposed when type=NodePort or LoadBalancer. Usually assigned by the system. If specified, it will be allocated to the service if unused or else creation of the service will fail. Default is to auto-allocate a port if the ServiceType of this Service requires one. More info: http://kubernetes.io/docs/user-guide/services#type—nodeport
+
false
+
integer (int32)
+
+
+
+
+
+
+
+
v1.ComponentCondition
+
+
Information about the condition of a component.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
Type of condition for a component. Valid value: "Healthy"
+
true
+
string
+
+
+
+
status
+
Status of the condition for a component. Valid values for "Healthy": "True", "False", or "Unknown".
+
true
+
string
+
+
+
+
message
+
Message about the condition for a component. For example, information about a health check.
+
false
+
string
+
+
+
+
error
+
Condition error code for a component. For example, a health check error code.
+
false
+
string
+
+
+
+
+
+
+
+
v1.OwnerReference
+
+
OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.
Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.
ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.
SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
capabilities
+
The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
+
false
+
boolean
+
false
+
+
+
seLinuxOptions
+
The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
integer (int64)
+
+
+
+
runAsNonRoot
+
Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
false
+
boolean
+
false
+
+
+
readOnlyRootFilesystem
+
Whether this container has a read-only root filesystem. Default is false.
+
false
+
boolean
+
false
+
+
+
+
+
+
+
v1.AWSElasticBlockStoreVolumeSource
+
+
Represents a Persistent Disk resource in AWS.
+
+
+
An AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#awselasticblockstore
+
false
+
string
+
+
+
+
partition
+
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty).
Specifies whether the container has passed its readiness probe.
+
true
+
boolean
+
false
+
+
+
restartCount
+
The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
registry
+
Registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes
+
true
+
string
+
+
+
+
volume
+
Volume is a string that references an already created Quobyte volume by name.
+
true
+
string
+
+
+
+
readOnly
+
ReadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.
+
false
+
boolean
+
false
+
+
+
user
+
User to map volume access to Defaults to serivceaccount user
+
false
+
string
+
+
+
+
group
+
Group to map volume access to Default is no group
+
false
+
string
+
+
+
+
+
+
+
+
v1.ContainerImage
+
+
Describe a container image
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
names
+
Names by which this image is known. e.g. ["gcr.io/google_containers/hyperkube:v1.0.7", "dockerhub.io/google_containers/hyperkube:v1.0.7"]
+
true
+
string array
+
+
+
+
sizeBytes
+
The size of the image in bytes.
+
false
+
integer (int64)
+
+
+
+
+
+
+
+
v1.ResourceQuotaScope
+
+
+
+
v1.ReplicationControllerList
+
+
ReplicationControllerList is a collection of replication controllers.
Data contains the secret data. Each key must be a valid DNS_SUBDOMAIN or leading dot followed by valid DNS_SUBDOMAIN. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4
+
false
+
object
+
+
+
+
stringData
+
stringData allows specifying non-binary secret data in string form. It is provided as a write-only convenience method. All keys and values are merged into the data field on write, overwriting any existing values. It is never output when reading from the API.
+
false
+
object
+
+
+
+
type
+
Used to facilitate programmatic handling of secret data.
+
false
+
string
+
+
+
+
+
+
+
+
v1.Event
+
+
Event is a report of an event somewhere in the cluster.
The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)
+
false
+
string (date-time)
+
+
+
+
lastTimestamp
+
The time at which the most recent occurrence of this event was recorded.
+
false
+
string (date-time)
+
+
+
+
count
+
The number of times this event has occurred.
+
false
+
integer (int32)
+
+
+
+
type
+
Type of this event (Normal, Warning), new types could be added in the future
+
false
+
string
+
+
+
+
+
+
+
+
v1.EnvVar
+
+
EnvVar represents an environment variable present in a Container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
name
+
Name of the environment variable. Must be a C_IDENTIFIER.
+
true
+
string
+
+
+
+
value
+
Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
+
false
+
string
+
+
+
+
valueFrom
+
Source for the environment variable’s value. Cannot be used if value is not empty.
Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: http://kubernetes.io/docs/user-guide/compute-resources/
+
false
+
object
+
+
+
+
+
+
+
+
v1.ComponentStatus
+
+
ComponentStatus (and ComponentStatusList) holds the cluster validation info.
LimitRangeItem defines a min/max usage limit for any resource that matches on kind.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
Type of resource that this limit applies to.
+
false
+
string
+
+
+
+
max
+
Max usage constraints on this kind by resource name.
+
false
+
object
+
+
+
+
min
+
Min usage constraints on this kind by resource name.
+
false
+
object
+
+
+
+
default
+
Default resource requirement limit value by resource name if resource limit is omitted.
+
false
+
object
+
+
+
+
defaultRequest
+
DefaultRequest is the default resource requirement request value by resource name if resource request is omitted.
+
false
+
object
+
+
+
+
maxLimitRequestRatio
+
MaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.
+
false
+
object
+
+
+
+
+
+
+
+
v1.PodTemplateSpec
+
+
PodTemplateSpec describes the data a pod should have when created from a template
If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.
+
false
+
string
+
+
+
+
+
+
+
+
unversioned.LabelSelectorRequirement
+
+
A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
key
+
key is the label key that the selector applies to.
+
true
+
string
+
+
+
+
operator
+
operator represents a key’s relationship to a set of values. Valid operators ard In, NotIn, Exists and DoesNotExist.
+
true
+
string
+
+
+
+
values
+
values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+
false
+
string array
+
+
+
+
+
+
+
+
v1.ContainerStateWaiting
+
+
ContainerStateWaiting is a waiting state of a container.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
reason
+
(brief) reason the container is not yet running.
+
false
+
string
+
+
+
+
message
+
Message regarding why the container is not yet running.
+
false
+
string
+
+
+
+
+
+
+
+
unversioned.Status
+
+
Status is a return value for calls that don’t return other objects.
A human-readable description of the status of this operation.
+
false
+
string
+
+
+
+
reason
+
A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.
+
false
+
string
+
+
+
+
details
+
Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.
Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: http://kubernetes.io/docs/user-guide/services#overview
+
false
+
object
+
+
+
+
clusterIP
+
clusterIP is the IP address of the service and is usually assigned randomly by the master. If an address is specified manually and is not in use by others, it will be allocated to the service; otherwise, creation of the service will fail. This field can not be changed through updates. Valid values are "None", empty string (""), or a valid IP address. "None" can be specified for headless services when proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: http://kubernetes.io/docs/user-guide/services#virtual-ips-and-service-proxies
+
false
+
string
+
+
+
+
type
+
type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. "ExternalName" maps to the specified externalName. "ClusterIP" allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object. If clusterIP is "None", no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a stable IP. "NodePort" builds on ClusterIP and allocates a port on every node which routes to the clusterIP. "LoadBalancer" builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the clusterIP. More info: http://kubernetes.io/docs/user-guide/services#overview
+
false
+
string
+
+
+
+
externalIPs
+
externalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system. A previous form of this functionality exists as the deprecatedPublicIPs field. When using this field, callers should also clear the deprecatedPublicIPs field.
+
false
+
string array
+
+
+
+
deprecatedPublicIPs
+
deprecatedPublicIPs is deprecated and replaced by the externalIPs field with almost the exact same semantics. This field is retained in the v1 API for compatibility until at least 8/20/2016. It will be removed from any new API revisions. If both deprecatedPublicIPs and externalIPs are set, deprecatedPublicIPs is used.
Only applies to Service Type: LoadBalancer LoadBalancer will get created with the IP specified in this field. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature.
+
false
+
string
+
+
+
+
loadBalancerSourceRanges
+
If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature." More info: http://kubernetes.io/docs/user-guide/services-firewalls
+
false
+
string array
+
+
+
+
externalName
+
externalName is the external reference that kubedns or equivalent will return as a CNAME record for this service. No proxying will be involved. Must be a valid DNS name and requires Type to be ExternalName.
+
false
+
string
+
+
+
+
+
+
+
+
v1.Pod
+
+
Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.
EndpointAddress is a tuple that describes single IP address.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
ip
+
The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
+
true
+
string
+
+
+
+
hostname
+
The Hostname of this endpoint
+
false
+
string
+
+
+
+
nodeName
+
Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
list or watch objects of kind PersistentVolumeClaim
+
+
+
GET /api/v1/namespaces/{namespace}/persistentvolumeclaims
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/namespaces/{namespace}/pods/{name}/attach
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
stdin
+
Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stdout
+
Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stderr
+
Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
tty
+
TTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
container
+
The container in which to execute the command. Defaults to only container if there is only one container in the pod.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect POST requests to attach of Pod
+
+
+
POST /api/v1/namespaces/{namespace}/pods/{name}/attach
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
stdin
+
Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stdout
+
Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stderr
+
Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
tty
+
TTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
container
+
The container in which to execute the command. Defaults to only container if there is only one container in the pod.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
create binding of a Binding
+
+
+
POST /api/v1/namespaces/{namespace}/pods/{name}/binding
GET /api/v1/namespaces/{namespace}/pods/{name}/exec
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
stdin
+
Redirect the standard input stream of the pod for this call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stdout
+
Redirect the standard output stream of the pod for this call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stderr
+
Redirect the standard error stream of the pod for this call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
tty
+
TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
container
+
Container in which to execute the command. Defaults to only container if there is only one container in the pod.
+
false
+
string
+
+
+
+
QueryParameter
+
command
+
Command is the remote command to execute. argv array. Not executed within a shell.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect POST requests to exec of Pod
+
+
+
POST /api/v1/namespaces/{namespace}/pods/{name}/exec
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
stdin
+
Redirect the standard input stream of the pod for this call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stdout
+
Redirect the standard output stream of the pod for this call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
stderr
+
Redirect the standard error stream of the pod for this call. Defaults to true.
+
false
+
boolean
+
+
+
+
QueryParameter
+
tty
+
TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
container
+
Container in which to execute the command. Defaults to only container if there is only one container in the pod.
+
false
+
string
+
+
+
+
QueryParameter
+
command
+
Command is the remote command to execute. argv array. Not executed within a shell.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
read log of the specified Pod
+
+
+
GET /api/v1/namespaces/{namespace}/pods/{name}/log
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
container
+
The container for which to stream logs. Defaults to only container if there is one container in the pod.
+
false
+
string
+
+
+
+
QueryParameter
+
follow
+
Follow the log stream of the pod. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
previous
+
Return previous terminated container logs. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
sinceSeconds
+
A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
sinceTime
+
An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
+
false
+
string
+
+
+
+
QueryParameter
+
timestamps
+
If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.
+
false
+
boolean
+
+
+
+
QueryParameter
+
tailLines
+
If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
limitBytes
+
If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
200
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
text/plain
+
+
+
application/json
+
+
+
application/yaml
+
+
+
application/vnd.kubernetes.protobuf
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect GET requests to portforward of Pod
+
+
+
GET /api/v1/namespaces/{namespace}/pods/{name}/portforward
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect POST requests to portforward of Pod
+
+
+
POST /api/v1/namespaces/{namespace}/pods/{name}/portforward
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect GET requests to proxy of Pod
+
+
+
GET /api/v1/namespaces/{namespace}/pods/{name}/proxy
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
path
+
Path is the URL path to use for the current proxy request to pod.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Pod
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
connect PUT requests to proxy of Pod
+
+
+
PUT /api/v1/namespaces/{namespace}/pods/{name}/proxy
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
path
+
Path is the URL path to use for the current proxy request to pod.
+
false
+
string
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
list or watch objects of kind ReplicationController
+
+
+
GET /api/v1/namespaces/{namespace}/replicationcontrollers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/namespaces/{namespace}/serviceaccounts
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
list or watch objects of kind PersistentVolumeClaim
+
+
+
GET /api/v1/persistentvolumeclaims
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Service
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy POST requests to Service
+
+
+
POST /api/v1/proxy/namespaces/{namespace}/services/{name}/{path}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
+
true
+
string
+
+
+
+
PathParameter
+
name
+
name of the Service
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy GET requests to Node
+
+
+
GET /api/v1/proxy/nodes/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy PUT requests to Node
+
+
+
PUT /api/v1/proxy/nodes/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy DELETE requests to Node
+
+
+
DELETE /api/v1/proxy/nodes/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy POST requests to Node
+
+
+
POST /api/v1/proxy/nodes/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy GET requests to Node
+
+
+
GET /api/v1/proxy/nodes/{name}/{path}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy PUT requests to Node
+
+
+
PUT /api/v1/proxy/nodes/{name}/{path}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy DELETE requests to Node
+
+
+
DELETE /api/v1/proxy/nodes/{name}/{path}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
proxy POST requests to Node
+
+
+
POST /api/v1/proxy/nodes/{name}/{path}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
PathParameter
+
name
+
name of the Node
+
true
+
string
+
+
+
+
PathParameter
+
path
+
path to the resource
+
true
+
string
+
+
+
+
+
+
+
+
Responses
+
+
+
+
+
+
+
+
+
HTTP Code
+
Description
+
Schema
+
+
+
+
+
default
+
success
+
string
+
+
+
+
+
+
+
Consumes
+
+
+
+
/
+
+
+
+
+
+
Produces
+
+
+
+
/
+
+
+
+
+
+
Tags
+
+
+
+
apiv1
+
+
+
+
+
+
+
list or watch objects of kind ReplicationController
+
+
+
GET /api/v1/replicationcontrollers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
GET /api/v1/watch/namespaces/{namespace}/configmaps
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/configmaps/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/endpoints
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/endpoints/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/events/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/limitranges
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/limitranges/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of PersistentVolumeClaim
+
+
+
GET /api/v1/watch/namespaces/{namespace}/persistentvolumeclaims
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch changes to an object of kind PersistentVolumeClaim
+
+
+
GET /api/v1/watch/namespaces/{namespace}/persistentvolumeclaims/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/pods/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/podtemplates
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/podtemplates/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of ReplicationController
+
+
+
GET /api/v1/watch/namespaces/{namespace}/replicationcontrollers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch changes to an object of kind ReplicationController
+
+
+
GET /api/v1/watch/namespaces/{namespace}/replicationcontrollers/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of ResourceQuota
+
+
+
GET /api/v1/watch/namespaces/{namespace}/resourcequotas
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/resourcequotas/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/secrets/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
watch individual changes to a list of ServiceAccount
+
+
+
GET /api/v1/watch/namespaces/{namespace}/serviceaccounts
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/serviceaccounts/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
GET /api/v1/watch/namespaces/{namespace}/services/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
false
+
string
+
+
+
+
QueryParameter
+
timeoutSeconds
+
Timeout for the list/watch call.
+
false
+
integer (int32)
+
+
+
+
PathParameter
+
namespace
+
object name and auth scope, such as for teams and projects
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of PersistentVolumeClaim
+
+
+
GET /api/v1/watch/persistentvolumeclaims
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of PersistentVolume
+
+
+
GET /api/v1/watch/persistentvolumes
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch changes to an object of kind PersistentVolume
+
+
+
GET /api/v1/watch/persistentvolumes/{name}
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of ReplicationController
+
+
+
GET /api/v1/watch/replicationcontrollers
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of ResourceQuota
+
+
+
GET /api/v1/watch/resourcequotas
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
watch individual changes to a list of ServiceAccount
+
+
+
GET /api/v1/watch/serviceaccounts
+
+
+
+
Parameters
+
+
+
+
+
+
+
+
+
+
+
+
Type
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
QueryParameter
+
pretty
+
If true, then the output is pretty printed.
+
false
+
string
+
+
+
+
QueryParameter
+
labelSelector
+
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
A selector to restrict the list of returned objects by their labels. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
fieldSelector
+
A selector to restrict the list of returned objects by their fields. Defaults to everything.
+
false
+
string
+
+
+
+
QueryParameter
+
watch
+
Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.
+
false
+
boolean
+
+
+
+
QueryParameter
+
resourceVersion
+
When specified with a watch call, shows changes that occur after that particular version of a resource. Defaults to changes from the beginning of history.
+
+
+
\ No newline at end of file
diff --git a/docs/admin/federation-apiserver.md b/docs/admin/federation-apiserver.md
index 00fb08c1a0..9236c62d38 100644
--- a/docs/admin/federation-apiserver.md
+++ b/docs/admin/federation-apiserver.md
@@ -1,6 +1,5 @@
---
---
-
## federation-apiserver
@@ -20,9 +19,10 @@ federation-apiserver
### Options
```
- --admission-control string Ordered list of plug-ins to do admission control of resources into cluster. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, NamespaceLifecycle. (default "AlwaysAdmit")
+ --admission-control string Ordered list of plug-ins to do admission control of resources into cluster. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, NamespaceLifecycle, OwnerReferencesPermissionEnforcement. (default "AlwaysAdmit")
--admission-control-config-file string File with admission control configuration.
- --advertise-address value The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
+ --advertise-address ip The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
+ --anonymous-auth Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true)
--apiserver-count int The number of apiservers running in the cluster. (default 1)
--audit-log-maxage int The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
--audit-log-maxbackup int The maximum number of old audit log files to retain.
@@ -35,64 +35,71 @@ federation-apiserver
--authorization-webhook-cache-unauthorized-ttl duration The duration to cache 'unauthorized' responses from the webhook authorizer. Default is 30s. (default 30s)
--authorization-webhook-config-file string File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.
--basic-auth-file string If set, the file that will be used to admit requests to the secure port of the API server via http basic authentication.
- --bind-address value The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0). (default 0.0.0.0)
+ --bind-address ip The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0). (default 0.0.0.0)
--cert-dir string The directory where the TLS certs are located (by default /var/run/kubernetes). If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/run/kubernetes")
--client-ca-file string If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
--cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
--cloud-provider string The provider for cloud services. Empty string for no provider.
- --cors-allowed-origins value List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled. (default [])
+ --contention-profiling Enable contention profiling. Requires --profiling to be set to work.
+ --cors-allowed-origins stringSlice List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.
--delete-collection-workers int Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup. (default 1)
--deserialization-cache-size int Number of deserialized json objects to cache in memory.
+ --enable-garbage-collector Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager. (default true)
--enable-swagger-ui Enables swagger ui on the apiserver at /swagger-ui
--etcd-cafile string SSL Certificate Authority file used to secure etcd communication.
--etcd-certfile string SSL certification file used to secure etcd communication.
--etcd-keyfile string SSL key file used to secure etcd communication.
--etcd-prefix string The prefix for all resource paths in etcd. (default "/registry")
--etcd-quorum-read If true, enable quorum read.
- --etcd-servers value List of etcd servers to connect with (http://ip:port), comma separated. (default [])
- --etcd-servers-overrides value Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are http://ip:port, semicolon separated. (default [])
+ --etcd-servers stringSlice List of etcd servers to connect with (scheme://ip:port), comma separated.
+ --etcd-servers-overrides stringSlice Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are http://ip:port, semicolon separated.
--event-ttl duration Amount of time to retain events. Default is 1h. (default 1h0m0s)
+ --experimental-keystone-ca-file string If set, the Keystone server's certificate will be verified by one of the authorities in the experimental-keystone-ca-file, otherwise the host's root CA set will be used.
--experimental-keystone-url string If passed, activates the keystone authentication plugin.
--external-hostname string The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs).
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
- --insecure-bind-address value The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all interfaces). Defaults to localhost. (default 127.0.0.1)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
+ --insecure-allow-any-token username/group1,group2 If set, your server will be INSECURE. Any token will be allowed and user information will be parsed from the token as username/group1,group2
+ --insecure-bind-address ip The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all interfaces). Defaults to localhost. (default 127.0.0.1)
--insecure-port int The port on which to serve unsecured, unauthenticated access. Default 8080. It is assumed that firewall rules are set up such that this port is not reachable from outside of the cluster and that port 443 on the cluster's public address is proxied to this port. This is performed by nginx in the default setup. (default 8080)
--kubernetes-service-node-port int If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.
--long-running-request-regexp string A regular expression matching long running requests which should be excluded from maximum inflight request handling. (default "(/|^)((watch|proxy)(/|$)|(logs?|portforward|exec|attach)/?$)")
- --master-service-namespace string The namespace from which the kubernetes master services should be injected into pods. (default "default")
+ --master-service-namespace string DEPRECATED: the namespace from which the kubernetes master services should be injected into pods. (default "default")
--max-requests-inflight int The maximum number of requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit. (default 400)
--min-request-timeout int An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load. (default 1800)
--oidc-ca-file string If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.
--oidc-client-id string The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.
- --oidc-groups-claim string If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be an array of strings. This flag is experimental, please see the authentication documentation for further details.
+ --oidc-groups-claim string If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.
--oidc-issuer-url string The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
--oidc-username-claim string The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details. (default "sub")
--profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
- --runtime-config value A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
+ --requestheader-allowed-names stringSlice List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.
+ --requestheader-client-ca-file string Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers
+ --requestheader-username-headers stringSlice List of request headers to inspect for usernames. X-Remote-User is common.
+ --runtime-config mapStringString A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
--secure-port int The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all. (default 6443)
- --service-cluster-ip-range value A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
- --service-node-port-range value A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range. (default 30000-32767)
+ --service-cluster-ip-range ipNet A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
+ --service-node-port-range portRange A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range. (default 30000-32767)
--storage-backend string The storage backend for persistence. Options: 'etcd2' (default), 'etcd3'.
--storage-media-type string The media type to use to store objects in storage. Defaults to application/json. Some resources may only support a specific media type and will ignore this setting. (default "application/json")
- --storage-versions string The per-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE_API_VERSIONS environment variable. (default "apps/v1alpha1,authentication.k8s.io/v1beta1,authorization.k8s.io/v1beta1,autoscaling/v1,batch/v1,certificates.k8s.io/v1alpha1,componentconfig/v1alpha1,extensions/v1beta1,federation/v1beta1,policy/v1alpha1,rbac.authorization.k8s.io/v1alpha1,storage.k8s.io/v1beta1,v1")
+ --storage-versions string The per-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE_API_VERSIONS environment variable. (default "apps/v1beta1,authentication.k8s.io/v1beta1,authorization.k8s.io/v1beta1,autoscaling/v1,batch/v1,certificates.k8s.io/v1alpha1,componentconfig/v1alpha1,extensions/v1beta1,federation/v1beta1,policy/v1beta1,rbac.authorization.k8s.io/v1alpha1,storage.k8s.io/v1beta1,v1")
--target-ram-mb int Memory limit for apiserver in MB (used to configure sizes of caches, etc.)
- --tls-cert-file string File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to /var/run/kubernetes.
- --tls-private-key-file string File containing x509 private key matching --tls-cert-file.
+ --tls-ca-file string If set, this certificate authority will used for secure access from Admission Controllers. This must be a valid PEM-encoded CA bundle.
+ --tls-cert-file string File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to /var/run/kubernetes.
+ --tls-private-key-file string File containing the default x509 private key matching --tls-cert-file.
+ --tls-sni-cert-key namedCertKey A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.key,example.crt" or "*.foo.com,foo.com:foo.key,foo.crt". (default [])
--token-auth-file string If set, the file that will be used to secure the secure port of the API server via token authentication.
--watch-cache Enable watch caching in the apiserver (default true)
- --watch-cache-sizes value List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch-cache is enabled. (default [])
+ --watch-cache-sizes stringSlice List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch-cache is enabled.
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/federation-controller-manager.md b/docs/admin/federation-controller-manager.md
index d73dde0b9e..a65bbef5f3 100644
--- a/docs/admin/federation-controller-manager.md
+++ b/docs/admin/federation-controller-manager.md
@@ -1,6 +1,5 @@
---
---
-
## federation-controller-manager
@@ -23,14 +22,14 @@ federation-controller-manager
### Options
```
- --address value The IP address to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
+ --address ip The IP address to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
--cluster-monitor-period duration The period for syncing ClusterStatus in ClusterController. (default 40s)
--concurrent-replicaset-syncs int The number of ReplicaSets syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load (default 10)
--concurrent-service-syncs int The number of service syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load (default 10)
- --dns-provider string DNS provider. Valid values are: ["aws-route53" "google-clouddns"]
+ --dns-provider string DNS provider. Valid values are: ["google-clouddns" "aws-route53"]
--dns-provider-config string Path to config file for configuring DNS provider.
--federated-api-burst int Burst to use while talking with federation apiserver (default 30)
- --federated-api-qps value QPS to use while talking with federation apiserver (default 20)
+ --federated-api-qps float32 QPS to use while talking with federation apiserver (default 20)
--federation-name string Federation name.
--kube-api-content-type string ContentType of requests sent to apiserver. Passing application/vnd.kubernetes.protobuf is an experimental feature now.
--kubeconfig string Path to kubeconfig file with authorization and master location information.
@@ -41,14 +40,12 @@ federation-controller-manager
--master string The address of the federation API server (overrides any value in kubeconfig)
--port int The port that the controller-manager's http service runs on (default 10253)
--profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
+ --service-dns-suffix string DNS Suffix to use when publishing federated service names. Defaults to zone-name
+ --zone-id string Zone ID, needed if the zone name is not unique.
--zone-name string Zone name, like example.com.
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/kube-apiserver.md b/docs/admin/kube-apiserver.md
index 4e24cd2d89..12d2b76a49 100644
--- a/docs/admin/kube-apiserver.md
+++ b/docs/admin/kube-apiserver.md
@@ -1,6 +1,5 @@
---
---
-
## kube-apiserver
@@ -20,10 +19,11 @@ kube-apiserver
### Options
```
- --admission-control string Ordered list of plug-ins to do admission control of resources into cluster. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DenyEscalatingExec, DenyExecOnPrivileged, ImagePolicyWebhook, InitialResources, LimitPodHardAntiAffinityTopology, LimitRanger, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, PersistentVolumeLabel, PodSecurityPolicy, ResourceQuota, SecurityContextDeny, ServiceAccount. (default "AlwaysAdmit")
+ --admission-control string Ordered list of plug-ins to do admission control of resources into cluster. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DenyEscalatingExec, DenyExecOnPrivileged, ImagePolicyWebhook, InitialResources, LimitPodHardAntiAffinityTopology, LimitRanger, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, OwnerReferencesPermissionEnforcement, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, ResourceQuota, SecurityContextDeny, ServiceAccount. (default "AlwaysAdmit")
--admission-control-config-file string File with admission control configuration.
- --advertise-address value The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
+ --advertise-address ip The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
--allow-privileged If true, allow privileged containers.
+ --anonymous-auth Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true)
--apiserver-count int The number of apiservers running in the cluster. (default 1)
--audit-log-maxage int The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
--audit-log-maxbackup int The maximum number of old audit log files to retain.
@@ -38,12 +38,13 @@ kube-apiserver
--authorization-webhook-cache-unauthorized-ttl duration The duration to cache 'unauthorized' responses from the webhook authorizer. Default is 30s. (default 30s)
--authorization-webhook-config-file string File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.
--basic-auth-file string If set, the file that will be used to admit requests to the secure port of the API server via http basic authentication.
- --bind-address value The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0). (default 0.0.0.0)
+ --bind-address ip The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0). (default 0.0.0.0)
--cert-dir string The directory where the TLS certs are located (by default /var/run/kubernetes). If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/run/kubernetes")
--client-ca-file string If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
--cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
--cloud-provider string The provider for cloud services. Empty string for no provider.
- --cors-allowed-origins value List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled. (default [])
+ --contention-profiling Enable contention profiling. Requires --profiling to be set to work.
+ --cors-allowed-origins stringSlice List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.
--delete-collection-workers int Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup. (default 1)
--deserialization-cache-size int Number of deserialized json objects to cache in memory.
--enable-garbage-collector Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager. (default true)
@@ -53,62 +54,68 @@ kube-apiserver
--etcd-keyfile string SSL key file used to secure etcd communication.
--etcd-prefix string The prefix for all resource paths in etcd. (default "/registry")
--etcd-quorum-read If true, enable quorum read.
- --etcd-servers value List of etcd servers to connect with (http://ip:port), comma separated. (default [])
- --etcd-servers-overrides value Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are http://ip:port, semicolon separated. (default [])
+ --etcd-servers stringSlice List of etcd servers to connect with (scheme://ip:port), comma separated.
+ --etcd-servers-overrides stringSlice Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are http://ip:port, semicolon separated.
--event-ttl duration Amount of time to retain events. Default is 1h. (default 1h0m0s)
+ --experimental-keystone-ca-file string If set, the Keystone server's certificate will be verified by one of the authorities in the experimental-keystone-ca-file, otherwise the host's root CA set will be used.
--experimental-keystone-url string If passed, activates the keystone authentication plugin.
--external-hostname string The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs).
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
--google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --insecure-bind-address value The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all interfaces). Defaults to localhost. (default 127.0.0.1)
+ --insecure-allow-any-token username/group1,group2 If set, your server will be INSECURE. Any token will be allowed and user information will be parsed from the token as username/group1,group2
+ --insecure-bind-address ip The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all interfaces). Defaults to localhost. (default 127.0.0.1)
--insecure-port int The port on which to serve unsecured, unauthenticated access. Default 8080. It is assumed that firewall rules are set up such that this port is not reachable from outside of the cluster and that port 443 on the cluster's public address is proxied to this port. This is performed by nginx in the default setup. (default 8080)
--kubelet-certificate-authority string Path to a cert file for the certificate authority.
--kubelet-client-certificate string Path to a client cert file for TLS.
--kubelet-client-key string Path to a client key file for TLS.
--kubelet-https Use https for kubelet connections. (default true)
+ --kubelet-preferred-address-types stringSlice List of the preferred NodeAddressTypes to use for kubelet connections. (default [Hostname,InternalIP,ExternalIP,LegacyHostIP])
--kubelet-timeout duration Timeout for kubelet operations. (default 5s)
--kubernetes-service-node-port int If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.
--long-running-request-regexp string A regular expression matching long running requests which should be excluded from maximum inflight request handling. (default "(/|^)((watch|proxy)(/|$)|(logs?|portforward|exec|attach)/?$)")
- --master-service-namespace string The namespace from which the kubernetes master services should be injected into pods. (default "default")
+ --master-service-namespace string DEPRECATED: the namespace from which the kubernetes master services should be injected into pods. (default "default")
--max-connection-bytes-per-sec int If non-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long-running requests.
--max-requests-inflight int The maximum number of requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit. (default 400)
--min-request-timeout int An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load. (default 1800)
--oidc-ca-file string If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.
--oidc-client-id string The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.
- --oidc-groups-claim string If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be an array of strings. This flag is experimental, please see the authentication documentation for further details.
+ --oidc-groups-claim string If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.
--oidc-issuer-url string The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
--oidc-username-claim string The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details. (default "sub")
--profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
--repair-malformed-updates If true, server will do its best to fix the update request to pass the validation, e.g., setting empty UID in update request to its existing value. This flag can be turned off after we fix all the clients that send malformed updates. (default true)
- --runtime-config value A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
+ --requestheader-allowed-names stringSlice List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.
+ --requestheader-client-ca-file string Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers
+ --requestheader-username-headers stringSlice List of request headers to inspect for usernames. X-Remote-User is common.
+ --runtime-config mapStringString A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
--secure-port int The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all. (default 6443)
- --service-account-key-file string File containing PEM-encoded x509 RSA private or public key, used to verify ServiceAccount tokens. If unspecified, --tls-private-key-file is used.
+ --service-account-key-file stringArray File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. If unspecified, --tls-private-key-file is used. The specified file can contain multiple keys, and the flag can be specified multiple times with different files.
--service-account-lookup If true, validate ServiceAccount tokens exist in etcd as part of authentication.
- --service-cluster-ip-range value A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
- --service-node-port-range value A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range. (default 30000-32767)
+ --service-cluster-ip-range ipNet A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
+ --service-node-port-range portRange A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range. (default 30000-32767)
--ssh-keyfile string If non-empty, use secure SSH proxy to the nodes, using this user keyfile
--ssh-user string If non-empty, use secure SSH proxy to the nodes, using this user name
--storage-backend string The storage backend for persistence. Options: 'etcd2' (default), 'etcd3'.
--storage-media-type string The media type to use to store objects in storage. Defaults to application/json. Some resources may only support a specific media type and will ignore this setting. (default "application/json")
- --storage-versions string The per-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE_API_VERSIONS environment variable. (default "apps/v1alpha1,authentication.k8s.io/v1beta1,authorization.k8s.io/v1beta1,autoscaling/v1,batch/v1,certificates.k8s.io/v1alpha1,componentconfig/v1alpha1,extensions/v1beta1,imagepolicy.k8s.io/v1alpha1,policy/v1alpha1,rbac.authorization.k8s.io/v1alpha1,storage.k8s.io/v1beta1,v1")
+ --storage-versions string The per-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE_API_VERSIONS environment variable. (default "apps/v1beta1,authentication.k8s.io/v1beta1,authorization.k8s.io/v1beta1,autoscaling/v1,batch/v1,certificates.k8s.io/v1alpha1,componentconfig/v1alpha1,extensions/v1beta1,imagepolicy.k8s.io/v1alpha1,policy/v1beta1,rbac.authorization.k8s.io/v1alpha1,storage.k8s.io/v1beta1,v1")
--target-ram-mb int Memory limit for apiserver in MB (used to configure sizes of caches, etc.)
- --tls-cert-file string File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to /var/run/kubernetes.
- --tls-private-key-file string File containing x509 private key matching --tls-cert-file.
+ --tls-ca-file string If set, this certificate authority will used for secure access from Admission Controllers. This must be a valid PEM-encoded CA bundle.
+ --tls-cert-file string File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to /var/run/kubernetes.
+ --tls-private-key-file string File containing the default x509 private key matching --tls-cert-file.
+ --tls-sni-cert-key namedCertKey A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.key,example.crt" or "*.foo.com,foo.com:foo.key,foo.crt". (default [])
--token-auth-file string If set, the file that will be used to secure the secure port of the API server via token authentication.
--watch-cache Enable watch caching in the apiserver (default true)
- --watch-cache-sizes value List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch-cache is enabled. (default [])
+ --watch-cache-sizes stringSlice List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch-cache is enabled.
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/kube-controller-manager.md b/docs/admin/kube-controller-manager.md
index c6db5ea858..68cca731e7 100644
--- a/docs/admin/kube-controller-manager.md
+++ b/docs/admin/kube-controller-manager.md
@@ -1,6 +1,5 @@
---
---
-
## kube-controller-manager
@@ -24,7 +23,7 @@ kube-controller-manager
### Options
```
- --address value The IP address to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
+ --address ip The IP address to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
--allocate-node-cidrs Should CIDRs for Pods be allocated and set on the cloud provider.
--cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
--cloud-provider string The provider for cloud services. Empty string for no provider.
@@ -32,37 +31,39 @@ kube-controller-manager
--cluster-name string The instance prefix for the cluster (default "kubernetes")
--cluster-signing-cert-file string Filename containing a PEM-encoded X509 CA certificate used to issue cluster-scoped certificates (default "/etc/kubernetes/ca/ca.pem")
--cluster-signing-key-file string Filename containing a PEM-encoded RSA or ECDSA private key used to sign cluster-scoped certificates (default "/etc/kubernetes/ca/ca.key")
- --concurrent-deployment-syncs value The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load (default 5)
- --concurrent-endpoint-syncs value The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load (default 5)
- --concurrent-gc-syncs value The number of garbage collector workers that are allowed to sync concurrently. (default 20)
- --concurrent-namespace-syncs value The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load (default 2)
- --concurrent-replicaset-syncs value The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
- --concurrent-resource-quota-syncs value The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load (default 5)
- --concurrent-service-syncs value The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load (default 1)
- --concurrent-serviceaccount-token-syncs value The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load (default 5)
- --concurrent_rc_syncs value The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
+ --concurrent-deployment-syncs int32 The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load (default 5)
+ --concurrent-endpoint-syncs int32 The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load (default 5)
+ --concurrent-gc-syncs int32 The number of garbage collector workers that are allowed to sync concurrently. (default 20)
+ --concurrent-namespace-syncs int32 The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load (default 2)
+ --concurrent-replicaset-syncs int32 The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
+ --concurrent-resource-quota-syncs int32 The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load (default 5)
+ --concurrent-service-syncs int32 The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load (default 1)
+ --concurrent-serviceaccount-token-syncs int32 The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load (default 5)
+ --concurrent_rc_syncs int32 The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
--configure-cloud-routes Should CIDRs allocated by allocate-node-cidrs be configured on the cloud provider. (default true)
- --controller-start-interval duration Interval between starting controller managers. (default 0s)
- --daemonset-lookup-cache-size value The the size of lookup cache for daemonsets. Larger number = more responsive daemonsets, but more MEM load. (default 1024)
+ --controller-start-interval duration Interval between starting controller managers.
+ --daemonset-lookup-cache-size int32 The the size of lookup cache for daemonsets. Larger number = more responsive daemonsets, but more MEM load. (default 1024)
--deployment-controller-sync-period duration Period for syncing the deployments. (default 30s)
--enable-dynamic-provisioning Enable dynamic provisioning for environments that support it. (default true)
--enable-garbage-collector Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-apiserver. (default true)
--enable-hostpath-provisioner Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features. HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
--flex-volume-plugin-dir string Full path of the directory in which the flex volume plugin should search for additional third party volume plugins. (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")
--google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
--horizontal-pod-autoscaler-sync-period duration The period for syncing the number of pods in horizontal pod autoscaler. (default 30s)
--insecure-experimental-approve-all-kubelet-csrs-for-group string The group for which the controller-manager will auto approve all CSRs for kubelet client certificates.
- --kube-api-burst value Burst to use while talking with kubernetes apiserver (default 30)
+ --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 30)
--kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps value QPS to use while talking with kubernetes apiserver (default 20)
+ --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 20)
--kubeconfig string Path to kubeconfig file with authorization and master location information.
- --large-cluster-size-threshold value Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller. (default 50)
+ --large-cluster-size-threshold int32 Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller. (default 50)
--leader-elect Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability. (default true)
--leader-elect-lease-duration duration The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. (default 15s)
--leader-elect-renew-deadline duration The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled. (default 10s)
@@ -70,39 +71,36 @@ DynamicVolumeProvisioning=true|false (ALPHA - default=true)
--master string The address of the Kubernetes API server (overrides any value in kubeconfig)
--min-resync-period duration The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod (default 12h0m0s)
--namespace-sync-period duration The period for syncing namespace life-cycle updates (default 5m0s)
- --node-cidr-mask-size value Mask size for node cidr in cluster. (default 24)
- --node-eviction-rate value Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. (default 0.1)
+ --node-cidr-mask-size int32 Mask size for node cidr in cluster. (default 24)
+ --node-eviction-rate float32 Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. (default 0.1)
--node-monitor-grace-period duration Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status. (default 40s)
--node-monitor-period duration The period for syncing NodeStatus in NodeController. (default 5s)
--node-startup-grace-period duration Amount of time which we allow starting Node to be unresponsive before marking it unhealthy. (default 1m0s)
- --node-sync-period duration The period for syncing nodes from cloudprovider. Longer periods will result in fewer calls to cloud provider, but may delay addition of new nodes to cluster. (default 10s)
--pod-eviction-timeout duration The grace period for deleting pods on failed nodes. (default 5m0s)
- --port value The port that the controller-manager's http service runs on (default 10252)
+ --port int32 The port that the controller-manager's http service runs on (default 10252)
--profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
- --pv-recycler-increment-timeout-nfs value the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod (default 30)
- --pv-recycler-minimum-timeout-hostpath value The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod. This is for development and testing only and will not work in a multi-node cluster. (default 60)
- --pv-recycler-minimum-timeout-nfs value The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod (default 300)
+ --pv-recycler-increment-timeout-nfs int32 the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod (default 30)
+ --pv-recycler-minimum-timeout-hostpath int32 The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod. This is for development and testing only and will not work in a multi-node cluster. (default 60)
+ --pv-recycler-minimum-timeout-nfs int32 The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod (default 300)
--pv-recycler-pod-template-filepath-hostpath string The file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi-node cluster.
--pv-recycler-pod-template-filepath-nfs string The file path to a pod definition used as a template for NFS persistent volume recycling
- --pv-recycler-timeout-increment-hostpath value the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod. This is for development and testing only and will not work in a multi-node cluster. (default 30)
+ --pv-recycler-timeout-increment-hostpath int32 the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod. This is for development and testing only and will not work in a multi-node cluster. (default 30)
--pvclaimbinder-sync-period duration The period for syncing persistent volumes and persistent volume claims (default 15s)
- --replicaset-lookup-cache-size value The the size of lookup cache for replicatsets. Larger number = more responsive replica management, but more MEM load. (default 4096)
- --replication-controller-lookup-cache-size value The the size of lookup cache for replication controllers. Larger number = more responsive replica management, but more MEM load. (default 4096)
+ --replicaset-lookup-cache-size int32 The the size of lookup cache for replicatsets. Larger number = more responsive replica management, but more MEM load. (default 4096)
+ --replication-controller-lookup-cache-size int32 The the size of lookup cache for replication controllers. Larger number = more responsive replica management, but more MEM load. (default 4096)
--resource-quota-sync-period duration The period for syncing quota usage status in the system (default 5m0s)
--root-ca-file string If set, this root certificate authority will be included in service account's token secret. This must be a valid PEM-encoded CA bundle.
- --secondary-node-eviction-rate value Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than --large-cluster-size-threshold. (default 0.01)
- --service-account-private-key-file string Filename containing a PEM-encoded private RSA key used to sign service account tokens.
+ --route-reconciliation-period duration The period for reconciling routes created for Nodes by cloud provider. (default 10s)
+ --secondary-node-eviction-rate float32 Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than --large-cluster-size-threshold. (default 0.01)
+ --service-account-private-key-file string Filename containing a PEM-encoded private RSA or ECDSA key used to sign service account tokens.
--service-cluster-ip-range string CIDR Range for Services in cluster.
--service-sync-period duration The period for syncing services with their external load balancers (default 5m0s)
- --terminated-pod-gc-threshold value Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If <= 0, the terminated pod garbage collector is disabled. (default 12500)
- --unhealthy-zone-threshold value Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy. (default 0.55)
+ --terminated-pod-gc-threshold int32 Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If <= 0, the terminated pod garbage collector is disabled. (default 12500)
+ --unhealthy-zone-threshold float32 Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy. (default 0.55)
+ --use-service-account-credentials If true, use individual service account credentials for each controller.
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/kube-proxy.md b/docs/admin/kube-proxy.md
index 98480612cb..491a91d06e 100644
--- a/docs/admin/kube-proxy.md
+++ b/docs/admin/kube-proxy.md
@@ -1,6 +1,5 @@
---
---
-
## kube-proxy
@@ -23,42 +22,42 @@ kube-proxy
### Options
```
- --bind-address value The IP address for the proxy server to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
+ --bind-address ip The IP address for the proxy server to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
--cleanup-iptables If true cleanup iptables rules and exit.
--cluster-cidr string The CIDR range of pods in the cluster. It is used to bridge traffic coming from outside of the cluster. If not provided, no off-cluster bridging will be performed.
--config-sync-period duration How often configuration from the apiserver is refreshed. Must be greater than 0. (default 15m0s)
- --conntrack-max-per-core value Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min). (default 32768)
- --conntrack-min value Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is). (default 131072)
+ --conntrack-max-per-core int32 Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min). (default 32768)
+ --conntrack-min int32 Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is). (default 131072)
+ --conntrack-tcp-timeout-close-wait duration NAT timeout for TCP connections in the CLOSE_WAIT state (default 1h0m0s)
--conntrack-tcp-timeout-established duration Idle timeout for established TCP connections (0 to leave as-is) (default 24h0m0s)
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
--google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --healthz-bind-address value The IP address for the health check server to serve on, defaulting to 127.0.0.1 (set to 0.0.0.0 for all interfaces) (default 127.0.0.1)
- --healthz-port value The port to bind the health check server. Use 0 to disable. (default 10249)
+ --healthz-bind-address ip The IP address for the health check server to serve on, defaulting to 127.0.0.1 (set to 0.0.0.0 for all interfaces) (default 127.0.0.1)
+ --healthz-port int32 The port to bind the health check server. Use 0 to disable. (default 10249)
--hostname-override string If non-empty, will use this string as identification instead of the actual hostname.
- --iptables-masquerade-bit value If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31]. (default 14)
- --iptables-sync-period duration How often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0. (default 30s)
- --kube-api-burst value Burst to use while talking with kubernetes apiserver (default 10)
+ --iptables-masquerade-bit int32 If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31]. (default 14)
+ --iptables-min-sync-period duration The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+ --iptables-sync-period duration The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0. (default 30s)
+ --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 10)
--kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps value QPS to use while talking with kubernetes apiserver (default 5)
+ --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 5)
--kubeconfig string Path to kubeconfig file with authorization information (the master location is set by the master flag).
--masquerade-all If using the pure iptables proxy, SNAT everything
--master string The address of the Kubernetes API server (overrides any value in kubeconfig)
- --oom-score-adj value The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000] (default -999)
- --proxy-mode value Which proxy mode to use: 'userspace' (older) or 'iptables' (faster). If blank, look at the Node object on the Kubernetes API and respect the 'net.experimental.kubernetes.io/proxy-mode' annotation if provided. Otherwise use the best-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
- --proxy-port-range value Range of host ports (beginPort-endPort, inclusive) that may be consumed in order to proxy service traffic. If unspecified (0-0) then ports will be randomly chosen.
+ --oom-score-adj int32 The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000] (default -999)
+ --proxy-mode ProxyMode Which proxy mode to use: 'userspace' (older) or 'iptables' (faster). If blank, look at the Node object on the Kubernetes API and respect the 'net.experimental.kubernetes.io/proxy-mode' annotation if provided. Otherwise use the best-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
+ --proxy-port-range port-range Range of host ports (beginPort-endPort, inclusive) that may be consumed in order to proxy service traffic. If unspecified (0-0) then ports will be randomly chosen.
--udp-timeout duration How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). Must be greater than 0. Only applicable for proxy-mode=userspace (default 250ms)
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/kube-scheduler.md b/docs/admin/kube-scheduler.md
index 3316d7e10d..9b4d7264e6 100644
--- a/docs/admin/kube-scheduler.md
+++ b/docs/admin/kube-scheduler.md
@@ -1,6 +1,5 @@
---
---
-
## kube-scheduler
@@ -24,19 +23,21 @@ kube-scheduler
```
--address string The IP address to serve on (set to 0.0.0.0 for all interfaces) (default "0.0.0.0")
- --algorithm-provider string The scheduling algorithm provider to use, one of: DefaultProvider | ClusterAutoscalerProvider (default "DefaultProvider")
+ --algorithm-provider string The scheduling algorithm provider to use, one of: ClusterAutoscalerProvider | DefaultProvider (default "DefaultProvider")
--failure-domains string Indicate the "all topologies" set for an empty topologyKey when it's used for PreferredDuringScheduling pod anti-affinity. (default "kubernetes.io/hostname,failure-domain.beta.kubernetes.io/zone,failure-domain.beta.kubernetes.io/region")
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
--google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
--hard-pod-affinity-symmetric-weight int RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. --hard-pod-affinity-symmetric-weight represents the weight of implicit PreferredDuringScheduling affinity rule. (default 1)
- --kube-api-burst value Burst to use while talking with kubernetes apiserver (default 100)
+ --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 100)
--kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps value QPS to use while talking with kubernetes apiserver (default 50)
+ --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 50)
--kubeconfig string Path to kubeconfig file with authorization and master location information.
--leader-elect Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability. (default true)
--leader-elect-lease-duration duration The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. (default 15s)
@@ -44,16 +45,12 @@ DynamicVolumeProvisioning=true|false (ALPHA - default=true)
--leader-elect-retry-period duration The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled. (default 2s)
--master string The address of the Kubernetes API server (overrides any value in kubeconfig)
--policy-config-file string File with scheduler policy configuration
- --port value The port that the scheduler's http service runs on (default 10251)
+ --port int32 The port that the scheduler's http service runs on (default 10251)
--profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
--scheduler-name string Name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's annotation with key 'scheduler.alpha.kubernetes.io/name' (default "default-scheduler")
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/admin/kubelet.md b/docs/admin/kubelet.md
index 88842eab14..a3004ea1aa 100644
--- a/docs/admin/kubelet.md
+++ b/docs/admin/kubelet.md
@@ -1,6 +1,5 @@
---
---
-
## kubelet
@@ -34,123 +33,134 @@ kubelet
### Options
```
- --address value The IP address for the Kubelet to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
- --allow-privileged If true, allow containers to request privileged mode. [default=false]
- --cadvisor-port value The port of the localhost cAdvisor endpoint (default 4194)
- --cert-dir string The directory where the TLS certs are located (by default /var/run/kubernetes). If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/run/kubernetes")
- --cgroup-root string Optional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default.
- --chaos-chance float If > 0.0, introduce random client errors and latency. Intended for testing. [default=0.0]
- --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
- --cloud-provider string The provider for cloud services. By default, kubelet will attempt to auto-detect the cloud provider. Specify empty string for running with no cloud provider. [default=auto-detect] (default "auto-detect")
- --cluster-dns string IP address for a cluster DNS server. This value is used for containers' DNS server in case of Pods with "dnsPolicy=ClusterFirst"
- --cluster-domain string Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains
- --cni-bin-dir string The full path of the directory in which to search for CNI plugin binaries. Default: /opt/cni/bin
- --cni-conf-dir string The full path of the directory in which to search for CNI config files. Default: /etc/cni/net.d
- --container-runtime string The container runtime to use. Possible values: 'docker', 'rkt'. Default: 'docker'. (default "docker")
- --container-runtime-endpoint string The unix socket endpoint of remote runtime service. If not empty, this option will override --container-runtime. This is an experimental feature. Intended for testing only.
- --containerized Experimental support for running kubelet in a container. Intended for testing. [default=false]
- --cpu-cfs-quota Enable CPU CFS quota enforcement for containers that specify CPU limits (default true)
- --docker-endpoint string Use this for the docker endpoint to communicate with (default "unix:///var/run/docker.sock")
- --docker-exec-handler string Handler to use when executing a command in a container. Valid values are 'native' and 'nsenter'. Defaults to 'native'. (default "native")
- --enable-controller-attach-detach Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations (default true)
- --enable-custom-metrics Support for gathering custom metrics.
- --enable-debugging-handlers Enables server endpoints for log collection and local running of containers and commands (default true)
- --enable-server Enable the Kubelet's server (default true)
- --event-burst value Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event-qps. Only used if --event-qps > 0 (default 10)
- --event-qps value If > 0, limit event creations per second to this value. If 0, unlimited. (default 5)
- --eviction-hard string A set of eviction thresholds (e.g. memory.available<1Gi) that if met would trigger a pod eviction. (default "memory.available<100Mi")
- --eviction-max-pod-grace-period value Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value.
- --eviction-minimum-reclaim string A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure.
- --eviction-pressure-transition-period duration Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (default 5m0s)
- --eviction-soft string A set of eviction thresholds (e.g. memory.available<1.5Gi) that if met over a corresponding grace period would trigger a pod eviction.
- --eviction-soft-grace-period string A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction.
- --exit-on-lock-contention Whether kubelet should exit upon lock-file contention.
- --experimental-allowed-unsafe-sysctls value Comma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk. (default [])
- --experimental-bootstrap-kubeconfig string Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by --kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated key and obtained certificate is written to the path specified by --kubeconfig. The certificate and key file will be stored in the directory pointed by --cert-dir.
- --experimental-nvidia-gpus value Number of NVIDIA GPU devices on this node. Only 0 (default) and 1 are currently supported.
- --feature-gates value A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
+ --address ip The IP address for the Kubelet to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
+ --allow-privileged If true, allow containers to request privileged mode. [default=false]
+ --anonymous-auth Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true)
+ --authentication-token-webhook Use the TokenReview API to determine authentication for bearer tokens.
+ --authentication-token-webhook-cache-ttl duration The duration to cache responses from the webhook token authenticator. (default 2m0s)
+ --authorization-mode string Authorization mode for Kubelet server. Valid options are AlwaysAllow or Webhook. Webhook mode uses the SubjectAccessReview API to determine authorization. (default "AlwaysAllow")
+ --authorization-webhook-cache-authorized-ttl duration The duration to cache 'authorized' responses from the webhook authorizer. (default 5m0s)
+ --authorization-webhook-cache-unauthorized-ttl duration The duration to cache 'unauthorized' responses from the webhook authorizer. (default 30s)
+ --cadvisor-port int32 The port of the localhost cAdvisor endpoint (default 4194)
+ --cert-dir string The directory where the TLS certs are located (by default /var/run/kubernetes). If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/run/kubernetes")
+ --cgroup-driver string Driver that the kubelet uses to manipulate cgroups on the host. Possible values: 'cgroupfs', 'systemd' (default "cgroupfs")
+ --cgroup-root string Optional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default.
+ --chaos-chance float If > 0.0, introduce random client errors and latency. Intended for testing. [default=0.0]
+ --client-ca-file string If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
+ --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
+ --cloud-provider string The provider for cloud services. By default, kubelet will attempt to auto-detect the cloud provider. Specify empty string for running with no cloud provider. [default=auto-detect] (default "auto-detect")
+ --cluster-dns string IP address for a cluster DNS server. This value is used for containers' DNS server in case of Pods with "dnsPolicy=ClusterFirst"
+ --cluster-domain string Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains
+ --cni-bin-dir string The full path of the directory in which to search for CNI plugin binaries. Default: /opt/cni/bin
+ --cni-conf-dir string The full path of the directory in which to search for CNI config files. Default: /etc/cni/net.d
+ --container-runtime string The container runtime to use. Possible values: 'docker', 'rkt'. Default: 'docker'. (default "docker")
+ --container-runtime-endpoint string [Experimental] The unix socket endpoint of remote runtime service. The endpoint is used only when CRI integration is enabled (--experimental-cri)
+ --containerized Experimental support for running kubelet in a container. Intended for testing. [default=false]
+ --cpu-cfs-quota Enable CPU CFS quota enforcement for containers that specify CPU limits (default true)
+ --docker-endpoint string Use this for the docker endpoint to communicate with (default "unix:///var/run/docker.sock")
+ --docker-exec-handler string Handler to use when executing a command in a container. Valid values are 'native' and 'nsenter'. Defaults to 'native'. (default "native")
+ --enable-controller-attach-detach Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations (default true)
+ --enable-custom-metrics Support for gathering custom metrics.
+ --enable-debugging-handlers Enables server endpoints for log collection and local running of containers and commands (default true)
+ --enable-server Enable the Kubelet's server (default true)
+ --event-burst int32 Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event-qps. Only used if --event-qps > 0 (default 10)
+ --event-qps int32 If > 0, limit event creations per second to this value. If 0, unlimited. (default 5)
+ --eviction-hard string A set of eviction thresholds (e.g. memory.available<1Gi) that if met would trigger a pod eviction. (default "memory.available<100Mi")
+ --eviction-max-pod-grace-period int32 Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value.
+ --eviction-minimum-reclaim string A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure.
+ --eviction-pressure-transition-period duration Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (default 5m0s)
+ --eviction-soft string A set of eviction thresholds (e.g. memory.available<1.5Gi) that if met over a corresponding grace period would trigger a pod eviction.
+ --eviction-soft-grace-period string A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction.
+ --exit-on-lock-contention Whether kubelet should exit upon lock-file contention.
+ --experimental-allowed-unsafe-sysctls stringSlice Comma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk.
+ --experimental-bootstrap-kubeconfig string Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by --kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated key and obtained certificate is written to the path specified by --kubeconfig. The certificate and key file will be stored in the directory pointed by --cert-dir.
+ --experimental-cgroups-per-qos Enable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created.
+ --experimental-check-node-capabilities-before-mount [Experimental] if set true, the kubelet will check the underlying node for required componenets (binaries, etc.) before performing the mount
+ --experimental-cri [Experimental] Enable the Container Runtime Interface (CRI) integration. If --container-runtime is set to "remote", Kubelet will communicate with the runtime/image CRI server listening on the endpoint specified by --remote-runtime-endpoint/--remote-image-endpoint. If --container-runtime is set to "docker", Kubelet will launch a in-process CRI server on behalf of docker, and communicate over a default endpoint.
+ --experimental-fail-swap-on Makes the Kubelet fail to start if swap is enabled on the node. This is a temporary opton to maintain legacy behavior, failing due to swap enabled will happen by default in v1.6.
+ --experimental-kernel-memcg-notification If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling.
+ --experimental-mounter-path string [Experimental] Path of mounter binary. Leave empty to use the default mount.
+ --experimental-nvidia-gpus int32 Number of NVIDIA GPU devices on this node. Only 0 (default) and 1 are currently supported.
+ --feature-gates string A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (ALPHA - default=false)
+AllowExtTrafficLocalEndpoints=true|false (BETA - default=true)
AppArmor=true|false (BETA - default=true)
DynamicKubeletConfig=true|false (ALPHA - default=false)
DynamicVolumeProvisioning=true|false (ALPHA - default=true)
- --file-check-frequency duration Duration between checking config files for new data (default 20s)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --hairpin-mode string How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous-bridge", "hairpin-veth" and "none". (default "promiscuous-bridge")
- --healthz-bind-address value The IP address for the healthz server to serve on, defaulting to 127.0.0.1 (set to 0.0.0.0 for all interfaces) (default 127.0.0.1)
- --healthz-port value The port of the localhost healthz endpoint (default 10248)
- --host-ipc-sources value Comma-separated list of sources from which the Kubelet allows pods to use the host ipc namespace. [default="*"] (default [*])
- --host-network-sources value Comma-separated list of sources from which the Kubelet allows pods to use of host network. [default="*"] (default [*])
- --host-pid-sources value Comma-separated list of sources from which the Kubelet allows pods to use the host pid namespace. [default="*"] (default [*])
- --hostname-override string If non-empty, will use this string as identification instead of the actual hostname.
- --http-check-frequency duration Duration between checking http for new data (default 20s)
- --image-gc-high-threshold value The percent of disk usage after which image garbage collection is always run. Default: 90% (default 90)
- --image-gc-low-threshold value The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. Default: 80% (default 80)
- --image-service-endpoint string The unix socket endpoint of remote image service. If not specified, it will be the same with container-runtime-endpoint by default. This is an experimental feature. Intended for testing only.
- --iptables-drop-bit value The bit of the fwmark space to mark packets for dropping. Must be within the range [0, 31]. (default 15)
- --iptables-masquerade-bit value The bit of the fwmark space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in kube-proxy. (default 14)
- --kube-api-burst value Burst to use while talking with kubernetes apiserver (default 10)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps value QPS to use while talking with kubernetes apiserver (default 5)
- --kube-reserved value A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for kubernetes system components. Currently only cpu and memory are supported. See http://releases.k8s.io/release-1.4/docs/user-guide/compute-resources.md for more detail. [default=none]
- --kubeconfig value Path to a kubeconfig file, specifying how to connect to the API server. --api-servers will be used for the location unless --require-kubeconfig is set. (default "/var/lib/kubelet/kubeconfig")
- --kubelet-cgroups string Optional absolute name of cgroups to create and run the Kubelet in.
- --lock-file string The path to file for kubelet to use as a lock file.
- --low-diskspace-threshold-mb value The absolute free disk space, in MB, to maintain. When disk space falls below this threshold, new pods would be rejected. Default: 256 (default 256)
- --make-iptables-util-chains If true, kubelet will ensure iptables utility rules are present on host. (default true)
- --manifest-url string URL for accessing the container manifest
- --manifest-url-header string HTTP header to use when accessing the manifest URL, with the key separated from the value with a ':', as in 'key:value'
- --master-service-namespace string The namespace from which the kubernetes master services should be injected into pods (default "default")
- --max-open-files int Number of files that can be opened by Kubelet process. [default=1000000] (default 1000000)
- --max-pods value Number of Pods that can run on this Kubelet. (default 110)
- --minimum-image-ttl-duration duration Minimum age for an unused image before it is garbage collected. Examples: '300ms', '10s' or '2h45m'. Default: '2m' (default 2m0s)
- --network-plugin string The name of the network plugin to be invoked for various events in kubelet/pod lifecycle
- --network-plugin-dir string The full path of the directory in which to search for network plugins or CNI config
- --network-plugin-mtu value The MTU to be passed to the network plugin, to override the default. Set to 0 to use the default 1460 MTU.
- --node-ip string IP address of the node. If set, kubelet will use this IP address for the node
- --node-labels value Labels to add when registering the node in the cluster. Labels must be key=value pairs separated by ','.
- --node-status-update-frequency duration Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller. Default: 10s (default 10s)
- --non-masquerade-cidr string Traffic to IPs outside this range will use IP masquerade. (default "10.0.0.0/8")
- --oom-score-adj value The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000] (default -999)
- --outofdisk-transition-frequency duration Duration for which the kubelet has to wait before transitioning out of out-of-disk node condition status. Default: 5m0s (default 5m0s)
- --pod-cidr string The CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master.
- --pod-infra-container-image string The image whose network/ipc namespaces containers in each pod will use. (default "gcr.io/google_containers/pause-amd64:3.0")
- --pod-manifest-path string Path to to the directory containing pod manifest files to run, or the path to a single pod manifest file.
- --pods-per-core value Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max-pods, so max-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit.
- --port value The port for the Kubelet to serve on. (default 10250)
- --protect-kernel-defaults Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults.
- --read-only-port value The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable) (default 10255)
- --really-crash-for-testing If true, when panics occur crash. Intended for testing.
- --reconcile-cidr Reconcile node CIDR with the CIDR specified by the API server. No-op if register-node or configure-cbr0 is false. [default=true] (default true)
- --register-node Register the node with the apiserver (defaults to true if --api-servers is set) (default true)
- --register-schedulable Register the node as schedulable. No-op if register-node is false. [default=true] (default true)
- --registry-burst value Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry-qps. Only used if --registry-qps > 0 (default 10)
- --registry-qps value If > 0, limit registry pull QPS to this value. If 0, unlimited. [default=5.0] (default 5)
- --require-kubeconfig If true the Kubelet will exit if there are configuration errors, and will ignore the value of --api-servers in favor of the server defined in the kubeconfig file.
- --resolv-conf string Resolver configuration file used as the basis for the container DNS resolution configuration. (default "/etc/resolv.conf")
- --rkt-api-endpoint string The endpoint of the rkt API service to communicate with. Only used if --container-runtime='rkt'. (default "localhost:15441")
- --rkt-path string Path of rkt binary. Leave empty to use the first rkt in $PATH. Only used if --container-runtime='rkt'.
- --root-dir string Directory path for managing kubelet files (volume mounts,etc). (default "/var/lib/kubelet")
- --runonce If true, exit after spawning pods from local manifests or remote urls. Exclusive with --api-servers, and --enable-server
- --runtime-cgroups string Optional absolute name of cgroups to create and run the runtime in.
- --runtime-request-timeout duration Timeout of all runtime requests except long running request - pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. Default: 2m0s (default 2m0s)
- --seccomp-profile-root string Directory path for seccomp profiles.
- --serialize-image-pulls Pull images one at a time. We recommend *not* changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details. [default=true] (default true)
- --streaming-connection-idle-timeout duration Maximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m' (default 4h0m0s)
- --sync-frequency duration Max period between synchronizing running containers and config (default 1m0s)
- --system-cgroups / Optional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under /. Empty for no container. Rolling back the flag requires a reboot. (Default: "").
- --system-reserved value A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for non-kubernetes components. Currently only cpu and memory are supported. See http://releases.k8s.io/release-1.4/docs/user-guide/compute-resources.md for more detail. [default=none]
- --tls-cert-file string File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to --cert-dir.
- --tls-private-key-file string File containing x509 private key matching --tls-cert-file.
- --volume-plugin-dir string The full path of the directory in which to search for additional third party volume plugins (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")
- --volume-stats-agg-period duration Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to 0. Default: '1m' (default 1m0s)
+ExperimentalHostUserNamespaceDefaulting=true|false (ALPHA - default=false)
+StreamingProxyRedirects=true|false (ALPHA - default=false)
+ --file-check-frequency duration Duration between checking config files for new data (default 20s)
+ --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
+ --hairpin-mode string How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous-bridge", "hairpin-veth" and "none". (default "promiscuous-bridge")
+ --healthz-bind-address ip The IP address for the healthz server to serve on, defaulting to 127.0.0.1 (set to 0.0.0.0 for all interfaces) (default 127.0.0.1)
+ --healthz-port int32 The port of the localhost healthz endpoint (default 10248)
+ --host-ipc-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use the host ipc namespace. [default="*"] (default [*])
+ --host-network-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use of host network. [default="*"] (default [*])
+ --host-pid-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use the host pid namespace. [default="*"] (default [*])
+ --hostname-override string If non-empty, will use this string as identification instead of the actual hostname.
+ --http-check-frequency duration Duration between checking http for new data (default 20s)
+ --image-gc-high-threshold int32 The percent of disk usage after which image garbage collection is always run. Default: 90% (default 90)
+ --image-gc-low-threshold int32 The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. Default: 80% (default 80)
+ --image-service-endpoint string [Experimental] The unix socket endpoint of remote image service. If not specified, it will be the same with container-runtime-endpoint by default. The endpoint is used only when CRI integration is enabled (--experimental-cri)
+ --iptables-drop-bit int32 The bit of the fwmark space to mark packets for dropping. Must be within the range [0, 31]. (default 15)
+ --iptables-masquerade-bit int32 The bit of the fwmark space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in kube-proxy. (default 14)
+ --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 10)
+ --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
+ --kube-api-qps int32 QPS to use while talking with kubernetes apiserver (default 5)
+ --kube-reserved mapStringString A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for kubernetes system components. Currently only cpu and memory are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none]
+ --kubeconfig string Path to a kubeconfig file, specifying how to connect to the API server. --api-servers will be used for the location unless --require-kubeconfig is set. (default "/var/lib/kubelet/kubeconfig")
+ --kubelet-cgroups string Optional absolute name of cgroups to create and run the Kubelet in.
+ --lock-file string The path to file for kubelet to use as a lock file.
+ --low-diskspace-threshold-mb int32 The absolute free disk space, in MB, to maintain. When disk space falls below this threshold, new pods would be rejected. Default: 256 (default 256)
+ --make-iptables-util-chains If true, kubelet will ensure iptables utility rules are present on host. (default true)
+ --manifest-url string URL for accessing the container manifest
+ --manifest-url-header string HTTP header to use when accessing the manifest URL, with the key separated from the value with a ':', as in 'key:value'
+ --master-service-namespace string The namespace from which the kubernetes master services should be injected into pods (default "default")
+ --max-open-files int Number of files that can be opened by Kubelet process. [default=1000000] (default 1000000)
+ --max-pods int32 Number of Pods that can run on this Kubelet. (default 110)
+ --minimum-image-ttl-duration duration Minimum age for an unused image before it is garbage collected. Examples: '300ms', '10s' or '2h45m'. Default: '2m' (default 2m0s)
+ --network-plugin string The name of the network plugin to be invoked for various events in kubelet/pod lifecycle
+ --network-plugin-dir string The full path of the directory in which to search for network plugins or CNI config
+ --network-plugin-mtu int32 The MTU to be passed to the network plugin, to override the default. Set to 0 to use the default 1460 MTU.
+ --node-ip string IP address of the node. If set, kubelet will use this IP address for the node
+ --node-labels mapStringString Labels to add when registering the node in the cluster. Labels must be key=value pairs separated by ','.
+ --node-status-update-frequency duration Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller. Default: 10s (default 10s)
+ --non-masquerade-cidr string Traffic to IPs outside this range will use IP masquerade. (default "10.0.0.0/8")
+ --oom-score-adj int32 The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000] (default -999)
+ --outofdisk-transition-frequency duration Duration for which the kubelet has to wait before transitioning out of out-of-disk node condition status. Default: 5m0s (default 5m0s)
+ --pod-cidr string The CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master.
+ --pod-infra-container-image string The image whose network/ipc namespaces containers in each pod will use. (default "gcr.io/google_containers/pause-amd64:3.0")
+ --pod-manifest-path string Path to to the directory containing pod manifest files to run, or the path to a single pod manifest file.
+ --pods-per-core int32 Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max-pods, so max-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit.
+ --port int32 The port for the Kubelet to serve on. (default 10250)
+ --protect-kernel-defaults Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults.
+ --read-only-port int32 The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable) (default 10255)
+ --really-crash-for-testing If true, when panics occur crash. Intended for testing.
+ --register-node Register the node with the apiserver (defaults to true if --api-servers is set) (default true)
+ --register-schedulable Register the node as schedulable. Won't have any effect if register-node is false. [default=true] (default true)
+ --registry-burst int32 Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry-qps. Only used if --registry-qps > 0 (default 10)
+ --registry-qps int32 If > 0, limit registry pull QPS to this value. If 0, unlimited. [default=5.0] (default 5)
+ --require-kubeconfig If true the Kubelet will exit if there are configuration errors, and will ignore the value of --api-servers in favor of the server defined in the kubeconfig file.
+ --resolv-conf string Resolver configuration file used as the basis for the container DNS resolution configuration. (default "/etc/resolv.conf")
+ --rkt-api-endpoint string The endpoint of the rkt API service to communicate with. Only used if --container-runtime='rkt'. (default "localhost:15441")
+ --rkt-path string Path of rkt binary. Leave empty to use the first rkt in $PATH. Only used if --container-runtime='rkt'.
+ --root-dir string Directory path for managing kubelet files (volume mounts,etc). (default "/var/lib/kubelet")
+ --runonce If true, exit after spawning pods from local manifests or remote urls. Exclusive with --api-servers, and --enable-server
+ --runtime-cgroups string Optional absolute name of cgroups to create and run the runtime in.
+ --runtime-request-timeout duration Timeout of all runtime requests except long running request - pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. Default: 2m0s (default 2m0s)
+ --seccomp-profile-root string Directory path for seccomp profiles. (default "/var/lib/kubelet/seccomp")
+ --serialize-image-pulls Pull images one at a time. We recommend *not* changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details. [default=true] (default true)
+ --streaming-connection-idle-timeout duration Maximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m' (default 4h0m0s)
+ --sync-frequency duration Max period between synchronizing running containers and config (default 1m0s)
+ --system-cgroups / Optional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under /. Empty for no container. Rolling back the flag requires a reboot. (Default: "").
+ --system-reserved mapStringString A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs that describe resources reserved for non-kubernetes components. Currently only cpu and memory are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none]
+ --tls-cert-file string File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to --cert-dir.
+ --tls-private-key-file string File containing x509 private key matching --tls-cert-file.
+ --volume-plugin-dir string The full path of the directory in which to search for additional third party volume plugins (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")
+ --volume-stats-agg-period duration Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to 0. Default: '1m' (default 1m0s)
```
-###### Auto generated by spf13/cobra on 24-Oct-2016
-
-
-
-
+###### Auto generated by spf13/cobra on 13-Dec-2016
diff --git a/docs/api-reference/README.md b/docs/api-reference/README.md
index 905b267947..c0c1f3620d 100644
--- a/docs/api-reference/README.md
+++ b/docs/api-reference/README.md
@@ -1,6 +1,5 @@
---
---
-
# API Reference
Use the following reference docs to understand the kubernetes REST API for various API group versions:
@@ -11,10 +10,6 @@ Use the following reference docs to understand the kubernetes REST API for vario
* autoscaling/v1: [operations](/docs/api-reference/autoscaling/v1/operations.html), [model definitions](/docs/api-reference/autoscaling/v1/definitions.html)
-
-
-
-
[]()
diff --git a/docs/api-reference/apps/v1alpha1/definitions.html b/docs/api-reference/apps/v1beta1/definitions.html
similarity index 89%
rename from docs/api-reference/apps/v1alpha1/definitions.html
rename to docs/api-reference/apps/v1beta1/definitions.html
index 0dfdf27a56..77ef25e10c 100755
--- a/docs/api-reference/apps/v1alpha1/definitions.html
+++ b/docs/api-reference/apps/v1beta1/definitions.html
@@ -18,10 +18,10 @@
Represents a Photon Controller persistent disk resource.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
pdID
+
ID that identifies Photon Controller persistent disk
+
true
+
string
+
+
+
+
fsType
+
Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+
false
+
string
+
+
+
+
+
+
+
+
versioned.Event
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
type
+
+
true
+
string
+
+
+
+
object
+
+
true
+
string
+
+
+
+
+
+
+
v1.Preconditions
Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
false
string
partition
-
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). More info: http://releases.k8s.io/release-1.4/docs/user-guide/volumes.md#gcepersistentdisk
+
The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). More info: http://kubernetes.io/docs/user-guide/volumes#gcepersistentdisk
Entrypoint array. Not executed within a shell. The docker image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://releases.k8s.io/release-1.4/docs/user-guide/containers.md#containers-and-commands
+
Entrypoint array. Not executed within a shell. The docker image’s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
false
string array
args
-
Arguments to the entrypoint. The docker image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://releases.k8s.io/release-1.4/docs/user-guide/containers.md#containers-and-commands
+
Arguments to the entrypoint. The docker image’s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container’s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers#containers-and-commands
A StatefulSetSpec is the specification of a StatefulSet.
+
+
+
+
+
+
+
+
+
+
+
+
Name
+
Description
+
Required
+
Schema
+
Default
+
+
+
+
+
replicas
+
Replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.
Template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
VolumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.
ServiceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where "pod-specific-string" is managed by the StatefulSet controller.
+
true
+
string
+
+
+
+
+
v1.ObjectMeta
@@ -1232,7 +1410,7 @@ Examples:
-
+
@@ -1246,7 +1424,7 @@ Examples:
name
-
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://releases.k8s.io/release-1.4/docs/user-guide/identifiers.md#names
+
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names
false
string
@@ -1257,7 +1435,7 @@ Examples:
If this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).
Namespace defines the space within each name must be unique. An empty namespace is equivalent to the "default" namespace, but "default" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.
UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.
An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.
@@ -1307,16 +1485,16 @@ Populated by the system. Read-only. Value must be treated as opaque by clients a
creationTimestamp
CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource will be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. Once the resource is deleted in the API, the Kubelet will send a hard termination signal to the container. If not set, graceful deletion of the object has not been requested.
+
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.
Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels
false
object
annotations
-
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://releases.k8s.io/release-1.4/docs/user-guide/annotations.md
+
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations
false
object
@@ -1378,7 +1556,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1399,21 +1577,21 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
@@ -1478,7 +1656,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1526,7 +1704,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1568,7 +1746,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
fsType
-
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://releases.k8s.io/release-1.4/docs/user-guide/volumes.md#iscsi
+
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#iscsi
false
string
@@ -1583,68 +1761,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
-
-
v1alpha1.PetSetSpec
-
-
A PetSetSpec is the specification of a PetSet.
-
-
-
-
-
-
-
-
-
-
-
-
Name
-
Description
-
Required
-
Schema
-
Default
-
-
-
-
-
replicas
-
Replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.
Template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the PetSet will fulfill this Template, but have a unique identity from the rest of the PetSet.
VolumeClaimTemplates is a list of claims that pets are allowed to reference. The PetSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pet. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.
ServiceName is the name of the service that governs this PetSet. This service must exist before the PetSet, and is responsible for the network identity of the set. Pets get DNS/hostnames that follow the pattern: pet-specific-string.serviceName.default.svc.cluster.local where "pet-specific-string" is managed by the PetSet controller.
-
true
-
string
-
-
-
-
-
v1.EmptyDirVolumeSource
@@ -1657,7 +1773,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1671,7 +1787,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
What type of storage medium should back this directory. The default is "" which means to use the node’s default medium. Must be an empty string (default) or Memory. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir
false
string
@@ -1697,7 +1813,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1711,21 +1827,21 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#awselasticblockstore
false
string
@@ -1955,7 +2071,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
@@ -1967,7 +2083,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
v1.FlockerVolumeSource
-
Represents a Flocker volume mounted by the Flocker agent. Flocker volumes do not support ownership management or SELinux relabeling.
+
Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.
@@ -1975,7 +2091,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -1989,8 +2105,15 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
datasetName
-
Required: the volume name. This is going to be store on metadata → name on the payload for Flocker
-
true
+
Name of the dataset stored as metadata → name on the dataset for Flocker should be considered as deprecated
+
false
+
string
+
+
+
+
datasetUUID
+
UUID of the dataset. This is unique identifier of a Flocker dataset
+
false
string
@@ -2009,7 +2132,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -2030,7 +2153,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
@@ -2098,7 +2221,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -2148,71 +2271,6 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
-
-
v1alpha1.PetSet
-
-
PetSet represents a set of pods with consistent identities. Identities are defined as:
- - Network: A single stable DNS and hostname.
- - Storage: As many VolumeClaims as requested.
-The PetSet guarantees that a given network identity will always map to the same storage identity. PetSet is currently in alpha and subject to change without notice.
@@ -2810,6 +2827,71 @@ The PetSet guarantees that a given network identity will always map to the same
+
+
+
v1beta1.StatefulSet
+
+
StatefulSet represents a set of pods with consistent identities. Identities are defined as:
+ - Network: A single stable DNS and hostname.
+ - Storage: As many VolumeClaims as requested.
+The StatefulSet guarantees that a given network identity will always map to the same storage identity.
HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: http://releases.k8s.io/release-1.4/docs/user-guide/volumes.md#hostpath
+
HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: http://kubernetes.io/docs/user-guide/volumes#hostpath
List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/containers
@@ -3587,7 +3676,7 @@ The PetSet guarantees that a given network identity will always map to the same
imagePullSecrets
-
ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: http://releases.k8s.io/release-1.4/docs/user-guide/images.md#specifying-imagepullsecrets-on-a-pod
+
ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: http://kubernetes.io/docs/user-guide/images#specifying-imagepullsecrets-on-a-pod
PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
PreStop is called immediately before a container is terminated. The container is terminated after the handler completes. The reason for termination is passed to the handler. Regardless of the outcome of the handler, the container is eventually terminated. Other management of the container blocks until the hook completes. More info: http://releases.k8s.io/release-1.4/docs/user-guide/container-environment.md#hook-details
+
PreStop is called immediately before a container is terminated. The container is terminated after the handler completes. The reason for termination is passed to the handler. Regardless of the outcome of the handler, the container is eventually terminated. Other management of the container blocks until the hook completes. More info: http://kubernetes.io/docs/user-guide/container-environment#hook-details
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://releases.k8s.io/release-1.4/docs/user-guide/volumes.md#rbd
+
Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: http://kubernetes.io/docs/user-guide/volumes#rbd
@@ -4003,7 +4092,7 @@ The PetSet guarantees that a given network identity will always map to the same
diff --git a/docs/api-reference/apps/v1alpha1/operations.html b/docs/api-reference/apps/v1beta1/operations.html
similarity index 91%
rename from docs/api-reference/apps/v1alpha1/operations.html
rename to docs/api-reference/apps/v1beta1/operations.html
index b46e335e91..8bcd4a2a08 100755
--- a/docs/api-reference/apps/v1alpha1/operations.html
+++ b/docs/api-reference/apps/v1beta1/operations.html
@@ -19,7 +19,7 @@
get available resources
-
GET /apis/apps/v1alpha1
+
GET /apis/apps/v1beta1
@@ -28,7 +28,7 @@
-
+
@@ -84,17 +84,17 @@
-
apisappsv1alpha1
+
apisappsv1beta1
-
list or watch objects of kind PetSet
+
list or watch objects of kind StatefulSet
-
GET /apis/apps/v1alpha1/namespaces/{namespace}/petsets
+
GET /apis/apps/v1beta1/namespaces/{namespace}/statefulsets
The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.
+
false
+
integer (int32)
+
+
+
+
QueryParameter
+
orphanDependents
+
Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list.
+
false
+
boolean
+
+
+
PathParameter
namespace
object name and auth scope, such as for teams and projects
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://releases.k8s.io/release-1.4/docs/user-guide/identifiers.md#names
+
Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names
false
string
@@ -180,7 +180,7 @@
If this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).
Namespace defines the space within each name must be unique. An empty namespace is equivalent to the "default" namespace, but "default" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.
UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.
An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.
@@ -230,16 +230,16 @@ Populated by the system. Read-only. Value must be treated as opaque by clients a
creationTimestamp
CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource will be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. Once the resource is deleted in the API, the Kubelet will send a hard termination signal to the container. If not set, graceful deletion of the object has not been requested.
+
DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field. Once set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.
Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels
false
object
annotations
-
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://releases.k8s.io/release-1.4/docs/user-guide/annotations.md
+
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations
false
object
@@ -301,7 +301,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -349,7 +349,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -383,7 +383,7 @@ Populated by the system when a graceful deletion is requested. Read-only. More i
-
+
@@ -397,14 +397,14 @@ Populated by the system when a graceful deletion is requested. Read-only. More i