Question: What is Content sections?

Answer: E a c h   p a g e   c o n t e n t   t y p e   c o n t a i n s   a   n u m b e r   o f   s e c t i o n s   d e f i n e d   b y   M a r k d o w n   c o m m e n t s   a n d   H T M L   h e a d i n g s .   Y o u   c a n   a d d   c o n t e n t   h e a d i n g s   t o   y o u r   p a g e   w i t h   t h e   h e a d i n g   s h o r t c o d e .   T h e   c o m m e n t s   a n d   h e a d i n g s   h e l p   m a i n t a i n   t h e   s t r u c t u r e   o f   t h e   p a g e   c o n t e n t   t y p e s .   E x a m p l e s   o f   M a r k d o w n   c o m m e n t s   d e f i n i n g   p a g e   c o n t e n t   s e c t i o n s :   < ! - -   o v e r v i e w   - - >   < ! - -   b o d y   - - >   T o   c r e a t e   c o m m o n   h e a d i n g s   i n   y o u r   c o n t e n t   p a g e s ,   u s e   t h e   h e a d i n g   s h o r t c o d e   w i t h   a   h e a d i n g   s t r i n g .   E x a m p l e s   o f   h e a d i n g   s t r i n g s :   w h a t s n e x t p r e r e q u i s i t e s o b j e c t i v e s c l e a n u p s y n o p s i s s e e a l s o o p t i o n s   F o r   e x a m p l e ,   t o   c r e a t e   a   w h a t s n e x t   h e a d i n g ,   a d d   t h e   h e a d i n g   s h o r t c o d e   w i t h   t h e   " w h a t s n e x t "   s t r i n g :   # #   { { %   h e a d i n g   " w h a t s n e x t "   % } }   Y o u   c a n   d e c l a r e   a   p r e r e q u i s i t e s   h e a d i n g   a s   f o l l o w s :   # #   { { %   h e a d i n g   " p r e r e q u i s i t e s "   % } }   T h e   h e a d i n g   s h o r t c o d e   e x p e c t s   o n e   s t r i n g   p a r a m e t e r .   T h e   h e a d i n g   s t r i n g   p a r a m e t e r   m a t c h e s   t h e   p r e f i x   o f   a   v a r i a b l e   i n   t h e   i 1 8 n / < l a n g > / < l a n g > . t o m l   f i l e s .   F o r   e x a m p l e :   i 1 8 n / e n / e n . t o m l :   [ w h a t s n e x t _ h e a d i n g ]   o t h e r   =   " W h a t ' s   n e x t "   i 1 8 n / k o / k o . t o m l :   [ w h a t s n


Question: What is Content types?

Answer: E a c h   c o n t e n t   t y p e   i n f o r m a l l y   d e f i n e s   i t s   e x p e c t e d   p a g e   s t r u c t u r e .   C r e a t e   p a g e   c o n t e n t   w i t h   t h e   s u g g e s t e d   p a g e   s e c t i o n s .


Question: What is Concept?

Answer: A   c o n c e p t   p a g e   e x p l a i n s   s o m e   a s p e c t   o f   K u b e r n e t e s .   F o r   e x a m p l e ,   a   c o n c e p t   p a g e   m i g h t   d e s c r i b e   t h e   K u b e r n e t e s   D e p l o y m e n t   o b j e c t   a n d   e x p l a i n   t h e   r o l e   i t   p l a y s   a s   a n   a p p l i c a t i o n   o n c e   i t   i s   d e p l o y e d ,   s c a l e d ,   a n d   u p d a t e d .   T y p i c a l l y ,   c o n c e p t   p a g e s   d o n ' t   i n c l u d e   s e q u e n c e s   o f   s t e p s ,   b u t   i n s t e a d   p r o v i d e   l i n k s   t o   t a s k s   o r   t u t o r i a l s .   T o   w r i t e   a   n e w   c o n c e p t   p a g e ,   c r e a t e   a   M a r k d o w n   f i l e   i n   a   s u b d i r e c t o r y   o f   t h e   / c o n t e n t / e n / d o c s / c o n c e p t s   d i r e c t o r y ,   w i t h   t h e   f o l l o w i n g   c h a r a c t e r i s t i c s :   C o n c e p t   p a g e s   a r e   d i v i d e d   i n t o   t h r e e   s e c t i o n s :   T h e   o v e r v i e w   a n d   b o d y   s e c t i o n s   a p p e a r   a s   c o m m e n t s   i n   t h e   c o n c e p t   p a g e .   Y o u   c a n   a d d   t h e   w h a t s n e x t   s e c t i o n   t o   y o u r   p a g e   w i t h   t h e   h e a d i n g   s h o r t c o d e .   F i l l   e a c h   s e c t i o n   w i t h   c o n t e n t .   F o l l o w   t h e s e   g u i d e l i n e s :   O r g a n i z e   c o n t e n t   w i t h   H 2   a n d   H 3   h e a d i n g s . F o r   o v e r v i e w ,   s e t   t h e   t o p i c ' s   c o n t e x t   w i t h   a   s i n g l e   p a r a g r a p h . F o r   b o d y ,   e x p l a i n   t h e   c o n c e p t . F o r   w h a t s n e x t ,   p r o v i d e   a   b u l l e t e d   l i s t   o f   t o p i c s   ( 5   m a x i m u m )   t o   l e a r n   m o r e   a b o u t   t h e   c o n c e p t .   A n n o t a t i o n s   i s   a   p u b l i s h e d   e x a m p l e   o f   a   c o n c e p t


Question: What is Task?

Answer: A   t a s k   p a g e   s h o w s   h o w   t o   d o   a   s i n g l e   t h i n g ,   t y p i c a l l y   b y   g i v i n g   a   s h o r t   s e q u e n c e   o f   s t e p s .   T a s k   p a g e s   h a v e   m i n i m a l   e x p l a n a t i o n ,   b u t   o f t e n   p r o v i d e   l i n k s   t o   c o n c e p t u a l   t o p i c s   t h a t   p r o v i d e   r e l a t e d   b a c k g r o u n d   a n d   k n o w l e d g e .   T o   w r i t e   a   n e w   t a s k   p a g e ,   c r e a t e   a   M a r k d o w n   f i l e   i n   a   s u b d i r e c t o r y   o f   t h e   / c o n t e n t / e n / d o c s / t a s k s   d i r e c t o r y ,   w i t h   t h e   f o l l o w i n g   c h a r a c t e r i s t i c s :   T h e   o v e r v i e w ,   s t e p s ,   a n d   d i s c u s s i o n   s e c t i o n s   a p p e a r   a s   c o m m e n t s   i n   t h e   t a s k   p a g e .   Y o u   c a n   a d d   t h e   p r e r e q u i s i t e s   a n d   w h a t s n e x t   s e c t i o n s   t o   y o u r   p a g e   w i t h   t h e   h e a d i n g   s h o r t c o d e .   W i t h i n   e a c h   s e c t i o n ,   w r i t e   y o u r   c o n t e n t .   U s e   t h e   f o l l o w i n g   g u i d e l i n e s :   U s e   a   m i n i m u m   o f   H 2   h e a d i n g s   ( w i t h   t w o   l e a d i n g   #   c h a r a c t e r s ) .   T h e   s e c t i o n s   t h e m s e l v e s   a r e   t i t l e d   a u t o m a t i c a l l y   b y   t h e   t e m p l a t e . F o r   o v e r v i e w ,   u s e   a   p a r a g r a p h   t o   s e t   c o n t e x t   f o r   t h e   e n t i r e   t o p i c . F o r   p r e r e q u i s i t e s ,   u s e   b u l l e t   l i s t s   w h e n   p o s s i b l e .   S t a r t   a d d i n g   a d d i t i o n a l   p r e r e q u i s i t e s   b e l o w   t h e   i n c l u d e .   T h e   d e f a u l t   p r e r e q u i s i t e s   i n c l u d e   a   r u n n i n g   K u b e r n e t e s   c l u s t e r . F o r   s t e p s ,   u s e   n u m b e r e d   l


Question: What is Tutorial?

Answer: A   t u t o r i a l   p a g e   s h o w s   h o w   t o   a c c o m p l i s h   a   g o a l   t h a t   i s   l a r g e r   t h a n   a   s i n g l e   t a s k .   T y p i c a l l y   a   t u t o r i a l   p a g e   h a s   s e v e r a l   s e c t i o n s ,   e a c h   o f   w h i c h   h a s   a   s e q u e n c e   o f   s t e p s .   F o r   e x a m p l e ,   a   t u t o r i a l   m i g h t   p r o v i d e   a   w a l k t h r o u g h   o f   a   c o d e   s a m p l e   t h a t   i l l u s t r a t e s   a   c e r t a i n   f e a t u r e   o f   K u b e r n e t e s .   T u t o r i a l s   c a n   i n c l u d e   s u r f a c e - l e v e l   e x p l a n a t i o n s ,   b u t   s h o u l d   l i n k   t o   r e l a t e d   c o n c e p t   t o p i c s   f o r   d e e p   e x p l a n a t i o n s .   T o   w r i t e   a   n e w   t u t o r i a l   p a g e ,   c r e a t e   a   M a r k d o w n   f i l e   i n   a   s u b d i r e c t o r y   o f   t h e   / c o n t e n t / e n / d o c s / t u t o r i a l s   d i r e c t o r y ,   w i t h   t h e   f o l l o w i n g   c h a r a c t e r i s t i c s :   T h e   o v e r v i e w ,   o b j e c t i v e s ,   a n d   l e s s o n c o n t e n t   s e c t i o n s   a p p e a r   a s   c o m m e n t s   i n   t h e   t u t o r i a l   p a g e .   Y o u   c a n   a d d   t h e   p r e r e q u i s i t e s ,   c l e a n u p ,   a n d   w h a t s n e x t   s e c t i o n s   t o   y o u r   p a g e   w i t h   t h e   h e a d i n g   s h o r t c o d e .   W i t h i n   e a c h   s e c t i o n ,   w r i t e   y o u r   c o n t e n t .   U s e   t h e   f o l l o w i n g   g u i d e l i n e s :   U s e   a   m i n i m u m   o f   H 2   h e a d i n g s   ( w i t h   t w o   l e a d i n g   #   c h a r a c t e r s ) .   T h e   s e c t i o n s   t h e m s e l v e s   a r e   t i t l e d   a u t o m a t i c a l l y   b y   t h e   t e m p l a t e . F o r   o v e r v i e w ,   u s e   a   p a r a g r a p h   t o   s e t   c o n t e x t   f o r


Question: What is Reference?

Answer: A   c o m p o n e n t   t o o l   r e f e r e n c e   p a g e   s h o w s   t h e   d e s c r i p t i o n   a n d   f l a g   o p t i o n s   o u t p u t   f o r   a   K u b e r n e t e s   c o m p o n e n t   t o o l .   E a c h   p a g e   g e n e r a t e s   f r o m   s c r i p t s   u s i n g   t h e   c o m p o n e n t   t o o l   c o m m a n d s .   A   t o o l   r e f e r e n c e   p a g e   h a s   s e v e r a l   p o s s i b l e   s e c t i o n s :   E x a m p l e s   o f   p u b l i s h e d   t o o l   r e f e r e n c e   p a g e s   a r e :   k u b e a d m   i n i t k u b e - a p i s e r v e r k u b e c t l


Question: What is What's next?

Answer: L e a r n   a b o u t   t h e   S t y l e   g u i d e L e a r n   a b o u t   t h e   C o n t e n t   g u i d e L e a r n   a b o u t   c o n t e n t   o r g a n i z a t i o n


Question: What is Upgrade A Cluster?

Answer: Upgrade A ClusterThis page provides an overview of the steps you should follow to upgrade a Kubernetes cluster.The Kubernetes project recommends upgrading to the latest patch releases promptly, and to ensure that you are running a supported minor release of Kubernetes. Following this recommendation helps you to stay secure.The way that you upgrade a cluster depends on how you initially deployed it and on any subsequent changes.At a high level, the steps you perform are:Upgrade the control planeUpgrade the nodes in your clusterUpgrade clients such as kubectlAdjust manifests and other resources based on the API changes that accompany the new Kubernetes versionBefore you beginYou must have an existing cluster. This page is about upgrading from Kubernetes 1.33 to Kubernetes 1.34. If your cluster is not currently running Kubernetes 1.33 then please check the documentation for the version of Kubernetes that you plan to upgrade to.Upgrade approacheskubeadmIf your cluster was deployed using the kubeadm tool, refer to Upgrading kubeadm clusters for detailed information on how to upgrade the cluster.Once you have upgraded the cluster, remember to install the latest version of kubectl.Manual deploymentsCaution:These steps do not account for third-party extensions such as network and storage plugins.You should manually update the control plane following this sequence:etcd (all instances)kube-apiserver (all control plane hosts)kube-controller-managerkube-schedulercloud controller manager, if you use oneAt this point you should install the latest version of kubectl.For each node in your cluster, drain that node and then either replace it with a new node that uses the 1.34 kubelet, or upgrade the kubelet on that node and bring the node back into service.Caution:Draining nodes before upgrading kubelet ensures that pods are re-admitted and containers are re-created, which may be necessary to resolve some security issues or other important bugs.Other deploymentsRefer to the documentation for your cluster deployment tool to learn the recommended set up steps for maintenance.Post-upgrade tasksSwitch your cluster's storage API versionThe objects that are serialized into etcd for a cluster's internal representation of the Kubernetes resources active in the cluster are written using a particular version of the API.When the supported API changes, these objects may need to be rewritten in the newer API. Failure to do this will eventually result in resources that are no longer decodable or usable by the Kubernetes API server.For each affected object, fetch it using the latest supported API and then write it back also using the latest supported API.Update manifestsUpgrading to a new Kubernetes version can provide new APIs.You can use kubectl convert command to convert manifests between different API versions. For example:kubectl convert -f pod.yaml --output-version v1 The kubectl tool replaces the contents of pod.yaml with a manifest that sets kind to Pod (unchanged), but


Question: How does Upgrade A Cluster work?

Answer: Upgrade A ClusterThis page provides an overview of the steps you should follow to upgrade a Kubernetes cluster.The Kubernetes project recommends upgrading to the latest patch releases promptly, and to ensure that you are running a supported minor release of Kubernetes. Following this recommendation helps you to stay secure.The way that you upgrade a cluster depends on how you initially deployed it and on any subsequent changes.At a high level, the steps you perform are:Upgrade the control planeUpgrade the nodes in your clusterUpgrade clients such as kubectlAdjust manifests and other resources based on the API changes that accompany the new Kubernetes versionBefore you beginYou must have an existing cluster. This page is about upgrading from Kubernetes 1.33 to Kubernetes 1.34. If your cluster is not currently running Kubernetes 1.33 then please check the documentation for the version of Kubernetes that you plan to upgrade to.Upgrade approacheskubeadmIf your cluster was deployed using the kubeadm tool, refer to Upgrading kubeadm clusters for detailed information on how to upgrade the cluster.Once you have upgraded the cluster, remember to install the latest version of kubectl.Manual deploymentsCaution:These steps do not account for third-party extensions such as network and storage plugins.You should manually update the control plane following this sequence:etcd (all instances)kube-apiserver (all control plane hosts)kube-controller-managerkube-schedulercloud controller manager, if you use oneAt this point you should install the latest version of kubectl.For each node in your cluster, drain that node and then either replace it with a new node that uses the 1.34 kubelet, or upgrade the kubelet on that node and bring the node back into service.Caution:Draining nodes before upgrading kubelet ensures that pods are re-admitted and containers are re-created, which may be necessary to resolve some security issues or other important bugs.Other deploymentsRefer to the documentation for your cluster deployment tool to learn the recommended set up steps for maintenance.Post-upgrade tasksSwitch your cluster's storage API versionThe objects that are serialized into etcd for a cluster's internal representation of the Kubernetes resources active in the cluster are written using a particular version of the API.When the supported API changes, these objects may need to be rewritten in the newer API. Failure to do this will eventually result in resources that are no longer decodable or usable by the Kubernetes API server.For each affected object, fetch it using the latest supported API and then write it back also using the latest supported API.Update manifestsUpgrading to a new Kubernetes version can provide new APIs.You can use kubectl convert command to convert manifests between different API versions. For example:kubectl convert -f pod.yaml --output-version v1 The kubectl tool replaces the contents of pod.yaml with a manifest that sets kind to Pod (unchanged), but


Question: When would you use Upgrade A Cluster?

Answer: Upgrade A ClusterThis page provides an overview of the steps you should follow to upgrade a Kubernetes cluster.The Kubernetes project recommends upgrading to the latest patch releases promptly, and to ensure that you are running a supported minor release of Kubernetes. Following this recommendation helps you to stay secure.The way that you upgrade a cluster depends on how you initially deployed it and on any subsequent changes.At a high level, the steps you perform are:Upgrade the control planeUpgrade the nodes in your clusterUpgrade clients such as kubectlAdjust manifests and other resources based on the API changes that accompany the new Kubernetes versionBefore you beginYou must have an existing cluster. This page is about upgrading from Kubernetes 1.33 to Kubernetes 1.34. If your cluster is not currently running Kubernetes 1.33 then please check the documentation for the version of Kubernetes that you plan to upgrade to.Upgrade approacheskubeadmIf your cluster was deployed using the kubeadm tool, refer to Upgrading kubeadm clusters for detailed information on how to upgrade the cluster.Once you have upgraded the cluster, remember to install the latest version of kubectl.Manual deploymentsCaution:These steps do not account for third-party extensions such as network and storage plugins.You should manually update the control plane following this sequence:etcd (all instances)kube-apiserver (all control plane hosts)kube-controller-managerkube-schedulercloud controller manager, if you use oneAt this point you should install the latest version of kubectl.For each node in your cluster, drain that node and then either replace it with a new node that uses the 1.34 kubelet, or upgrade the kubelet on that node and bring the node back into service.Caution:Draining nodes before upgrading kubelet ensures that pods are re-admitted and containers are re-created, which may be necessary to resolve some security issues or other important bugs.Other deploymentsRefer to the documentation for your cluster deployment tool to learn the recommended set up steps for maintenance.Post-upgrade tasksSwitch your cluster's storage API versionThe objects that are serialized into etcd for a cluster's internal representation of the Kubernetes resources active in the cluster are written using a particular version of the API.When the supported API changes, these objects may need to be rewritten in the newer API. Failure to do this will eventually result in resources that are no longer decodable or usable by the Kubernetes API server.For each affected object, fetch it using the latest supported API and then write it back also using the latest supported API.Update manifestsUpgrading to a new Kubernetes version can provide new APIs.You can use kubectl convert command to convert manifests between different API versions. For example:kubectl convert -f pod.yaml --output-version v1 The kubectl tool replaces the contents of pod.yaml with a manifest that sets kind to Pod (unchanged), but


Question: What are the benefits of Upgrade A Cluster?

Answer: Upgrade A ClusterThis page provides an overview of the steps you should follow to upgrade a Kubernetes cluster.The Kubernetes project recommends upgrading to the latest patch releases promptly, and to ensure that you are running a supported minor release of Kubernetes. Following this recommendation helps you to stay secure.The way that you upgrade a cluster depends on how you initially deployed it and on any subsequent changes.At a high level, the steps you perform are:Upgrade the control planeUpgrade the nodes in your clusterUpgrade clients such as kubectlAdjust manifests and other resources based on the API changes that accompany the new Kubernetes versionBefore you beginYou must have an existing cluster. This page is about upgrading from Kubernetes 1.33 to Kubernetes 1.34. If your cluster is not currently running Kubernetes 1.33 then please check the documentation for the version of Kubernetes that you plan to upgrade to.Upgrade approacheskubeadmIf your cluster was deployed using the kubeadm tool, refer to Upgrading kubeadm clusters for detailed information on how to upgrade the cluster.Once you have upgraded the cluster, remember to install the latest version of kubectl.Manual deploymentsCaution:These steps do not account for third-party extensions such as network and storage plugins.You should manually update the control plane following this sequence:etcd (all instances)kube-apiserver (all control plane hosts)kube-controller-managerkube-schedulercloud controller manager, if you use oneAt this point you should install the latest version of kubectl.For each node in your cluster, drain that node and then either replace it with a new node that uses the 1.34 kubelet, or upgrade the kubelet on that node and bring the node back into service.Caution:Draining nodes before upgrading kubelet ensures that pods are re-admitted and containers are re-created, which may be necessary to resolve some security issues or other important bugs.Other deploymentsRefer to the documentation for your cluster deployment tool to learn the recommended set up steps for maintenance.Post-upgrade tasksSwitch your cluster's storage API versionThe objects that are serialized into etcd for a cluster's internal representation of the Kubernetes resources active in the cluster are written using a particular version of the API.When the supported API changes, these objects may need to be rewritten in the newer API. Failure to do this will eventually result in resources that are no longer decodable or usable by the Kubernetes API server.For each affected object, fetch it using the latest supported API and then write it back also using the latest supported API.Update manifestsUpgrading to a new Kubernetes version can provide new APIs.You can use kubectl convert command to convert manifests between different API versions. For example:kubectl convert -f pod.yaml --output-version v1 The kubectl tool replaces the contents of pod.yaml with a manifest that sets kind to Pod (unchanged), but


Question: What is Upgrade A Cluster?

Answer: T h i s   p a g e   p r o v i d e s   a n   o v e r v i e w   o f   t h e   s t e p s   y o u   s h o u l d   f o l l o w   t o   u p g r a d e   a   K u b e r n e t e s   c l u s t e r .   T h e   K u b e r n e t e s   p r o j e c t   r e c o m m e n d s   u p g r a d i n g   t o   t h e   l a t e s t   p a t c h   r e l e a s e s   p r o m p t l y ,   a n d   t o   e n s u r e   t h a t   y o u   a r e   r u n n i n g   a   s u p p o r t e d   m i n o r   r e l e a s e   o f   K u b e r n e t e s .   F o l l o w i n g   t h i s   r e c o m m e n d a t i o n   h e l p s   y o u   t o   s t a y   s e c u r e .   T h e   w a y   t h a t   y o u   u p g r a d e   a   c l u s t e r   d e p e n d s   o n   h o w   y o u   i n i t i a l l y   d e p l o y e d   i t   a n d   o n   a n y   s u b s e q u e n t   c h a n g e s .   A t   a   h i g h   l e v e l ,   t h e   s t e p s   y o u   p e r f o r m   a r e :   U p g r a d e   t h e   c o n t r o l   p l a n e U p g r a d e   t h e   n o d e s   i n   y o u r   c l u s t e r U p g r a d e   c l i e n t s   s u c h   a s   k u b e c t l A d j u s t   m a n i f e s t s   a n d   o t h e r   r e s o u r c e s   b a s e d   o n   t h e   A P I   c h a n g e s   t h a t   a c c o m p a n y   t h e   n e w   K u b e r n e t e s   v e r s i o n


Question: What is Before you begin?

Answer: Y o u   m u s t   h a v e   a n   e x i s t i n g   c l u s t e r .   T h i s   p a g e   i s   a b o u t   u p g r a d i n g   f r o m   K u b e r n e t e s   1 . 3 3   t o   K u b e r n e t e s   1 . 3 4 .   I f   y o u r   c l u s t e r   i s   n o t   c u r r e n t l y   r u n n i n g   K u b e r n e t e s   1 . 3 3   t h e n   p l e a s e   c h e c k   t h e   d o c u m e n t a t i o n   f o r   t h e   v e r s i o n   o f   K u b e r n e t e s   t h a t   y o u   p l a n   t o   u p g r a d e   t o .


Question: What is kubeadm?

Answer: I f   y o u r   c l u s t e r   w a s   d e p l o y e d   u s i n g   t h e   k u b e a d m   t o o l ,   r e f e r   t o   U p g r a d i n g   k u b e a d m   c l u s t e r s   f o r   d e t a i l e d   i n f o r m a t i o n   o n   h o w   t o   u p g r a d e   t h e   c l u s t e r .   O n c e   y o u   h a v e   u p g r a d e d   t h e   c l u s t e r ,   r e m e m b e r   t o   i n s t a l l   t h e   l a t e s t   v e r s i o n   o f   k u b e c t l .


Question: What is Caution:?

Answer: Y o u   s h o u l d   m a n u a l l y   u p d a t e   t h e   c o n t r o l   p l a n e   f o l l o w i n g   t h i s   s e q u e n c e :   e t c d   ( a l l   i n s t a n c e s ) k u b e - a p i s e r v e r   ( a l l   c o n t r o l   p l a n e   h o s t s ) k u b e - c o n t r o l l e r - m a n a g e r k u b e - s c h e d u l e r c l o u d   c o n t r o l l e r   m a n a g e r ,   i f   y o u   u s e   o n e   A t   t h i s   p o i n t   y o u   s h o u l d   i n s t a l l   t h e   l a t e s t   v e r s i o n   o f   k u b e c t l .   F o r   e a c h   n o d e   i n   y o u r   c l u s t e r ,   d r a i n   t h a t   n o d e   a n d   t h e n   e i t h e r   r e p l a c e   i t   w i t h   a   n e w   n o d e   t h a t   u s e s   t h e   1 . 3 4   k u b e l e t ,   o r   u p g r a d e   t h e   k u b e l e t   o n   t h a t   n o d e   a n d   b r i n g   t h e   n o d e   b a c k   i n t o   s e r v i c e .


Question: What is Other deployments?

Answer: R e f e r   t o   t h e   d o c u m e n t a t i o n   f o r   y o u r   c l u s t e r   d e p l o y m e n t   t o o l   t o   l e a r n   t h e   r e c o m m e n d e d   s e t   u p   s t e p s   f o r   m a i n t e n a n c e .


Question: What is Switch your cluster's storage API version?

Answer: T h e   o b j e c t s   t h a t   a r e   s e r i a l i z e d   i n t o   e t c d   f o r   a   c l u s t e r ' s   i n t e r n a l   r e p r e s e n t a t i o n   o f   t h e   K u b e r n e t e s   r e s o u r c e s   a c t i v e   i n   t h e   c l u s t e r   a r e   w r i t t e n   u s i n g   a   p a r t i c u l a r   v e r s i o n   o f   t h e   A P I .   W h e n   t h e   s u p p o r t e d   A P I   c h a n g e s ,   t h e s e   o b j e c t s   m a y   n e e d   t o   b e   r e w r i t t e n   i n   t h e   n e w e r   A P I .   F a i l u r e   t o   d o   t h i s   w i l l   e v e n t u a l l y   r e s u l t   i n   r e s o u r c e s   t h a t   a r e   n o   l o n g e r   d e c o d a b l e   o r   u s a b l e   b y   t h e   K u b e r n e t e s   A P I   s e r v e r .   F o r   e a c h   a f f e c t e d   o b j e c t ,   f e t c h   i t   u s i n g   t h e   l a t e s t   s u p p o r t e d   A P I   a n d   t h e n   w r i t e   i t   b a c k   a l s o   u s i n g   t h e   l a t e s t   s u p p o r t e d   A P I .


Question: What is Update manifests?

Answer: U p g r a d i n g   t o   a   n e w   K u b e r n e t e s   v e r s i o n   c a n   p r o v i d e   n e w   A P I s .   Y o u   c a n   u s e   k u b e c t l   c o n v e r t   c o m m a n d   t o   c o n v e r t   m a n i f e s t s   b e t w e e n   d i f f e r e n t   A P I   v e r s i o n s .   F o r   e x a m p l e :   k u b e c t l   c o n v e r t   - f   p o d . y a m l   - - o u t p u t - v e r s i o n   v 1   T h e   k u b e c t l   t o o l   r e p l a c e s   t h e   c o n t e n t s   o f   p o d . y a m l   w i t h   a   m a n i f e s t   t h a t   s e t s   k i n d   t o   P o d   ( u n c h a n g e d ) ,   b u t   w i t h   a   r e v i s e d   a p i V e r s i o n .


Question: What is Device Plugins?

Answer: I f   y o u r   c l u s t e r   i s   r u n n i n g   d e v i c e   p l u g i n s   a n d   t h e   n o d e   n e e d s   t o   b e   u p g r a d e d   t o   a   K u b e r n e t e s   r e l e a s e   w i t h   a   n e w e r   d e v i c e   p l u g i n   A P I   v e r s i o n ,   d e v i c e   p l u g i n s   m u s t   b e   u p g r a d e d   t o   s u p p o r t   b o t h   v e r s i o n   b e f o r e   t h e   n o d e   i s   u p g r a d e d   i n   o r d e r   t o   g u a r a n t e e   t h a t   d e v i c e   a l l o c a t i o n s   c o n t i n u e   t o   c o m p l e t e   s u c c e s s f u l l y   d u r i n g   t h e   u p g r a d e .   R e f e r   t o   A P I   c o m p a t i b i l i t y   a n d   K u b e l e t   D e v i c e   M a n a g e r   A P I   V e r s i o n s   f o r   m o r e   d e t a i l s .


Question: What is Specifying a Disruption Budget for your Application?

Answer: Specifying a Disruption Budget for your ApplicationFEATURE STATE: Kubernetes v1.21 [stable]This page shows how to limit the number of concurrent disruptions that your application experiences, allowing for higher availability while permitting the cluster administrator to manage the clusters nodes.Before you beginYour Kubernetes server must be at or later than version v1.21.To check the version, enter kubectl version.You are the owner of an application running on a Kubernetes cluster that requires high availability.You should know how to deploy Replicated Stateless Applications and/or Replicated Stateful Applications.You should have read about Pod Disruptions.You should confirm with your cluster owner or service provider that they respect Pod Disruption Budgets.Protecting an Application with a PodDisruptionBudgetIdentify what application you want to protect with a PodDisruptionBudget (PDB).Think about how your application reacts to disruptions.Create a PDB definition as a YAML file.Create the PDB object from the YAML file.Identify an Application to ProtectThe most common use case when you want to protect an application specified by one of the built-in Kubernetes controllers:DeploymentReplicationControllerReplicaSetStatefulSetIn this case, make a note of the controller's .spec.selector; the same selector goes into the PDBs .spec.selector.From version 1.15 PDBs support custom controllers where the scale subresource is enabled.You can also use PDBs with pods which are not controlled by one of the above controllers, or arbitrary groups of pods, but there are some restrictions, described in Arbitrary workloads and arbitrary selectors.Think about how your application reacts to disruptionsDecide how many instances can be down at the same time for a short period due to a voluntary disruption.Stateless frontends:Concern: don't reduce serving capacity by more than 10%.Solution: use PDB with minAvailable 90% for example.Single-instance Stateful Application:Concern: do not terminate this application without talking to me.Possible Solution 1: Do not use a PDB and tolerate occasional downtime.Possible Solution 2: Set PDB with maxUnavailable=0. Have an understanding (outside of Kubernetes) that the cluster operator needs to consult you before termination. When the cluster operator contacts you, prepare for downtime, and then delete the PDB to indicate readiness for disruption. Recreate afterwards.Multiple-instance Stateful application such as Consul, ZooKeeper, or etcd:Concern: Do not reduce number of instances below quorum, otherwise writes fail.Possible Solution 1: set maxUnavailable to 1 (works with varying scale of application).Possible Solution 2: set minAvailable to quorum-size (e.g. 3 when scale is 5). (Allows more disruptions at once).Restartable Batch Job:Concern: Job needs to complete in case of voluntary disruption.Possible solution: Do not create a PDB. The Job controller will create a replacement pod.Rounding logic when specifying percentagesValues f


Question: How does Specifying a Disruption Budget for your Application work?

Answer: Specifying a Disruption Budget for your ApplicationFEATURE STATE: Kubernetes v1.21 [stable]This page shows how to limit the number of concurrent disruptions that your application experiences, allowing for higher availability while permitting the cluster administrator to manage the clusters nodes.Before you beginYour Kubernetes server must be at or later than version v1.21.To check the version, enter kubectl version.You are the owner of an application running on a Kubernetes cluster that requires high availability.You should know how to deploy Replicated Stateless Applications and/or Replicated Stateful Applications.You should have read about Pod Disruptions.You should confirm with your cluster owner or service provider that they respect Pod Disruption Budgets.Protecting an Application with a PodDisruptionBudgetIdentify what application you want to protect with a PodDisruptionBudget (PDB).Think about how your application reacts to disruptions.Create a PDB definition as a YAML file.Create the PDB object from the YAML file.Identify an Application to ProtectThe most common use case when you want to protect an application specified by one of the built-in Kubernetes controllers:DeploymentReplicationControllerReplicaSetStatefulSetIn this case, make a note of the controller's .spec.selector; the same selector goes into the PDBs .spec.selector.From version 1.15 PDBs support custom controllers where the scale subresource is enabled.You can also use PDBs with pods which are not controlled by one of the above controllers, or arbitrary groups of pods, but there are some restrictions, described in Arbitrary workloads and arbitrary selectors.Think about how your application reacts to disruptionsDecide how many instances can be down at the same time for a short period due to a voluntary disruption.Stateless frontends:Concern: don't reduce serving capacity by more than 10%.Solution: use PDB with minAvailable 90% for example.Single-instance Stateful Application:Concern: do not terminate this application without talking to me.Possible Solution 1: Do not use a PDB and tolerate occasional downtime.Possible Solution 2: Set PDB with maxUnavailable=0. Have an understanding (outside of Kubernetes) that the cluster operator needs to consult you before termination. When the cluster operator contacts you, prepare for downtime, and then delete the PDB to indicate readiness for disruption. Recreate afterwards.Multiple-instance Stateful application such as Consul, ZooKeeper, or etcd:Concern: Do not reduce number of instances below quorum, otherwise writes fail.Possible Solution 1: set maxUnavailable to 1 (works with varying scale of application).Possible Solution 2: set minAvailable to quorum-size (e.g. 3 when scale is 5). (Allows more disruptions at once).Restartable Batch Job:Concern: Job needs to complete in case of voluntary disruption.Possible solution: Do not create a PDB. The Job controller will create a replacement pod.Rounding logic when specifying percentagesValues f


Question: When would you use Specifying a Disruption Budget for your Application?

Answer: Specifying a Disruption Budget for your ApplicationFEATURE STATE: Kubernetes v1.21 [stable]This page shows how to limit the number of concurrent disruptions that your application experiences, allowing for higher availability while permitting the cluster administrator to manage the clusters nodes.Before you beginYour Kubernetes server must be at or later than version v1.21.To check the version, enter kubectl version.You are the owner of an application running on a Kubernetes cluster that requires high availability.You should know how to deploy Replicated Stateless Applications and/or Replicated Stateful Applications.You should have read about Pod Disruptions.You should confirm with your cluster owner or service provider that they respect Pod Disruption Budgets.Protecting an Application with a PodDisruptionBudgetIdentify what application you want to protect with a PodDisruptionBudget (PDB).Think about how your application reacts to disruptions.Create a PDB definition as a YAML file.Create the PDB object from the YAML file.Identify an Application to ProtectThe most common use case when you want to protect an application specified by one of the built-in Kubernetes controllers:DeploymentReplicationControllerReplicaSetStatefulSetIn this case, make a note of the controller's .spec.selector; the same selector goes into the PDBs .spec.selector.From version 1.15 PDBs support custom controllers where the scale subresource is enabled.You can also use PDBs with pods which are not controlled by one of the above controllers, or arbitrary groups of pods, but there are some restrictions, described in Arbitrary workloads and arbitrary selectors.Think about how your application reacts to disruptionsDecide how many instances can be down at the same time for a short period due to a voluntary disruption.Stateless frontends:Concern: don't reduce serving capacity by more than 10%.Solution: use PDB with minAvailable 90% for example.Single-instance Stateful Application:Concern: do not terminate this application without talking to me.Possible Solution 1: Do not use a PDB and tolerate occasional downtime.Possible Solution 2: Set PDB with maxUnavailable=0. Have an understanding (outside of Kubernetes) that the cluster operator needs to consult you before termination. When the cluster operator contacts you, prepare for downtime, and then delete the PDB to indicate readiness for disruption. Recreate afterwards.Multiple-instance Stateful application such as Consul, ZooKeeper, or etcd:Concern: Do not reduce number of instances below quorum, otherwise writes fail.Possible Solution 1: set maxUnavailable to 1 (works with varying scale of application).Possible Solution 2: set minAvailable to quorum-size (e.g. 3 when scale is 5). (Allows more disruptions at once).Restartable Batch Job:Concern: Job needs to complete in case of voluntary disruption.Possible solution: Do not create a PDB. The Job controller will create a replacement pod.Rounding logic when specifying percentagesValues f


Question: What are the benefits of Specifying a Disruption Budget for your Application?

Answer: Specifying a Disruption Budget for your ApplicationFEATURE STATE: Kubernetes v1.21 [stable]This page shows how to limit the number of concurrent disruptions that your application experiences, allowing for higher availability while permitting the cluster administrator to manage the clusters nodes.Before you beginYour Kubernetes server must be at or later than version v1.21.To check the version, enter kubectl version.You are the owner of an application running on a Kubernetes cluster that requires high availability.You should know how to deploy Replicated Stateless Applications and/or Replicated Stateful Applications.You should have read about Pod Disruptions.You should confirm with your cluster owner or service provider that they respect Pod Disruption Budgets.Protecting an Application with a PodDisruptionBudgetIdentify what application you want to protect with a PodDisruptionBudget (PDB).Think about how your application reacts to disruptions.Create a PDB definition as a YAML file.Create the PDB object from the YAML file.Identify an Application to ProtectThe most common use case when you want to protect an application specified by one of the built-in Kubernetes controllers:DeploymentReplicationControllerReplicaSetStatefulSetIn this case, make a note of the controller's .spec.selector; the same selector goes into the PDBs .spec.selector.From version 1.15 PDBs support custom controllers where the scale subresource is enabled.You can also use PDBs with pods which are not controlled by one of the above controllers, or arbitrary groups of pods, but there are some restrictions, described in Arbitrary workloads and arbitrary selectors.Think about how your application reacts to disruptionsDecide how many instances can be down at the same time for a short period due to a voluntary disruption.Stateless frontends:Concern: don't reduce serving capacity by more than 10%.Solution: use PDB with minAvailable 90% for example.Single-instance Stateful Application:Concern: do not terminate this application without talking to me.Possible Solution 1: Do not use a PDB and tolerate occasional downtime.Possible Solution 2: Set PDB with maxUnavailable=0. Have an understanding (outside of Kubernetes) that the cluster operator needs to consult you before termination. When the cluster operator contacts you, prepare for downtime, and then delete the PDB to indicate readiness for disruption. Recreate afterwards.Multiple-instance Stateful application such as Consul, ZooKeeper, or etcd:Concern: Do not reduce number of instances below quorum, otherwise writes fail.Possible Solution 1: set maxUnavailable to 1 (works with varying scale of application).Possible Solution 2: set minAvailable to quorum-size (e.g. 3 when scale is 5). (Allows more disruptions at once).Restartable Batch Job:Concern: Job needs to complete in case of voluntary disruption.Possible solution: Do not create a PDB. The Job controller will create a replacement pod.Rounding logic when specifying percentagesValues f


Question: What is Specifying a Disruption Budget for your Application?

Answer: T h i s   p a g e   s h o w s   h o w   t o   l i m i t   t h e   n u m b e r   o f   c o n c u r r e n t   d i s r u p t i o n s   t h a t   y o u r   a p p l i c a t i o n   e x p e r i e n c e s ,   a l l o w i n g   f o r   h i g h e r   a v a i l a b i l i t y   w h i l e   p e r m i t t i n g   t h e   c l u s t e r   a d m i n i s t r a t o r   t o   m a n a g e   t h e   c l u s t e r s   n o d e s .


Question: What is Before you begin?

Answer: T o   c h e c k   t h e   v e r s i o n ,   e n t e r   k u b e c t l   v e r s i o n .   Y o u   a r e   t h e   o w n e r   o f   a n   a p p l i c a t i o n   r u n n i n g   o n   a   K u b e r n e t e s   c l u s t e r   t h a t   r e q u i r e s   h i g h   a v a i l a b i l i t y . Y o u   s h o u l d   k n o w   h o w   t o   d e p l o y   R e p l i c a t e d   S t a t e l e s s   A p p l i c a t i o n s   a n d / o r   R e p l i c a t e d   S t a t e f u l   A p p l i c a t i o n s . Y o u   s h o u l d   h a v e   r e a d   a b o u t   P o d   D i s r u p t i o n s . Y o u   s h o u l d   c o n f i r m   w i t h   y o u r   c l u s t e r   o w n e r   o r   s e r v i c e   p r o v i d e r   t h a t   t h e y   r e s p e c t   P o d   D i s r u p t i o n   B u d g e t s .


Question: What is Protecting an Application with a PodDisruptionBudget?

Answer: I d e n t i f y   w h a t   a p p l i c a t i o n   y o u   w a n t   t o   p r o t e c t   w i t h   a   P o d D i s r u p t i o n B u d g e t   ( P D B ) . T h i n k   a b o u t   h o w   y o u r   a p p l i c a t i o n   r e a c t s   t o   d i s r u p t i o n s . C r e a t e   a   P D B   d e f i n i t i o n   a s   a   Y A M L   f i l e . C r e a t e   t h e   P D B   o b j e c t   f r o m   t h e   Y A M L   f i l e .


Question: What is Identify an Application to Protect?

Answer: T h e   m o s t   c o m m o n   u s e   c a s e   w h e n   y o u   w a n t   t o   p r o t e c t   a n   a p p l i c a t i o n   s p e c i f i e d   b y   o n e   o f   t h e   b u i l t - i n   K u b e r n e t e s   c o n t r o l l e r s :   D e p l o y m e n t R e p l i c a t i o n C o n t r o l l e r R e p l i c a S e t S t a t e f u l S e t   I n   t h i s   c a s e ,   m a k e   a   n o t e   o f   t h e   c o n t r o l l e r ' s   . s p e c . s e l e c t o r ;   t h e   s a m e   s e l e c t o r   g o e s   i n t o   t h e   P D B s   . s p e c . s e l e c t o r .   F r o m   v e r s i o n   1 . 1 5   P D B s   s u p p o r t   c u s t o m   c o n t r o l l e r s   w h e r e   t h e   s c a l e   s u b r e s o u r c e   i s   e n a b l e d .   Y o u   c a n   a l s o   u s e   P D B s   w i t h   p o d s   w h i c h   a r e   n o t   c o n t r o l l e d   b y   o n e   o f   t h e   a b o v e   c o n t r o l l e r s ,   o r   a r b i t r a r y   g r o u p s   o f   p o d s ,   b u t   t h e r e   a r e   s o m e   r e s t r i c t i o n s ,   d e s c r i b e d   i n   A r b i t r a r y   w o r k l o a d s   a n d   a r b i t r a r y   s e l e c t o r s .


Question: What is Think about how your application reacts to disruptions?

Answer: D e c i d e   h o w   m a n y   i n s t a n c e s   c a n   b e   d o w n   a t   t h e   s a m e   t i m e   f o r   a   s h o r t   p e r i o d   d u e   t o   a   v o l u n t a r y   d i s r u p t i o n .   S t a t e l e s s   f r o n t e n d s : C o n c e r n :   d o n ' t   r e d u c e   s e r v i n g   c a p a c i t y   b y   m o r e   t h a n   1 0 % . S o l u t i o n :   u s e   P D B   w i t h   m i n A v a i l a b l e   9 0 %   f o r   e x a m p l e . S i n g l e - i n s t a n c e   S t a t e f u l   A p p l i c a t i o n : C o n c e r n :   d o   n o t   t e r m i n a t e   t h i s   a p p l i c a t i o n   w i t h o u t   t a l k i n g   t o   m e . P o s s i b l e   S o l u t i o n   1 :   D o   n o t   u s e   a   P D B   a n d   t o l e r a t e   o c c a s i o n a l   d o w n t i m e . P o s s i b l e   S o l u t i o n   2 :   S e t   P D B   w i t h   m a x U n a v a i l a b l e = 0 .   H a v e   a n   u n d e r s t a n d i n g   ( o u t s i d e   o f   K u b e r n e t e s )   t h a t   t h e   c l u s t e r   o p e r a t o r   n e e d s   t o   c o n s u l t   y o u   b e f o r e   t e r m i n a t i o n .   W h e n   t h e   c l u s t e r   o p e r a t o r   c o n t a c t s   y o u ,   p r e p a r e   f o r   d o w n t i m e ,   a n d   t h e n   d e l e t e   t h e   P D B   t o   i n d i c a t e   r e a d i n e s s   f o r   d i s r u p t i o n .   R e c r e a t e   a f t e r w a r d s . M u l t i p l e - i n s t a n c e   S t a t e f u l   a p p l i c a t i o n   s u c h   a s   C o n s u l ,   Z o o K e e p e r ,   o r   e t c d : C o n c e r n :   D o   n o t   r e d u c e   n u m b e r   o f   i n s t a n c e s   b e l o w   q u o r u m ,   o t h e r w i s e   w r i t e s   f a i l . P o s s i b l e   S o l u t i o n   1 :   s e t   m a x U n a v a i l a b l e   t o   1   ( w o r k s   w i t h   v a r y i n g   s c a l e   o f   a p p l i c a t i o n ) . P o s s i b l e   S o l u t i o n   2 :   s e t   m i n A v a i l a b l e   t o   q u o r


Question: What is Rounding logic when specifying percentages?

Answer: V a l u e s   f o r   m i n A v a i l a b l e   o r   m a x U n a v a i l a b l e   c a n   b e   e x p r e s s e d   a s   i n t e g e r s   o r   a s   a   p e r c e n t a g e .   W h e n   y o u   s p e c i f y   a n   i n t e g e r ,   i t   r e p r e s e n t s   a   n u m b e r   o f   P o d s .   F o r   i n s t a n c e ,   i f   y o u   s e t   m i n A v a i l a b l e   t o   1 0 ,   t h e n   1 0   P o d s   m u s t   a l w a y s   b e   a v a i l a b l e ,   e v e n   d u r i n g   a   d i s r u p t i o n . W h e n   y o u   s p e c i f y   a   p e r c e n t a g e   b y   s e t t i n g   t h e   v a l u e   t o   a   s t r i n g   r e p r e s e n t a t i o n   o f   a   p e r c e n t a g e   ( e g .   " 5 0 % " ) ,   i t   r e p r e s e n t s   a   p e r c e n t a g e   o f   t o t a l   P o d s .   F o r   i n s t a n c e ,   i f   y o u   s e t   m i n A v a i l a b l e   t o   " 5 0 % " ,   t h e n   a t   l e a s t   5 0 %   o f   t h e   P o d s   r e m a i n   a v a i l a b l e   d u r i n g   a   d i s r u p t i o n .   W h e n   y o u   s p e c i f y   t h e   v a l u e   a s   a   p e r c e n t a g e ,   i t   m a y   n o t   m a p   t o   a n   e x a c t   n u m b e r   o f   P o d s .   F o r   e x a m p l e ,   i f   y o u   h a v e   7   P o d s   a n d   y o u   s e t   m i n A v a i l a b l e   t o   " 5 0 % " ,   i t ' s   n o t   i m m e d i a t e l y   o b v i o u s   w h e t h e r   t h a t   m e a n s   3   P o d s   o r   4   P o d s   m u s t   b e   a v a i l a b l e .   K u b e r n e t e s   r o u n d s   u p   t o   t h e   n e a r e s t   i n t e g e r ,   s o   i n   t h i s   c a s e ,   4   P o d s   m u s t   b e   a v a i l a b l e .   W h e n   y o u   s p e c i f y   t h e   v a l u e   m a x U n a v a i l a b l e   a s   a   p e r c e n t a g e ,   K u b e r n e t e s   r o u n d s   u p   t h e   n u m b e r   o f   P o d s   t h a t   m a y   b e   d i s r u p t e d .   T h e r e b y   a   d i s r u p t i o n   c a n   e


Question: What is Specifying a PodDisruptionBudget?

Answer: A   P o d D i s r u p t i o n B u d g e t   h a s   t h r e e   f i e l d s :   A   l a b e l   s e l e c t o r   . s p e c . s e l e c t o r   t o   s p e c i f y   t h e   s e t   o f   p o d s   t o   w h i c h   i t   a p p l i e s .   T h i s   f i e l d   i s   r e q u i r e d . . s p e c . m i n A v a i l a b l e   w h i c h   i s   a   d e s c r i p t i o n   o f   t h e   n u m b e r   o f   p o d s   f r o m   t h a t   s e t   t h a t   m u s t   s t i l l   b e   a v a i l a b l e   a f t e r   t h e   e v i c t i o n ,   e v e n   i n   t h e   a b s e n c e   o f   t h e   e v i c t e d   p o d .   m i n A v a i l a b l e   c a n   b e   e i t h e r   a n   a b s o l u t e   n u m b e r   o r   a   p e r c e n t a g e . . s p e c . m a x U n a v a i l a b l e   ( a v a i l a b l e   i n   K u b e r n e t e s   1 . 7   a n d   h i g h e r )   w h i c h   i s   a   d e s c r i p t i o n   o f   t h e   n u m b e r   o f   p o d s   f r o m   t h a t   s e t   t h a t   c a n   b e   u n a v a i l a b l e   a f t e r   t h e   e v i c t i o n .   I t   c a n   b e   e i t h e r   a n   a b s o l u t e   n u m b e r   o r   a   p e r c e n t a g e .


Question: What is Note:?

Answer: Y o u   c a n   s p e c i f y   o n l y   o n e   o f   m a x U n a v a i l a b l e   a n d   m i n A v a i l a b l e   i n   a   s i n g l e   P o d D i s r u p t i o n B u d g e t .   m a x U n a v a i l a b l e   c a n   o n l y   b e   u s e d   t o   c o n t r o l   t h e   e v i c t i o n   o f   p o d s   t h a t   a l l   h a v e   t h e   s a m e   a s s o c i a t e d   c o n t r o l l e r   m a n a g i n g   t h e m .   I n   t h e   e x a m p l e s   b e l o w ,   " d e s i r e d   r e p l i c a s "   i s   t h e   s c a l e   o f   t h e   c o n t r o l l e r   m a n a g i n g   t h e   p o d s   b e i n g   s e l e c t e d   b y   t h e   P o d D i s r u p t i o n B u d g e t .   E x a m p l e   1 :   W i t h   a   m i n A v a i l a b l e   o f   5 ,   e v i c t i o n s   a r e   a l l o w e d   a s   l o n g   a s   t h e y   l e a v e   b e h i n d   5   o r   m o r e   h e a l t h y   p o d s   a m o n g   t h o s e   s e l e c t e d   b y   t h e   P o d D i s r u p t i o n B u d g e t ' s   s e l e c t o r .   E x a m p l e   2 :   W i t h   a   m i n A v a i l a b l e   o f   3 0 % ,   e v i c t i o n s   a r e   a l l o w e d   a s   l o n g   a s   a t   l e a s t   3 0 %   o f   t h e   n u m b e r   o f   d e s i r e d   r e p l i c a s   a r e   h e a l t h y .   E x a m p l e   3 :   W i t h   a   m a x U n a v a i l a b l e   o f   5 ,   e v i c t i o n s   a r e   a l l o w e d   a s   l o n g   a s   t h e r e   a r e   a t   m o s t   5   u n h e a l t h y   r e p l i c a s   a m o n g   t h e   t o t a l   n u m b e r   o f   d e s i r e d   r e p l i c a s .   E x a m p l e   4 :   W i t h   a   m a x U n a v a i l a b l e   o f   3 0 % ,   e v i c t i o n s   a r e   a l l o w e d   a s   l o n g   a s   t h e   n u m b e r   o f   u n h e a l t h y   r e p l i c a s   d o e s   n o t   e x c e e d   3 0 %   o f   t h e   t o t a l   n u m b e r   o f   d e s i r e d   r e p l i c a   r o u n d e d   u p   t o   t h e   n e a r e s t


Question: What is Note:?

Answer: I f   y o u   s e t   m a x U n a v a i l a b l e   t o   0 %   o r   0 ,   o r   y o u   s e t   m i n A v a i l a b l e   t o   1 0 0 %   o r   t h e   n u m b e r   o f   r e p l i c a s ,   y o u   a r e   r e q u i r i n g   z e r o   v o l u n t a r y   e v i c t i o n s .   W h e n   y o u   s e t   z e r o   v o l u n t a r y   e v i c t i o n s   f o r   a   w o r k l o a d   o b j e c t   s u c h   a s   R e p l i c a S e t ,   t h e n   y o u   c a n n o t   s u c c e s s f u l l y   d r a i n   a   N o d e   r u n n i n g   o n e   o f   t h o s e   P o d s .   I f   y o u   t r y   t o   d r a i n   a   N o d e   w h e r e   a n   u n e v i c t a b l e   P o d   i s   r u n n i n g ,   t h e   d r a i n   n e v e r   c o m p l e t e s .   T h i s   i s   p e r m i t t e d   a s   p e r   t h e   s e m a n t i c s   o f   P o d D i s r u p t i o n B u d g e t .   Y o u   c a n   f i n d   e x a m p l e s   o f   p o d   d i s r u p t i o n   b u d g e t s   d e f i n e d   b e l o w .   T h e y   m a t c h   p o d s   w i t h   t h e   l a b e l   a p p :   z o o k e e p e r .   E x a m p l e   P D B   U s i n g   m i n A v a i l a b l e :   a p i V e r s i o n :   p o l i c y / v 1   k i n d :   P o d D i s r u p t i o n B u d g e t   m e t a d a t a :   n a m e :   z k - p d b   s p e c :   m i n A v a i l a b l e :   2   s e l e c t o r :   m a t c h L a b e l s :   a p p :   z o o k e e p e r   E x a m p l e   P D B   U s i n g   m a x U n a v a i l a b l e :   a p i V e r s i o n :   p o l i c y / v 1   k i n d :   P o d D i s r u p t i o n B u d g e t   m e t a d a t a :   n a m e :   z k - p d b   s p e c :   m a x U n a v a i l a b l e :   1   s e l e c t o r :   m a t c h L a b e l s :   a p p :   z o o k e e p e r   F o r   e x a m p l e ,   i f   t h e   a b o v e   z k - p d b   o b j e c t   s e l e c t s   t h e   p o d s   o f   a   S t a t e f u l S e t   o f   s i z e   3 ,   b o t h   s p e c i f i c a t i o n s   h a v e   t h e   e x


Question: What is Create the PDB object?

Answer: Y o u   c a n   c r e a t e   o r   u p d a t e   t h e   P D B   o b j e c t   u s i n g   k u b e c t l .   k u b e c t l   a p p l y   - f   m y p d b . y a m l


Question: What is Check the status of the PDB?

Answer: U s e   k u b e c t l   t o   c h e c k   t h a t   y o u r   P D B   i s   c r e a t e d .   A s s u m i n g   y o u   d o n ' t   a c t u a l l y   h a v e   p o d s   m a t c h i n g   a p p :   z o o k e e p e r   i n   y o u r   n a m e s p a c e ,   t h e n   y o u ' l l   s e e   s o m e t h i n g   l i k e   t h i s :   k u b e c t l   g e t   p o d d i s r u p t i o n b u d g e t s   N A M E   M I N   A V A I L A B L E   M A X   U N A V A I L A B L E   A L L O W E D   D I S R U P T I O N S   A G E   z k - p d b   2   N / A   0   7 s   I f   t h e r e   a r e   m a t c h i n g   p o d s   ( s a y ,   3 ) ,   t h e n   y o u   w o u l d   s e e   s o m e t h i n g   l i k e   t h i s :   k u b e c t l   g e t   p o d d i s r u p t i o n b u d g e t s   N A M E   M I N   A V A I L A B L E   M A X   U N A V A I L A B L E   A L L O W E D   D I S R U P T I O N S   A G E   z k - p d b   2   N / A   1   7 s   T h e   n o n - z e r o   v a l u e   f o r   A L L O W E D   D I S R U P T I O N S   m e a n s   t h a t   t h e   d i s r u p t i o n   c o n t r o l l e r   h a s   s e e n   t h e   p o d s ,   c o u n t e d   t h e   m a t c h i n g   p o d s ,   a n d   u p d a t e d   t h e   s t a t u s   o f   t h e   P D B .   Y o u   c a n   g e t   m o r e   i n f o r m a t i o n   a b o u t   t h e   s t a t u s   o f   a   P D B   w i t h   t h i s   c o m m a n d :   k u b e c t l   g e t   p o d d i s r u p t i o n b u d g e t s   z k - p d b   - o   y a m l   a p i V e r s i o n :   p o l i c y / v 1   k i n d :   P o d D i s r u p t i o n B u d g e t   m e t a d a t a :   a n n o t a t i o n s :   …   c r e a t i o n T i m e s t a m p :   " 2 0 2 0 - 0 3 - 0 4 T 0 4 : 2 2 : 5 6 Z "   g e n e r a t i o n :   1   n a m e :   z k - p d b   …   s t a t u s :   c u r r e n t H e a l t h y :   3   d e s i r e d H e a l t h y :   2   d i s r u p t i o n s A l l o w e d :   1   e x p e c t e d P o d s :   3   o b s e r v e d G e n e r a t i o n :   1


Question: What is Healthiness of a Pod?

Answer: T h e   c u r r e n t   i m p l e m e n t a t i o n   c o n s i d e r s   h e a l t h y   p o d s ,   a s   p o d s   t h a t   h a v e   . s t a t u s . c o n d i t i o n s   i t e m   w i t h   t y p e = " R e a d y "   a n d   s t a t u s = " T r u e " .   T h e s e   p o d s   a r e   t r a c k e d   v i a   . s t a t u s . c u r r e n t H e a l t h y   f i e l d   i n   t h e   P D B   s t a t u s .


Question: What is Unhealthy Pod Eviction Policy?

Answer: P o d D i s r u p t i o n B u d g e t   g u a r d i n g   a n   a p p l i c a t i o n   e n s u r e s   t h a t   . s t a t u s . c u r r e n t H e a l t h y   n u m b e r   o f   p o d s   d o e s   n o t   f a l l   b e l o w   t h e   n u m b e r   s p e c i f i e d   i n   . s t a t u s . d e s i r e d H e a l t h y   b y   d i s a l l o w i n g   e v i c t i o n   o f   h e a l t h y   p o d s .   B y   u s i n g   . s p e c . u n h e a l t h y P o d E v i c t i o n P o l i c y ,   y o u   c a n   a l s o   d e f i n e   t h e   c r i t e r i a   w h e n   u n h e a l t h y   p o d s   s h o u l d   b e   c o n s i d e r e d   f o r   e v i c t i o n .   T h e   d e f a u l t   b e h a v i o r   w h e n   n o   p o l i c y   i s   s p e c i f i e d   c o r r e s p o n d s   t o   t h e   I f H e a l t h y B u d g e t   p o l i c y .   P o l i c i e s :   T h i s   p o l i c y   e n s u r e s   t h a t   r u n n i n g   p o d s   o f   a n   a l r e a d y   d i s r u p t e d   a p p l i c a t i o n   h a v e   t h e   b e s t   c h a n c e   t o   b e c o m e   h e a l t h y .   T h i s   h a s   n e g a t i v e   i m p l i c a t i o n s   f o r   d r a i n i n g   n o d e s ,   w h i c h   c a n   b e   b l o c k e d   b y   m i s b e h a v i n g   a p p l i c a t i o n s   t h a t   a r e   g u a r d e d   b y   a   P D B .   M o r e   s p e c i f i c a l l y   a p p l i c a t i o n s   w i t h   p o d s   i n   C r a s h L o o p B a c k O f f   s t a t e   ( d u e   t o   a   b u g   o r   m i s c o n f i g u r a t i o n ) ,   o r   p o d s   t h a t   a r e   j u s t   f a i l i n g   t o   r e p o r t   t h e   R e a d y   c o n d i t i o n .   T h i s   m e a n s   p r o s p e c t i v e   r u n n i n g   p o d s   o f   a   d i s r u p t e d   a p p l i c a t i o n   m i g h t   n o t   g e t   a   c h a n c e   t o   b e c o m e   h e a l t h y .   B y   u s i n g   t h i s   p o l i c y ,   c l u s t e r   m a n a g e r s   c a n   e a s i l y   e v i c


Question: What is Arbitrary workloads and arbitrary selectors?

Answer: Y o u   c a n   s k i p   t h i s   s e c t i o n   i f   y o u   o n l y   u s e   P D B s   w i t h   t h e   b u i l t - i n   w o r k l o a d   r e s o u r c e s   ( D e p l o y m e n t ,   R e p l i c a S e t ,   S t a t e f u l S e t   a n d   R e p l i c a t i o n C o n t r o l l e r )   o r   w i t h   c u s t o m   r e s o u r c e s   t h a t   i m p l e m e n t   a   s c a l e   s u b r e s o u r c e ,   a n d   w h e r e   t h e   P D B   s e l e c t o r   e x a c t l y   m a t c h e s   t h e   s e l e c t o r   o f   t h e   P o d ' s   o w n i n g   r e s o u r c e .   Y o u   c a n   u s e   a   P D B   w i t h   p o d s   c o n t r o l l e d   b y   a n o t h e r   r e s o u r c e ,   b y   a n   " o p e r a t o r " ,   o r   b a r e   p o d s ,   b u t   w i t h   t h e s e   r e s t r i c t i o n s :   o n l y   . s p e c . m i n A v a i l a b l e   c a n   b e   u s e d ,   n o t   . s p e c . m a x U n a v a i l a b l e . o n l y   a n   i n t e g e r   v a l u e   c a n   b e   u s e d   w i t h   . s p e c . m i n A v a i l a b l e ,   n o t   a   p e r c e n t a g e .   I t   i s   n o t   p o s s i b l e   t o   u s e   o t h e r   a v a i l a b i l i t y   c o n f i g u r a t i o n s ,   b e c a u s e   K u b e r n e t e s   c a n n o t   d e r i v e   a   t o t a l   n u m b e r   o f   p o d s   w i t h o u t   a   s u p p o r t e d   o w n i n g   r e s o u r c e .   Y o u   c a n   u s e   a   s e l e c t o r   w h i c h   s e l e c t s   a   s u b s e t   o r   s u p e r s e t   o f   t h e   p o d s   b e l o n g i n g   t o   a   w o r k l o a d   r e s o u r c e .   T h e   e v i c t i o n   A P I   w i l l   d i s a l l o w   e v i c t i o n   o f   a n y   p o d   c o v e r e d   b y   m u l t i p l e   P D B s ,   s o   m o s t   u s e r s   w i l l   w a n t   t o   a v o i d   o v e r l a p p i n g   s e l e c t o r s .   O n e   r e a s o n a b l e   u s e   o f   o v e r l a p p i n g   P D B s   i s   w h e n   p o d s   a r


Question: What is kube-apiserver Configuration (v1beta1)?

Answer: kube-apiserver Configuration (v1beta1)Package v1beta1 is the v1beta1 version of the API.Resource TypesAuthenticationConfigurationAuthorizationConfigurationEgressSelectorConfigurationTracingConfigurationTracingConfigurationAppears in:KubeletConfigurationTracingConfigurationTracingConfigurationTracingConfiguration provides versioned configuration for OpenTelemetry tracing clients.FieldDescriptionendpointstringEndpoint of the collector this component will report traces to. The connection is insecure, and does not currently support TLS. Recommended is unset, and endpoint is the otlp grpc default, localhost:4317.samplingRatePerMillionint32SamplingRatePerMillion is the number of samples to collect per million spans. Recommended is unset. If unset, sampler respects its parent span's sampling rate, but otherwise never samples.AuthenticationConfigurationAuthenticationConfiguration provides versioned configuration for authentication.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthenticationConfigurationjwt [Required][]JWTAuthenticatorjwt is a list of authenticator to authenticate Kubernetes users using JWT compliant tokens. The authenticator will attempt to parse a raw ID token, verify it's been signed by the configured issuer. The public key to verify the signature is discovered from the issuer's public endpoint using OIDC discovery. For an incoming token, each JWT authenticator will be attempted in the order in which it is specified in this list. Note however that other authenticators may run before or after the JWT authenticators. The specific position of JWT authenticators in relation to other authenticators is neither defined nor stable across releases. Since each JWT authenticator must have a unique issuer URL, at most one JWT authenticator will attempt to cryptographically validate the token.The minimum valid JWT payload must contain the following claims: { "iss": "https://issuer.example.com", "aud": ["audience"], "exp": 1234567890, "": "username" }anonymous [Required]AnonymousAuthConfigIf present --anonymous-auth must not be setAuthorizationConfigurationFieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthorizationConfigurationauthorizers [Required][]AuthorizerConfigurationAuthorizers is an ordered list of authorizers to authorize requests against. This is similar to the --authorization-modes kube-apiserver flag Must be at least one.EgressSelectorConfigurationEgressSelectorConfiguration provides versioned configuration for egress selector clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringEgressSelectorConfigurationegressSelections [Required][]EgressSelectionconnectionServices contains a list of egress selection client configurationsTracingConfigurationTracingConfiguration provides versioned configuration for tracing clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringTracingConfigurationTracingConfiguration [Required]TracingConfiguration(Members of TracingConfigura


Question: How does kube-apiserver Configuration (v1beta1) work?

Answer: kube-apiserver Configuration (v1beta1)Package v1beta1 is the v1beta1 version of the API.Resource TypesAuthenticationConfigurationAuthorizationConfigurationEgressSelectorConfigurationTracingConfigurationTracingConfigurationAppears in:KubeletConfigurationTracingConfigurationTracingConfigurationTracingConfiguration provides versioned configuration for OpenTelemetry tracing clients.FieldDescriptionendpointstringEndpoint of the collector this component will report traces to. The connection is insecure, and does not currently support TLS. Recommended is unset, and endpoint is the otlp grpc default, localhost:4317.samplingRatePerMillionint32SamplingRatePerMillion is the number of samples to collect per million spans. Recommended is unset. If unset, sampler respects its parent span's sampling rate, but otherwise never samples.AuthenticationConfigurationAuthenticationConfiguration provides versioned configuration for authentication.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthenticationConfigurationjwt [Required][]JWTAuthenticatorjwt is a list of authenticator to authenticate Kubernetes users using JWT compliant tokens. The authenticator will attempt to parse a raw ID token, verify it's been signed by the configured issuer. The public key to verify the signature is discovered from the issuer's public endpoint using OIDC discovery. For an incoming token, each JWT authenticator will be attempted in the order in which it is specified in this list. Note however that other authenticators may run before or after the JWT authenticators. The specific position of JWT authenticators in relation to other authenticators is neither defined nor stable across releases. Since each JWT authenticator must have a unique issuer URL, at most one JWT authenticator will attempt to cryptographically validate the token.The minimum valid JWT payload must contain the following claims: { "iss": "https://issuer.example.com", "aud": ["audience"], "exp": 1234567890, "": "username" }anonymous [Required]AnonymousAuthConfigIf present --anonymous-auth must not be setAuthorizationConfigurationFieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthorizationConfigurationauthorizers [Required][]AuthorizerConfigurationAuthorizers is an ordered list of authorizers to authorize requests against. This is similar to the --authorization-modes kube-apiserver flag Must be at least one.EgressSelectorConfigurationEgressSelectorConfiguration provides versioned configuration for egress selector clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringEgressSelectorConfigurationegressSelections [Required][]EgressSelectionconnectionServices contains a list of egress selection client configurationsTracingConfigurationTracingConfiguration provides versioned configuration for tracing clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringTracingConfigurationTracingConfiguration [Required]TracingConfiguration(Members of TracingConfigura


Question: When would you use kube-apiserver Configuration (v1beta1)?

Answer: kube-apiserver Configuration (v1beta1)Package v1beta1 is the v1beta1 version of the API.Resource TypesAuthenticationConfigurationAuthorizationConfigurationEgressSelectorConfigurationTracingConfigurationTracingConfigurationAppears in:KubeletConfigurationTracingConfigurationTracingConfigurationTracingConfiguration provides versioned configuration for OpenTelemetry tracing clients.FieldDescriptionendpointstringEndpoint of the collector this component will report traces to. The connection is insecure, and does not currently support TLS. Recommended is unset, and endpoint is the otlp grpc default, localhost:4317.samplingRatePerMillionint32SamplingRatePerMillion is the number of samples to collect per million spans. Recommended is unset. If unset, sampler respects its parent span's sampling rate, but otherwise never samples.AuthenticationConfigurationAuthenticationConfiguration provides versioned configuration for authentication.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthenticationConfigurationjwt [Required][]JWTAuthenticatorjwt is a list of authenticator to authenticate Kubernetes users using JWT compliant tokens. The authenticator will attempt to parse a raw ID token, verify it's been signed by the configured issuer. The public key to verify the signature is discovered from the issuer's public endpoint using OIDC discovery. For an incoming token, each JWT authenticator will be attempted in the order in which it is specified in this list. Note however that other authenticators may run before or after the JWT authenticators. The specific position of JWT authenticators in relation to other authenticators is neither defined nor stable across releases. Since each JWT authenticator must have a unique issuer URL, at most one JWT authenticator will attempt to cryptographically validate the token.The minimum valid JWT payload must contain the following claims: { "iss": "https://issuer.example.com", "aud": ["audience"], "exp": 1234567890, "": "username" }anonymous [Required]AnonymousAuthConfigIf present --anonymous-auth must not be setAuthorizationConfigurationFieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthorizationConfigurationauthorizers [Required][]AuthorizerConfigurationAuthorizers is an ordered list of authorizers to authorize requests against. This is similar to the --authorization-modes kube-apiserver flag Must be at least one.EgressSelectorConfigurationEgressSelectorConfiguration provides versioned configuration for egress selector clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringEgressSelectorConfigurationegressSelections [Required][]EgressSelectionconnectionServices contains a list of egress selection client configurationsTracingConfigurationTracingConfiguration provides versioned configuration for tracing clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringTracingConfigurationTracingConfiguration [Required]TracingConfiguration(Members of TracingConfigura


Question: What are the benefits of kube-apiserver Configuration (v1beta1)?

Answer: kube-apiserver Configuration (v1beta1)Package v1beta1 is the v1beta1 version of the API.Resource TypesAuthenticationConfigurationAuthorizationConfigurationEgressSelectorConfigurationTracingConfigurationTracingConfigurationAppears in:KubeletConfigurationTracingConfigurationTracingConfigurationTracingConfiguration provides versioned configuration for OpenTelemetry tracing clients.FieldDescriptionendpointstringEndpoint of the collector this component will report traces to. The connection is insecure, and does not currently support TLS. Recommended is unset, and endpoint is the otlp grpc default, localhost:4317.samplingRatePerMillionint32SamplingRatePerMillion is the number of samples to collect per million spans. Recommended is unset. If unset, sampler respects its parent span's sampling rate, but otherwise never samples.AuthenticationConfigurationAuthenticationConfiguration provides versioned configuration for authentication.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthenticationConfigurationjwt [Required][]JWTAuthenticatorjwt is a list of authenticator to authenticate Kubernetes users using JWT compliant tokens. The authenticator will attempt to parse a raw ID token, verify it's been signed by the configured issuer. The public key to verify the signature is discovered from the issuer's public endpoint using OIDC discovery. For an incoming token, each JWT authenticator will be attempted in the order in which it is specified in this list. Note however that other authenticators may run before or after the JWT authenticators. The specific position of JWT authenticators in relation to other authenticators is neither defined nor stable across releases. Since each JWT authenticator must have a unique issuer URL, at most one JWT authenticator will attempt to cryptographically validate the token.The minimum valid JWT payload must contain the following claims: { "iss": "https://issuer.example.com", "aud": ["audience"], "exp": 1234567890, "": "username" }anonymous [Required]AnonymousAuthConfigIf present --anonymous-auth must not be setAuthorizationConfigurationFieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringAuthorizationConfigurationauthorizers [Required][]AuthorizerConfigurationAuthorizers is an ordered list of authorizers to authorize requests against. This is similar to the --authorization-modes kube-apiserver flag Must be at least one.EgressSelectorConfigurationEgressSelectorConfiguration provides versioned configuration for egress selector clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringEgressSelectorConfigurationegressSelections [Required][]EgressSelectionconnectionServices contains a list of egress selection client configurationsTracingConfigurationTracingConfiguration provides versioned configuration for tracing clients.FieldDescriptionapiVersionstringapiserver.k8s.io/v1beta1kindstringTracingConfigurationTracingConfiguration [Required]TracingConfiguration(Members of TracingConfigura


Question: What is kube-apiserver Configuration (v1beta1)?

Answer: P a c k a g e   v 1 b e t a 1   i s   t h e   v 1 b e t a 1   v e r s i o n   o f   t h e   A P I .


Question: What is Resource Types?

Answer: A u t h e n t i c a t i o n C o n f i g u r a t i o n A u t h o r i z a t i o n C o n f i g u r a t i o n E g r e s s S e l e c t o r C o n f i g u r a t i o n T r a c i n g C o n f i g u r a t i o n


Question: What is TracingConfiguration?

Answer: A p p e a r s   i n :   K u b e l e t C o n f i g u r a t i o n T r a c i n g C o n f i g u r a t i o n T r a c i n g C o n f i g u r a t i o n   K u b e l e t C o n f i g u r a t i o n   T r a c i n g C o n f i g u r a t i o n   T r a c i n g C o n f i g u r a t i o n   T r a c i n g C o n f i g u r a t i o n   p r o v i d e s   v e r s i o n e d   c o n f i g u r a t i o n   f o r   O p e n T e l e m e t r y   t r a c i n g   c l i e n t s .   E n d p o i n t   o f   t h e   c o l l e c t o r   t h i s   c o m p o n e n t   w i l l   r e p o r t   t r a c e s   t o .   T h e   c o n n e c t i o n   i s   i n s e c u r e ,   a n d   d o e s   n o t   c u r r e n t l y   s u p p o r t   T L S .   R e c o m m e n d e d   i s   u n s e t ,   a n d   e n d p o i n t   i s   t h e   o t l p   g r p c   d e f a u l t ,   l o c a l h o s t : 4 3 1 7 .   S a m p l i n g R a t e P e r M i l l i o n   i s   t h e   n u m b e r   o f   s a m p l e s   t o   c o l l e c t   p e r   m i l l i o n   s p a n s .   R e c o m m e n d e d   i s   u n s e t .   I f   u n s e t ,   s a m p l e r   r e s p e c t s   i t s   p a r e n t   s p a n ' s   s a m p l i n g   r a t e ,   b u t   o t h e r w i s e   n e v e r   s a m p l e s .


Question: What is AuthenticationConfiguration?

Answer: A u t h e n t i c a t i o n C o n f i g u r a t i o n   p r o v i d e s   v e r s i o n e d   c o n f i g u r a t i o n   f o r   a u t h e n t i c a t i o n .   j w t   i s   a   l i s t   o f   a u t h e n t i c a t o r   t o   a u t h e n t i c a t e   K u b e r n e t e s   u s e r s   u s i n g   J W T   c o m p l i a n t   t o k e n s .   T h e   a u t h e n t i c a t o r   w i l l   a t t e m p t   t o   p a r s e   a   r a w   I D   t o k e n ,   v e r i f y   i t ' s   b e e n   s i g n e d   b y   t h e   c o n f i g u r e d   i s s u e r .   T h e   p u b l i c   k e y   t o   v e r i f y   t h e   s i g n a t u r e   i s   d i s c o v e r e d   f r o m   t h e   i s s u e r ' s   p u b l i c   e n d p o i n t   u s i n g   O I D C   d i s c o v e r y .   F o r   a n   i n c o m i n g   t o k e n ,   e a c h   J W T   a u t h e n t i c a t o r   w i l l   b e   a t t e m p t e d   i n   t h e   o r d e r   i n   w h i c h   i t   i s   s p e c i f i e d   i n   t h i s   l i s t .   N o t e   h o w e v e r   t h a t   o t h e r   a u t h e n t i c a t o r s   m a y   r u n   b e f o r e   o r   a f t e r   t h e   J W T   a u t h e n t i c a t o r s .   T h e   s p e c i f i c   p o s i t i o n   o f   J W T   a u t h e n t i c a t o r s   i n   r e l a t i o n   t o   o t h e r   a u t h e n t i c a t o r s   i s   n e i t h e r   d e f i n e d   n o r   s t a b l e   a c r o s s   r e l e a s e s .   S i n c e   e a c h   J W T   a u t h e n t i c a t o r   m u s t   h a v e   a   u n i q u e   i s s u e r   U R L ,   a t   m o s t   o n e   J W T   a u t h e n t i c a t o r   w i l l   a t t e m p t   t o   c r y p t o g r a p h i c a l l y   v a l i d a t e   t h e   t o k e n .   T h e   m i n i m u m   v a l i d   J W T   p a y l o a d   m u s t   c o n t a i n   t h e   f o l l o w i n g   c l a i m s :   {   " i s s " :   " h t t p s : / / i s s u e r . e x a m p l e . c o m " ,   " a u d " :   [ " a u d i e n c e " ] ,   " e x p " :   1 2 3 4 5 6


Question: What is AuthorizationConfiguration?

Answer: A u t h o r i z e r s   i s   a n   o r d e r e d   l i s t   o f   a u t h o r i z e r s   t o   a u t h o r i z e   r e q u e s t s   a g a i n s t .   T h i s   i s   s i m i l a r   t o   t h e   - - a u t h o r i z a t i o n - m o d e s   k u b e - a p i s e r v e r   f l a g   M u s t   b e   a t   l e a s t   o n e .


Question: What is EgressSelectorConfiguration?

Answer: E g r e s s S e l e c t o r C o n f i g u r a t i o n   p r o v i d e s   v e r s i o n e d   c o n f i g u r a t i o n   f o r   e g r e s s   s e l e c t o r   c l i e n t s .   c o n n e c t i o n S e r v i c e s   c o n t a i n s   a   l i s t   o f   e g r e s s   s e l e c t i o n   c l i e n t   c o n f i g u r a t i o n s


Question: What is TracingConfiguration?

Answer: T r a c i n g C o n f i g u r a t i o n   p r o v i d e s   v e r s i o n e d   c o n f i g u r a t i o n   f o r   t r a c i n g   c l i e n t s .   E m b e d   t h e   c o m p o n e n t   c o n f i g   t r a c i n g   c o n f i g u r a t i o n   s t r u c t


Question: What is AnonymousAuthCondition?

Answer: A p p e a r s   i n :   A n o n y m o u s A u t h C o n f i g   A n o n y m o u s A u t h C o n d i t i o n   d e s c r i b e s   t h e   c o n d i t i o n   u n d e r   w h i c h   a n o n y m o u s   a u t h   s h o u l d   b e   e n a b l e d .   P a t h   f o r   w h i c h   a n o n y m o u s   a u t h   i s   e n a b l e d .


Question: What is AnonymousAuthConfig?

Answer: A p p e a r s   i n :   A u t h e n t i c a t i o n C o n f i g u r a t i o n   A n o n y m o u s A u t h C o n f i g   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   t h e   a n o n y m o u s   a u t h e n t i c a t o r .   I f   s e t ,   a n o n y m o u s   a u t h   i s   o n l y   a l l o w e d   i f   t h e   r e q u e s t   m e e t s   o n e   o f   t h e   c o n d i t i o n s .


Question: What is AudienceMatchPolicyType?

Answer: ( A l i a s   o f   s t r i n g )   A p p e a r s   i n :   I s s u e r   A u d i e n c e M a t c h P o l i c y T y p e   i s   a   s e t   o f   v a l i d   v a l u e s   f o r   i s s u e r . a u d i e n c e M a t c h P o l i c y


Question: What is AuthorizerConfiguration?

Answer: A p p e a r s   i n :   A u t h o r i z a t i o n C o n f i g u r a t i o n   T y p e   r e f e r s   t o   t h e   t y p e   o f   t h e   a u t h o r i z e r   " W e b h o o k "   i s   s u p p o r t e d   i n   t h e   g e n e r i c   A P I   s e r v e r   O t h e r   A P I   s e r v e r s   m a y   s u p p o r t   a d d i t i o n a l   a u t h o r i z e r   t y p e s   l i k e   N o d e ,   R B A C ,   A B A C ,   e t c .   N a m e   u s e d   t o   d e s c r i b e   t h e   w e b h o o k   T h i s   i s   e x p l i c i t l y   u s e d   i n   m o n i t o r i n g   m a c h i n e r y   f o r   m e t r i c s   N o t e :   N a m e s   m u s t   b e   D N S 1 1 2 3   l a b e l s   l i k e   m y a u t h o r i z e r n a m e   o r   s u b d o m a i n s   l i k e   m y a u t h o r i z e r . e x a m p l e . d o m a i n   R e q u i r e d ,   w i t h   n o   d e f a u l t   W e b h o o k   d e f i n e s   t h e   c o n f i g u r a t i o n   f o r   a   W e b h o o k   a u t h o r i z e r   M u s t   b e   d e f i n e d   w h e n   T y p e = W e b h o o k   M u s t   n o t   b e   d e f i n e d   w h e n   T y p e ! = W e b h o o k


Question: What is ClaimMappings?

Answer: A p p e a r s   i n :   J W T A u t h e n t i c a t o r   C l a i m M a p p i n g s   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   c l a i m   m a p p i n g   u s e r n a m e   r e p r e s e n t s   a n   o p t i o n   f o r   t h e   u s e r n a m e   a t t r i b u t e .   T h e   c l a i m ' s   v a l u e   m u s t   b e   a   s i n g u l a r   s t r i n g .   S a m e   a s   t h e   - - o i d c - u s e r n a m e - c l a i m   a n d   - - o i d c - u s e r n a m e - p r e f i x   f l a g s .   I f   u s e r n a m e . e x p r e s s i o n   i s   s e t ,   t h e   e x p r e s s i o n   m u s t   p r o d u c e   a   s t r i n g   v a l u e .   I f   u s e r n a m e . e x p r e s s i o n   u s e s   ' c l a i m s . e m a i l ' ,   t h e n   ' c l a i m s . e m a i l _ v e r i f i e d '   m u s t   b e   u s e d   i n   u s e r n a m e . e x p r e s s i o n   o r   e x t r a [ * ] . v a l u e E x p r e s s i o n   o r   c l a i m V a l i d a t i o n R u l e s [ * ] . e x p r e s s i o n .   A n   e x a m p l e   c l a i m   v a l i d a t i o n   r u l e   e x p r e s s i o n   t h a t   m a t c h e s   t h e   v a l i d a t i o n   a u t o m a t i c a l l y   a p p l i e d   w h e n   u s e r n a m e . c l a i m   i s   s e t   t o   ' e m a i l '   i s   ' c l a i m s . ? e m a i l _ v e r i f i e d . o r V a l u e ( t r u e )   = =   t r u e ' .   B y   e x p l i c i t l y   c o m p a r i n g   t h e   v a l u e   t o   t r u e ,   w e   l e t   t y p e - c h e c k i n g   s e e   t h e   r e s u l t   w i l l   b e   a   b o o l e a n ,   a n d   t o   m a k e   s u r e   a   n o n - b o o l e a n   e m a i l _ v e r i f i e d   c l a i m   w i l l   b e   c a u g h t   a t   r u n t i m e .   I n   t h e   f l a g   b a s e d   a p p r o a c h ,   t h e   - - o i d c - u s e r n a m e - c l a i m   a n d   - - o i d c - u s e r n a m e - p r e f i x   a r e   o p t i o n a l .   I f   - - o i d c - u s e r n a m e - c l a i m   i s   n o t   s e t


Question: What is ClaimOrExpression?

Answer: A p p e a r s   i n :   C l a i m M a p p i n g s   C l a i m O r E x p r e s s i o n   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   c l a i m   o r   e x p r e s s i o n .   c l a i m   i s   t h e   J W T   c l a i m   t o   u s e .   E i t h e r   c l a i m   o r   e x p r e s s i o n   m u s t   b e   s e t .   M u t u a l l y   e x c l u s i v e   w i t h   e x p r e s s i o n .   e x p r e s s i o n   r e p r e s e n t s   t h e   e x p r e s s i o n   w h i c h   w i l l   b e   e v a l u a t e d   b y   C E L .   C E L   e x p r e s s i o n s   h a v e   a c c e s s   t o   t h e   c o n t e n t s   o f   t h e   t o k e n   c l a i m s ,   o r g a n i z e d   i n t o   C E L   v a r i a b l e :   ' c l a i m s '   i s   a   m a p   o f   c l a i m   n a m e s   t o   c l a i m   v a l u e s .   F o r   e x a m p l e ,   a   v a r i a b l e   n a m e d   ' s u b '   c a n   b e   a c c e s s e d   a s   ' c l a i m s . s u b ' .   N e s t e d   c l a i m s   c a n   b e   a c c e s s e d   u s i n g   d o t   n o t a t i o n ,   e . g .   ' c l a i m s . f o o . b a r ' .   D o c u m e n t a t i o n   o n   C E L :   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / u s i n g - a p i / c e l /   M u t u a l l y   e x c l u s i v e   w i t h   c l a i m .


Question: What is ClaimValidationRule?

Answer: A p p e a r s   i n :   J W T A u t h e n t i c a t o r   C l a i m V a l i d a t i o n R u l e   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   c l a i m   v a l i d a t i o n   r u l e .   c l a i m   i s   t h e   n a m e   o f   a   r e q u i r e d   c l a i m .   S a m e   a s   - - o i d c - r e q u i r e d - c l a i m   f l a g .   O n l y   s t r i n g   c l a i m   k e y s   a r e   s u p p o r t e d .   M u t u a l l y   e x c l u s i v e   w i t h   e x p r e s s i o n   a n d   m e s s a g e .   r e q u i r e d V a l u e   i s   t h e   v a l u e   o f   a   r e q u i r e d   c l a i m .   S a m e   a s   - - o i d c - r e q u i r e d - c l a i m   f l a g .   O n l y   s t r i n g   c l a i m   v a l u e s   a r e   s u p p o r t e d .   I f   c l a i m   i s   s e t   a n d   r e q u i r e d V a l u e   i s   n o t   s e t ,   t h e   c l a i m   m u s t   b e   p r e s e n t   w i t h   a   v a l u e   s e t   t o   t h e   e m p t y   s t r i n g .   M u t u a l l y   e x c l u s i v e   w i t h   e x p r e s s i o n   a n d   m e s s a g e .   e x p r e s s i o n   r e p r e s e n t s   t h e   e x p r e s s i o n   w h i c h   w i l l   b e   e v a l u a t e d   b y   C E L .   M u s t   p r o d u c e   a   b o o l e a n .   C E L   e x p r e s s i o n s   h a v e   a c c e s s   t o   t h e   c o n t e n t s   o f   t h e   t o k e n   c l a i m s ,   o r g a n i z e d   i n t o   C E L   v a r i a b l e :   ' c l a i m s '   i s   a   m a p   o f   c l a i m   n a m e s   t o   c l a i m   v a l u e s .   F o r   e x a m p l e ,   a   v a r i a b l e   n a m e d   ' s u b '   c a n   b e   a c c e s s e d   a s   ' c l a i m s . s u b ' .   N e s t e d   c l a i m s   c a n   b e   a c c e s s e d   u s i n g   d o t   n o t a t i o n ,   e . g .   ' c l a i m s . f o o . b a r ' .   M u s t   r e t u r n   t r u e   f o r   t h e   v a l i d a t i o n   t o   p a s s .   D o c u m e n t a t i o n   o n   C E L :


Question: What is Connection?

Answer: A p p e a r s   i n :   E g r e s s S e l e c t i o n   C o n n e c t i o n   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   e g r e s s   s e l e c t i o n   c l i e n t .   P r o t o c o l   i s   t h e   p r o t o c o l   u s e d   t o   c o n n e c t   f r o m   c l i e n t   t o   t h e   k o n n e c t i v i t y   s e r v e r .   T r a n s p o r t   d e f i n e s   t h e   t r a n s p o r t   c o n f i g u r a t i o n s   w e   u s e   t o   d i a l   t o   t h e   k o n n e c t i v i t y   s e r v e r .   T h i s   i s   r e q u i r e d   i f   P r o x y P r o t o c o l   i s   H T T P C o n n e c t   o r   G R P C .


Question: What is EgressSelection?

Answer: A p p e a r s   i n :   E g r e s s S e l e c t o r C o n f i g u r a t i o n   E g r e s s S e l e c t i o n   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   e g r e s s   s e l e c t i o n   c l i e n t .   n a m e   i s   t h e   n a m e   o f   t h e   e g r e s s   s e l e c t i o n .   C u r r e n t l y   s u p p o r t e d   v a l u e s   a r e   " c o n t r o l p l a n e " ,   " m a s t e r " ,   " e t c d "   a n d   " c l u s t e r "   T h e   " m a s t e r "   e g r e s s   s e l e c t o r   i s   d e p r e c a t e d   i n   f a v o r   o f   " c o n t r o l p l a n e "   c o n n e c t i o n   i s   t h e   e x a c t   i n f o r m a t i o n   u s e d   t o   c o n f i g u r e   t h e   e g r e s s   s e l e c t i o n


Question: What is ExtraMapping?

Answer: A p p e a r s   i n :   C l a i m M a p p i n g s   E x t r a M a p p i n g   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   e x t r a   m a p p i n g .   k e y   i s   a   s t r i n g   t o   u s e   a s   t h e   e x t r a   a t t r i b u t e   k e y .   k e y   m u s t   b e   a   d o m a i n - p r e f i x   p a t h   ( e . g .   e x a m p l e . o r g / f o o ) .   A l l   c h a r a c t e r s   b e f o r e   t h e   f i r s t   " / "   m u s t   b e   a   v a l i d   s u b d o m a i n   a s   d e f i n e d   b y   R F C   1 1 2 3 .   A l l   c h a r a c t e r s   t r a i l i n g   t h e   f i r s t   " / "   m u s t   b e   v a l i d   H T T P   P a t h   c h a r a c t e r s   a s   d e f i n e d   b y   R F C   3 9 8 6 .   k e y   m u s t   b e   l o w e r c a s e .   R e q u i r e d   t o   b e   u n i q u e .   v a l u e E x p r e s s i o n   i s   a   C E L   e x p r e s s i o n   t o   e x t r a c t   e x t r a   a t t r i b u t e   v a l u e .   v a l u e E x p r e s s i o n   m u s t   p r o d u c e   a   s t r i n g   o r   s t r i n g   a r r a y   v a l u e .   " " ,   [ ] ,   a n d   n u l l   v a l u e s   a r e   t r e a t e d   a s   t h e   e x t r a   m a p p i n g   n o t   b e i n g   p r e s e n t .   E m p t y   s t r i n g   v a l u e s   c o n t a i n e d   w i t h i n   a   s t r i n g   a r r a y   a r e   f i l t e r e d   o u t .   C E L   e x p r e s s i o n s   h a v e   a c c e s s   t o   t h e   c o n t e n t s   o f   t h e   t o k e n   c l a i m s ,   o r g a n i z e d   i n t o   C E L   v a r i a b l e :   ' c l a i m s '   i s   a   m a p   o f   c l a i m   n a m e s   t o   c l a i m   v a l u e s .   F o r   e x a m p l e ,   a   v a r i a b l e   n a m e d   ' s u b '   c a n   b e   a c c e s s e d   a s   ' c l a i m s . s u b ' .   N e s t e d   c l a i m s   c a n   b e   a c c e s s e d   u s i n g   d o t   n o t a t i o n ,   e . g .   ' c l a i m s . f o o . b a r ' .   D o c u m e


Question: What is Issuer?

Answer: A p p e a r s   i n :   J W T A u t h e n t i c a t o r   I s s u e r   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a n   e x t e r n a l   p r o v i d e r ' s   s p e c i f i c   s e t t i n g s .   u r l   p o i n t s   t o   t h e   i s s u e r   U R L   i n   a   f o r m a t   h t t p s : / / u r l   o r   h t t p s : / / u r l / p a t h .   T h i s   m u s t   m a t c h   t h e   " i s s "   c l a i m   i n   t h e   p r e s e n t e d   J W T ,   a n d   t h e   i s s u e r   r e t u r n e d   f r o m   d i s c o v e r y .   S a m e   v a l u e   a s   t h e   - - o i d c - i s s u e r - u r l   f l a g .   D i s c o v e r y   i n f o r m a t i o n   i s   f e t c h e d   f r o m   " { u r l } / . w e l l - k n o w n / o p e n i d - c o n f i g u r a t i o n "   u n l e s s   o v e r r i d d e n   b y   d i s c o v e r y U R L .   R e q u i r e d   t o   b e   u n i q u e   a c r o s s   a l l   J W T   a u t h e n t i c a t o r s .   N o t e   t h a t   e g r e s s   s e l e c t i o n   c o n f i g u r a t i o n   i s   n o t   u s e d   f o r   t h i s   n e t w o r k   c o n n e c t i o n .   d i s c o v e r y U R L ,   i f   s p e c i f i e d ,   o v e r r i d e s   t h e   U R L   u s e d   t o   f e t c h   d i s c o v e r y   i n f o r m a t i o n   i n s t e a d   o f   u s i n g   " { u r l } / . w e l l - k n o w n / o p e n i d - c o n f i g u r a t i o n " .   T h e   e x a c t   v a l u e   s p e c i f i e d   i s   u s e d ,   s o   " / . w e l l - k n o w n / o p e n i d - c o n f i g u r a t i o n "   m u s t   b e   i n c l u d e d   i n   d i s c o v e r y U R L   i f   n e e d e d .   T h e   " i s s u e r "   f i e l d   i n   t h e   f e t c h e d   d i s c o v e r y   i n f o r m a t i o n   m u s t   m a t c h   t h e   " i s s u e r . u r l "   f i e l d   i n   t h e   A u t h e n t i c a t i o n C o n f i g u r a t i o n   a n d   w i l l   b e   u s e d   t o   v a l i d a t e   t h e   " i s s "   c l a i m   i n


Question: What is JWTAuthenticator?

Answer: A p p e a r s   i n :   A u t h e n t i c a t i o n C o n f i g u r a t i o n   J W T A u t h e n t i c a t o r   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   J W T   a u t h e n t i c a t o r .   i s s u e r   c o n t a i n s   t h e   b a s i c   O I D C   p r o v i d e r   c o n n e c t i o n   o p t i o n s .   c l a i m V a l i d a t i o n R u l e s   a r e   r u l e s   t h a t   a r e   a p p l i e d   t o   v a l i d a t e   t o k e n   c l a i m s   t o   a u t h e n t i c a t e   u s e r s .   c l a i m M a p p i n g s   p o i n t s   c l a i m s   o f   a   t o k e n   t o   b e   t r e a t e d   a s   u s e r   a t t r i b u t e s .   u s e r V a l i d a t i o n R u l e s   a r e   r u l e s   t h a t   a r e   a p p l i e d   t o   f i n a l   u s e r   b e f o r e   c o m p l e t i n g   a u t h e n t i c a t i o n .   T h e s e   a l l o w   i n v a r i a n t s   t o   b e   a p p l i e d   t o   i n c o m i n g   i d e n t i t i e s   s u c h   a s   p r e v e n t i n g   t h e   u s e   o f   t h e   s y s t e m :   p r e f i x   t h a t   i s   c o m m o n l y   u s e d   b y   K u b e r n e t e s   c o m p o n e n t s .   T h e   v a l i d a t i o n   r u l e s   a r e   l o g i c a l l y   A N D e d   t o g e t h e r   a n d   m u s t   a l l   r e t u r n   t r u e   f o r   t h e   v a l i d a t i o n   t o   p a s s .


Question: What is PrefixedClaimOrExpression?

Answer: A p p e a r s   i n :   C l a i m M a p p i n g s   P r e f i x e d C l a i m O r E x p r e s s i o n   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   p r e f i x e d   c l a i m   o r   e x p r e s s i o n .   c l a i m   i s   t h e   J W T   c l a i m   t o   u s e .   M u t u a l l y   e x c l u s i v e   w i t h   e x p r e s s i o n .   p r e f i x   i s   p r e p e n d e d   t o   c l a i m ' s   v a l u e   t o   p r e v e n t   c l a s h e s   w i t h   e x i s t i n g   n a m e s .   p r e f i x   n e e d s   t o   b e   s e t   i f   c l a i m   i s   s e t   a n d   c a n   b e   t h e   e m p t y   s t r i n g .   M u t u a l l y   e x c l u s i v e   w i t h   e x p r e s s i o n .   e x p r e s s i o n   r e p r e s e n t s   t h e   e x p r e s s i o n   w h i c h   w i l l   b e   e v a l u a t e d   b y   C E L .   C E L   e x p r e s s i o n s   h a v e   a c c e s s   t o   t h e   c o n t e n t s   o f   t h e   t o k e n   c l a i m s ,   o r g a n i z e d   i n t o   C E L   v a r i a b l e :   ' c l a i m s '   i s   a   m a p   o f   c l a i m   n a m e s   t o   c l a i m   v a l u e s .   F o r   e x a m p l e ,   a   v a r i a b l e   n a m e d   ' s u b '   c a n   b e   a c c e s s e d   a s   ' c l a i m s . s u b ' .   N e s t e d   c l a i m s   c a n   b e   a c c e s s e d   u s i n g   d o t   n o t a t i o n ,   e . g .   ' c l a i m s . f o o . b a r ' .   D o c u m e n t a t i o n   o n   C E L :   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / u s i n g - a p i / c e l /   M u t u a l l y   e x c l u s i v e   w i t h   c l a i m   a n d   p r e f i x .


Question: What is ProtocolType?

Answer: ( A l i a s   o f   s t r i n g )   A p p e a r s   i n :   C o n n e c t i o n   P r o t o c o l T y p e   i s   a   s e t   o f   v a l i d   v a l u e s   f o r   C o n n e c t i o n . P r o t o c o l T y p e


Question: What is TCPTransport?

Answer: A p p e a r s   i n :   T r a n s p o r t   T C P T r a n s p o r t   p r o v i d e s   t h e   i n f o r m a t i o n   t o   c o n n e c t   t o   k o n n e c t i v i t y   s e r v e r   v i a   T C P   U R L   i s   t h e   l o c a t i o n   o f   t h e   k o n n e c t i v i t y   s e r v e r   t o   c o n n e c t   t o .   A s   a n   e x a m p l e   i t   m i g h t   b e   " h t t p s : / / 1 2 7 . 0 . 0 . 1 : 8 1 3 1 "   T L S C o n f i g   i s   t h e   c o n f i g   n e e d e d   t o   u s e   T L S   w h e n   c o n n e c t i n g   t o   k o n n e c t i v i t y   s e r v e r


Question: What is TLSConfig?

Answer: A p p e a r s   i n :   T C P T r a n s p o r t   T L S C o n f i g   p r o v i d e s   t h e   a u t h e n t i c a t i o n   i n f o r m a t i o n   t o   c o n n e c t   t o   k o n n e c t i v i t y   s e r v e r   O n l y   u s e d   w i t h   T C P T r a n s p o r t   c a B u n d l e   i s   t h e   f i l e   l o c a t i o n   o f   t h e   C A   t o   b e   u s e d   t o   d e t e r m i n e   t r u s t   w i t h   t h e   k o n n e c t i v i t y   s e r v e r .   M u s t   b e   a b s e n t / e m p t y   i f   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p : / /   I f   a b s e n t   w h i l e   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p s : / / ,   d e f a u l t   t o   s y s t e m   t r u s t   r o o t s .   c l i e n t K e y   i s   t h e   f i l e   l o c a t i o n   o f   t h e   c l i e n t   k e y   t o   b e   u s e d   i n   m t l s   h a n d s h a k e s   w i t h   t h e   k o n n e c t i v i t y   s e r v e r .   M u s t   b e   a b s e n t / e m p t y   i f   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p : / /   M u s t   b e   c o n f i g u r e d   i f   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p s : / /   c l i e n t C e r t   i s   t h e   f i l e   l o c a t i o n   o f   t h e   c l i e n t   c e r t i f i c a t e   t o   b e   u s e d   i n   m t l s   h a n d s h a k e s   w i t h   t h e   k o n n e c t i v i t y   s e r v e r .   M u s t   b e   a b s e n t / e m p t y   i f   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p : / /   M u s t   b e   c o n f i g u r e d   i f   T C P T r a n s p o r t . U R L   i s   p r e f i x e d   w i t h   h t t p s : / /


Question: What is Transport?

Answer: A p p e a r s   i n :   C o n n e c t i o n   T r a n s p o r t   d e f i n e s   t h e   t r a n s p o r t   c o n f i g u r a t i o n s   w e   u s e   t o   d i a l   t o   t h e   k o n n e c t i v i t y   s e r v e r   T C P   i s   t h e   T C P   c o n f i g u r a t i o n   f o r   c o m m u n i c a t i n g   w i t h   t h e   k o n n e c t i v i t y   s e r v e r   v i a   T C P   P r o x y P r o t o c o l   o f   G R P C   i s   n o t   s u p p o r t e d   w i t h   T C P   t r a n s p o r t   a t   t h e   m o m e n t   R e q u i r e s   a t   l e a s t   o n e   o f   T C P   o r   U D S   t o   b e   s e t   U D S   i s   t h e   U D S   c o n f i g u r a t i o n   f o r   c o m m u n i c a t i n g   w i t h   t h e   k o n n e c t i v i t y   s e r v e r   v i a   U D S   R e q u i r e s   a t   l e a s t   o n e   o f   T C P   o r   U D S   t o   b e   s e t


Question: What is UDSTransport?

Answer: A p p e a r s   i n :   T r a n s p o r t   U D S T r a n s p o r t   p r o v i d e s   t h e   i n f o r m a t i o n   t o   c o n n e c t   t o   k o n n e c t i v i t y   s e r v e r   v i a   U D S   U D S N a m e   i s   t h e   n a m e   o f   t h e   u n i x   d o m a i n   s o c k e t   t o   c o n n e c t   t o   k o n n e c t i v i t y   s e r v e r   T h i s   d o e s   n o t   u s e   a   u n i x : / /   p r e f i x .   ( E g :   / e t c / s r v / k u b e r n e t e s / k o n n e c t i v i t y - s e r v e r / k o n n e c t i v i t y - s e r v e r . s o c k e t )


Question: What is UserValidationRule?

Answer: A p p e a r s   i n :   J W T A u t h e n t i c a t o r   U s e r V a l i d a t i o n R u l e   p r o v i d e s   t h e   c o n f i g u r a t i o n   f o r   a   s i n g l e   u s e r   i n f o   v a l i d a t i o n   r u l e .   e x p r e s s i o n   r e p r e s e n t s   t h e   e x p r e s s i o n   w h i c h   w i l l   b e   e v a l u a t e d   b y   C E L .   M u s t   r e t u r n   t r u e   f o r   t h e   v a l i d a t i o n   t o   p a s s .   C E L   e x p r e s s i o n s   h a v e   a c c e s s   t o   t h e   c o n t e n t s   o f   U s e r I n f o ,   o r g a n i z e d   i n t o   C E L   v a r i a b l e :   ' u s e r '   -   a u t h e n t i c a t i o n . k 8 s . i o / v 1 ,   K i n d = U s e r I n f o   o b j e c t   R e f e r   t o   h t t p s : / / g i t h u b . c o m / k u b e r n e t e s / a p i / b l o b / r e l e a s e - 1 . 2 8 / a u t h e n t i c a t i o n / v 1 / t y p e s . g o # L 1 0 5 - L 1 2 2   f o r   t h e   d e f i n i t i o n .   A P I   d o c u m e n t a t i o n :   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / g e n e r a t e d / k u b e r n e t e s - a p i / v 1 . 2 8 / # u s e r i n f o - v 1 - a u t h e n t i c a t i o n - k 8 s - i o   D o c u m e n t a t i o n   o n   C E L :   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / u s i n g - a p i / c e l /   m e s s a g e   c u s t o m i z e s   t h e   r e t u r n e d   e r r o r   m e s s a g e   w h e n   r u l e   r e t u r n s   f a l s e .   m e s s a g e   i s   a   l i t e r a l   s t r i n g .