Question: How does Configure Service Accounts for Pods work?

Answer: Configure Service Accounts for PodsKubernetes offers two distinct ways for clients that run within your cluster, or that otherwise have a relationship to your cluster's control plane to authenticate to the API server.A service account provides an identity for processes that run in a Pod, and maps to a ServiceAccount object. When you authenticate to the API server, you identify yourself as a particular user. Kubernetes recognises the concept of a user, however, Kubernetes itself does not have a User API.This task guide is about ServiceAccounts, which do exist in the Kubernetes API. The guide shows you some ways to configure ServiceAccounts for Pods.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesUse the default service account to access the API serverWhen Pods contact the API server, Pods authenticate as a particular ServiceAccount (for example, default). There is always at least one ServiceAccount in each namespace.Every Kubernetes namespace contains at least one ServiceAccount: the default ServiceAccount for that namespace, named default. If you do not specify a ServiceAccount when you create a Pod, Kubernetes automatically assigns the ServiceAccount named default in that namespace.You can fetch the details for a Pod you have created. For example:kubectl get pods/<podname> -o yaml In the output, you see a field spec.serviceAccountName. Kubernetes automatically sets that value if you don't specify it when you create a Pod.An application running inside a Pod can access the Kubernetes API using automatically mounted service account credentials. See accessing the Cluster to learn more.When a Pod authenticates as a ServiceAccount, its level of access depends on the authorization plugin and policy in use.The API credentials are automatically revoked when the Pod is deleted, even if finalizers are in place. In particular, the API credentials are revoked 60 seconds beyond the .metadata.deletionTimestamp set on the Pod (the deletion timestamp is typically the time that the delete request was accepted plus the Pod's termination grace period).Opt out of API credential automountingIf you don't want the kubelet to automatically mount a ServiceAccount's API credentials, you can opt out of the default behavior. You can opt out of automounting API credentials on /var/run/secrets/kubernetes.io/serviceaccount/token for a service account by setting automountServiceAccountToken: false on the ServiceAccount:For example:apiVersion: v1 kind: ServiceAccount metadata: name: build-robot automountServiceAccountToken: false ... You can also opt out of automounting API credentials for a par


Question: When would you use Configure Service Accounts for Pods?

Answer: Configure Service Accounts for PodsKubernetes offers two distinct ways for clients that run within your cluster, or that otherwise have a relationship to your cluster's control plane to authenticate to the API server.A service account provides an identity for processes that run in a Pod, and maps to a ServiceAccount object. When you authenticate to the API server, you identify yourself as a particular user. Kubernetes recognises the concept of a user, however, Kubernetes itself does not have a User API.This task guide is about ServiceAccounts, which do exist in the Kubernetes API. The guide shows you some ways to configure ServiceAccounts for Pods.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesUse the default service account to access the API serverWhen Pods contact the API server, Pods authenticate as a particular ServiceAccount (for example, default). There is always at least one ServiceAccount in each namespace.Every Kubernetes namespace contains at least one ServiceAccount: the default ServiceAccount for that namespace, named default. If you do not specify a ServiceAccount when you create a Pod, Kubernetes automatically assigns the ServiceAccount named default in that namespace.You can fetch the details for a Pod you have created. For example:kubectl get pods/<podname> -o yaml In the output, you see a field spec.serviceAccountName. Kubernetes automatically sets that value if you don't specify it when you create a Pod.An application running inside a Pod can access the Kubernetes API using automatically mounted service account credentials. See accessing the Cluster to learn more.When a Pod authenticates as a ServiceAccount, its level of access depends on the authorization plugin and policy in use.The API credentials are automatically revoked when the Pod is deleted, even if finalizers are in place. In particular, the API credentials are revoked 60 seconds beyond the .metadata.deletionTimestamp set on the Pod (the deletion timestamp is typically the time that the delete request was accepted plus the Pod's termination grace period).Opt out of API credential automountingIf you don't want the kubelet to automatically mount a ServiceAccount's API credentials, you can opt out of the default behavior. You can opt out of automounting API credentials on /var/run/secrets/kubernetes.io/serviceaccount/token for a service account by setting automountServiceAccountToken: false on the ServiceAccount:For example:apiVersion: v1 kind: ServiceAccount metadata: name: build-robot automountServiceAccountToken: false ... You can also opt out of automounting API credentials for a par


Question: What are the benefits of Configure Service Accounts for Pods?

Answer: Configure Service Accounts for PodsKubernetes offers two distinct ways for clients that run within your cluster, or that otherwise have a relationship to your cluster's control plane to authenticate to the API server.A service account provides an identity for processes that run in a Pod, and maps to a ServiceAccount object. When you authenticate to the API server, you identify yourself as a particular user. Kubernetes recognises the concept of a user, however, Kubernetes itself does not have a User API.This task guide is about ServiceAccounts, which do exist in the Kubernetes API. The guide shows you some ways to configure ServiceAccounts for Pods.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesUse the default service account to access the API serverWhen Pods contact the API server, Pods authenticate as a particular ServiceAccount (for example, default). There is always at least one ServiceAccount in each namespace.Every Kubernetes namespace contains at least one ServiceAccount: the default ServiceAccount for that namespace, named default. If you do not specify a ServiceAccount when you create a Pod, Kubernetes automatically assigns the ServiceAccount named default in that namespace.You can fetch the details for a Pod you have created. For example:kubectl get pods/<podname> -o yaml In the output, you see a field spec.serviceAccountName. Kubernetes automatically sets that value if you don't specify it when you create a Pod.An application running inside a Pod can access the Kubernetes API using automatically mounted service account credentials. See accessing the Cluster to learn more.When a Pod authenticates as a ServiceAccount, its level of access depends on the authorization plugin and policy in use.The API credentials are automatically revoked when the Pod is deleted, even if finalizers are in place. In particular, the API credentials are revoked 60 seconds beyond the .metadata.deletionTimestamp set on the Pod (the deletion timestamp is typically the time that the delete request was accepted plus the Pod's termination grace period).Opt out of API credential automountingIf you don't want the kubelet to automatically mount a ServiceAccount's API credentials, you can opt out of the default behavior. You can opt out of automounting API credentials on /var/run/secrets/kubernetes.io/serviceaccount/token for a service account by setting automountServiceAccountToken: false on the ServiceAccount:For example:apiVersion: v1 kind: ServiceAccount metadata: name: build-robot automountServiceAccountToken: false ... You can also opt out of automounting API credentials for a par


Question: What is Configure Service Accounts for Pods?

Answer: K u b e r n e t e s   o f f e r s   t w o   d i s t i n c t   w a y s   f o r   c l i e n t s   t h a t   r u n   w i t h i n   y o u r   c l u s t e r ,   o r   t h a t   o t h e r w i s e   h a v e   a   r e l a t i o n s h i p   t o   y o u r   c l u s t e r ' s   c o n t r o l   p l a n e   t o   a u t h e n t i c a t e   t o   t h e   A P I   s e r v e r .   A   s e r v i c e   a c c o u n t   p r o v i d e s   a n   i d e n t i t y   f o r   p r o c e s s e s   t h a t   r u n   i n   a   P o d ,   a n d   m a p s   t o   a   S e r v i c e A c c o u n t   o b j e c t .   W h e n   y o u   a u t h e n t i c a t e   t o   t h e   A P I   s e r v e r ,   y o u   i d e n t i f y   y o u r s e l f   a s   a   p a r t i c u l a r   u s e r .   K u b e r n e t e s   r e c o g n i s e s   t h e   c o n c e p t   o f   a   u s e r ,   h o w e v e r ,   K u b e r n e t e s   i t s e l f   d o e s   n o t   h a v e   a   U s e r   A P I .   T h i s   t a s k   g u i d e   i s   a b o u t   S e r v i c e A c c o u n t s ,   w h i c h   d o   e x i s t   i n   t h e   K u b e r n e t e s   A P I .   T h e   g u i d e   s h o w s   y o u   s o m e   w a y s   t o   c o n f i g u r e   S e r v i c e A c c o u n t s   f o r   P o d s .


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s :   i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s


Question: What is Use the default service account to access the API server?

Answer: W h e n   P o d s   c o n t a c t   t h e   A P I   s e r v e r ,   P o d s   a u t h e n t i c a t e   a s   a   p a r t i c u l a r   S e r v i c e A c c o u n t   ( f o r   e x a m p l e ,   d e f a u l t ) .   T h e r e   i s   a l w a y s   a t   l e a s t   o n e   S e r v i c e A c c o u n t   i n   e a c h   n a m e s p a c e .   E v e r y   K u b e r n e t e s   n a m e s p a c e   c o n t a i n s   a t   l e a s t   o n e   S e r v i c e A c c o u n t :   t h e   d e f a u l t   S e r v i c e A c c o u n t   f o r   t h a t   n a m e s p a c e ,   n a m e d   d e f a u l t .   I f   y o u   d o   n o t   s p e c i f y   a   S e r v i c e A c c o u n t   w h e n   y o u   c r e a t e   a   P o d ,   K u b e r n e t e s   a u t o m a t i c a l l y   a s s i g n s   t h e   S e r v i c e A c c o u n t   n a m e d   d e f a u l t   i n   t h a t   n a m e s p a c e .   Y o u   c a n   f e t c h   t h e   d e t a i l s   f o r   a   P o d   y o u   h a v e   c r e a t e d .   F o r   e x a m p l e :   k u b e c t l   g e t   p o d s / < p o d n a m e >   - o   y a m l   I n   t h e   o u t p u t ,   y o u   s e e   a   f i e l d   s p e c . s e r v i c e A c c o u n t N a m e .   K u b e r n e t e s   a u t o m a t i c a l l y   s e t s   t h a t   v a l u e   i f   y o u   d o n ' t   s p e c i f y   i t   w h e n   y o u   c r e a t e   a   P o d .   A n   a p p l i c a t i o n   r u n n i n g   i n s i d e   a   P o d   c a n   a c c e s s   t h e   K u b e r n e t e s   A P I   u s i n g   a u t o m a t i c a l l y   m o u n t e d   s e r v i c e   a c c o u n t   c r e d e n t i a l s .   S e e   a c c e s s i n g   t h e   C l u s t e r   t o   l e a r n   m o r e .   W h e n   a   P o d   a u t h e n t i c a t e s   a s   a   S e r v i c e A c c o u n t ,   i t s   l e v e l   o f   a c c e s s   d e p e n d s   o n   t h e   a u t h o r i z a t i o n   p l u g i n   a n d   p o l i c y   i n   u s e .   T h e   A P I   c r e d e n t i a l s   a r e   a


Question: What is Opt out of API credential automounting?

Answer: I f   y o u   d o n ' t   w a n t   t h e   k u b e l e t   t o   a u t o m a t i c a l l y   m o u n t   a   S e r v i c e A c c o u n t ' s   A P I   c r e d e n t i a l s ,   y o u   c a n   o p t   o u t   o f   t h e   d e f a u l t   b e h a v i o r .   Y o u   c a n   o p t   o u t   o f   a u t o m o u n t i n g   A P I   c r e d e n t i a l s   o n   / v a r / r u n / s e c r e t s / k u b e r n e t e s . i o / s e r v i c e a c c o u n t / t o k e n   f o r   a   s e r v i c e   a c c o u n t   b y   s e t t i n g   a u t o m o u n t S e r v i c e A c c o u n t T o k e n :   f a l s e   o n   t h e   S e r v i c e A c c o u n t :   F o r   e x a m p l e :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e A c c o u n t   m e t a d a t a :   n a m e :   b u i l d - r o b o t   a u t o m o u n t S e r v i c e A c c o u n t T o k e n :   f a l s e   . . .   Y o u   c a n   a l s o   o p t   o u t   o f   a u t o m o u n t i n g   A P I   c r e d e n t i a l s   f o r   a   p a r t i c u l a r   P o d :   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   m y - p o d   s p e c :   s e r v i c e A c c o u n t N a m e :   b u i l d - r o b o t   a u t o m o u n t S e r v i c e A c c o u n t T o k e n :   f a l s e   . . .   I f   b o t h   t h e   S e r v i c e A c c o u n t   a n d   t h e   P o d ' s   . s p e c   s p e c i f y   a   v a l u e   f o r   a u t o m o u n t S e r v i c e A c c o u n t T o k e n ,   t h e   P o d   s p e c   t a k e s   p r e c e d e n c e .


Question: What is Use more than one ServiceAccount?

Answer: E v e r y   n a m e s p a c e   h a s   a t   l e a s t   o n e   S e r v i c e A c c o u n t :   t h e   d e f a u l t   S e r v i c e A c c o u n t   r e s o u r c e ,   c a l l e d   d e f a u l t .   Y o u   c a n   l i s t   a l l   S e r v i c e A c c o u n t   r e s o u r c e s   i n   y o u r   c u r r e n t   n a m e s p a c e   w i t h :   k u b e c t l   g e t   s e r v i c e a c c o u n t s   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s :   N A M E   S E C R E T S   A G E   d e f a u l t   1   1 d   Y o u   c a n   c r e a t e   a d d i t i o n a l   S e r v i c e A c c o u n t   o b j e c t s   l i k e   t h i s :   k u b e c t l   a p p l y   - f   -   < < E O F   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e A c c o u n t   m e t a d a t a :   n a m e :   b u i l d - r o b o t   E O F   T h e   n a m e   o f   a   S e r v i c e A c c o u n t   o b j e c t   m u s t   b e   a   v a l i d   D N S   s u b d o m a i n   n a m e .   I f   y o u   g e t   a   c o m p l e t e   d u m p   o f   t h e   s e r v i c e   a c c o u n t   o b j e c t ,   l i k e   t h i s :   k u b e c t l   g e t   s e r v i c e a c c o u n t s / b u i l d - r o b o t   - o   y a m l   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e A c c o u n t   m e t a d a t a :   c r e a t i o n T i m e s t a m p :   2 0 1 9 - 0 6 - 1 6 T 0 0 : 1 2 : 3 4 Z   n a m e :   b u i l d - r o b o t   n a m e s p a c e :   d e f a u l t   r e s o u r c e V e r s i o n :   " 2 7 2 5 0 0 "   u i d :   7 2 1 a b 7 2 3 - 1 3 b c - 1 1 e 5 - a e c 2 - 4 2 0 1 0 a f 0 0 2 1 e   Y o u   c a n   u s e   a u t h o r i z a t i o n   p l u g i n s   t o   s e t   p e r m i s s i o n s   o n   s e r v i c e   a c c o u n t s .   T o   u s e   a   n o n - d e f a u l t   s e r v i c e   a c c o u n t ,   s e t   t h e   s p e c . s e r v i c e A c c o u n t N a m e   f i e l d   o f   a   P o d   t o   t h e   n a m e


Question: What is Cleanup?

Answer: I f   y o u   t r i e d   c r e a t i n g   b u i l d - r o b o t   S e r v i c e A c c o u n t   f r o m   t h e   e x a m p l e   a b o v e ,   y o u   c a n   c l e a n   i t   u p   b y   r u n n i n g :   k u b e c t l   d e l e t e   s e r v i c e a c c o u n t / b u i l d - r o b o t


Question: What is Manually create an API token for a ServiceAccount?

Answer: S u p p o s e   y o u   h a v e   a n   e x i s t i n g   s e r v i c e   a c c o u n t   n a m e d   " b u i l d - r o b o t "   a s   m e n t i o n e d   e a r l i e r .   Y o u   c a n   g e t   a   t i m e - l i m i t e d   A P I   t o k e n   f o r   t h a t   S e r v i c e A c c o u n t   u s i n g   k u b e c t l :   k u b e c t l   c r e a t e   t o k e n   b u i l d - r o b o t   T h e   o u t p u t   f r o m   t h a t   c o m m a n d   i s   a   t o k e n   t h a t   y o u   c a n   u s e   t o   a u t h e n t i c a t e   a s   t h a t   S e r v i c e A c c o u n t .   Y o u   c a n   r e q u e s t   a   s p e c i f i c   t o k e n   d u r a t i o n   u s i n g   t h e   - - d u r a t i o n   c o m m a n d   l i n e   a r g u m e n t   t o   k u b e c t l   c r e a t e   t o k e n   ( t h e   a c t u a l   d u r a t i o n   o f   t h e   i s s u e d   t o k e n   m i g h t   b e   s h o r t e r ,   o r   c o u l d   e v e n   b e   l o n g e r ) .   U s i n g   k u b e c t l   v 1 . 3 1   o r   l a t e r ,   i t   i s   p o s s i b l e   t o   c r e a t e   a   s e r v i c e   a c c o u n t   t o k e n   t h a t   i s   d i r e c t l y   b o u n d   t o   a   N o d e :   k u b e c t l   c r e a t e   t o k e n   b u i l d - r o b o t   - - b o u n d - o b j e c t - k i n d   N o d e   - - b o u n d - o b j e c t - n a m e   n o d e - 0 0 1   - - b o u n d - o b j e c t - u i d   1 2 3 . . . 4 5 6   T h e   t o k e n   w i l l   b e   v a l i d   u n t i l   i t   e x p i r e s   o r   e i t h e r   t h e   a s s o c i a t e d   N o d e   o r   s e r v i c e   a c c o u n t   a r e   d e l e t e d .


Question: What is Note:?

Answer: V e r s i o n s   o f   K u b e r n e t e s   b e f o r e   v 1 . 2 2   a u t o m a t i c a l l y   c r e a t e d   l o n g   t e r m   c r e d e n t i a l s   f o r   a c c e s s i n g   t h e   K u b e r n e t e s   A P I .   T h i s   o l d e r   m e c h a n i s m   w a s   b a s e d   o n   c r e a t i n g   t o k e n   S e c r e t s   t h a t   c o u l d   t h e n   b e   m o u n t e d   i n t o   r u n n i n g   P o d s .   I n   m o r e   r e c e n t   v e r s i o n s ,   i n c l u d i n g   K u b e r n e t e s   v 1 . 3 4 ,   A P I   c r e d e n t i a l s   a r e   o b t a i n e d   d i r e c t l y   b y   u s i n g   t h e   T o k e n R e q u e s t   A P I ,   a n d   a r e   m o u n t e d   i n t o   P o d s   u s i n g   a   p r o j e c t e d   v o l u m e .   T h e   t o k e n s   o b t a i n e d   u s i n g   t h i s   m e t h o d   h a v e   b o u n d e d   l i f e t i m e s ,   a n d   a r e   a u t o m a t i c a l l y   i n v a l i d a t e d   w h e n   t h e   P o d   t h e y   a r e   m o u n t e d   i n t o   i s   d e l e t e d .   Y o u   c a n   s t i l l   m a n u a l l y   c r e a t e   a   s e r v i c e   a c c o u n t   t o k e n   S e c r e t ;   f o r   e x a m p l e ,   i f   y o u   n e e d   a   t o k e n   t h a t   n e v e r   e x p i r e s .   H o w e v e r ,   u s i n g   t h e   T o k e n R e q u e s t   s u b r e s o u r c e   t o   o b t a i n   a   t o k e n   t o   a c c e s s   t h e   A P I   i s   r e c o m m e n d e d   i n s t e a d .


Question: What is Manually create a long-lived API token for a ServiceAccount?

Answer: I f   y o u   w a n t   t o   o b t a i n   a n   A P I   t o k e n   f o r   a   S e r v i c e A c c o u n t ,   y o u   c r e a t e   a   n e w   S e c r e t   w i t h   a   s p e c i a l   a n n o t a t i o n ,   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t . n a m e .   k u b e c t l   a p p l y   - f   -   < < E O F   a p i V e r s i o n :   v 1   k i n d :   S e c r e t   m e t a d a t a :   n a m e :   b u i l d - r o b o t - s e c r e t   a n n o t a t i o n s :   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t . n a m e :   b u i l d - r o b o t   t y p e :   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t - t o k e n   E O F   I f   y o u   v i e w   t h e   S e c r e t   u s i n g :   k u b e c t l   g e t   s e c r e t / b u i l d - r o b o t - s e c r e t   - o   y a m l   y o u   c a n   s e e   t h a t   t h e   S e c r e t   n o w   c o n t a i n s   a n   A P I   t o k e n   f o r   t h e   " b u i l d - r o b o t "   S e r v i c e A c c o u n t .   B e c a u s e   o f   t h e   a n n o t a t i o n   y o u   s e t ,   t h e   c o n t r o l   p l a n e   a u t o m a t i c a l l y   g e n e r a t e s   a   t o k e n   f o r   t h a t   S e r v i c e A c c o u n t s ,   a n d   s t o r e s   t h e m   i n t o   t h e   a s s o c i a t e d   S e c r e t .   T h e   c o n t r o l   p l a n e   a l s o   c l e a n s   u p   t o k e n s   f o r   d e l e t e d   S e r v i c e A c c o u n t s .   k u b e c t l   d e s c r i b e   s e c r e t s / b u i l d - r o b o t - s e c r e t   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s :   N a m e :   b u i l d - r o b o t - s e c r e t   N a m e s p a c e :   d e f a u l t   L a b e l s :   < n o n e >   A n n o t a t i o n s :   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t . n a m e :   b u i l d - r o b o t   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t . u i d :   d a 6 8 f 9 c 6 - 9 d 2 6 - 1 1 e 7 - b 8 4 e - 0 0 2 d c 5 2 8 0 0 d a   T y


Question: What is Note:?

Answer: T h e   c o n t e n t   o f   t o k e n   i s   o m i t t e d   h e r e .   T a k e   c a r e   n o t   t o   d i s p l a y   t h e   c o n t e n t s   o f   a   k u b e r n e t e s . i o / s e r v i c e - a c c o u n t - t o k e n   S e c r e t   s o m e w h e r e   t h a t   y o u r   t e r m i n a l   /   c o m p u t e r   s c r e e n   c o u l d   b e   s e e n   b y   a n   o n l o o k e r .   W h e n   y o u   d e l e t e   a   S e r v i c e A c c o u n t   t h a t   h a s   a n   a s s o c i a t e d   S e c r e t ,   t h e   K u b e r n e t e s   c o n t r o l   p l a n e   a u t o m a t i c a l l y   c l e a n s   u p   t h e   l o n g - l i v e d   t o k e n   f r o m   t h a t   S e c r e t .


Question: What is Note:?

Answer: I f   y o u   v i e w   t h e   S e r v i c e A c c o u n t   u s i n g :   k u b e c t l   g e t   s e r v i c e a c c o u n t   b u i l d - r o b o t   - o   y a m l   Y o u   c a n ' t   s e e   t h e   b u i l d - r o b o t - s e c r e t   S e c r e t   i n   t h e   S e r v i c e A c c o u n t   A P I   o b j e c t s   . s e c r e t s   f i e l d   b e c a u s e   t h a t   f i e l d   i s   o n l y   p o p u l a t e d   w i t h   a u t o - g e n e r a t e d   S e c r e t s .


Question: What is Add ImagePullSecrets to a service account?

Answer: F i r s t ,   c r e a t e   a n   i m a g e P u l l S e c r e t .   N e x t ,   v e r i f y   i t   h a s   b e e n   c r e a t e d .   F o r   e x a m p l e :   C r e a t e   a n   i m a g e P u l l S e c r e t ,   a s   d e s c r i b e d   i n   S p e c i f y i n g   I m a g e P u l l S e c r e t s   o n   a   P o d . k u b e c t l   c r e a t e   s e c r e t   d o c k e r - r e g i s t r y   m y r e g i s t r y k e y   - - d o c k e r - s e r v e r = < r e g i s t r y   n a m e >   \   - - d o c k e r - u s e r n a m e = D U M M Y _ U S E R N A M E   - - d o c k e r - p a s s w o r d = D U M M Y _ D O C K E R _ P A S S W O R D   \   - - d o c k e r - e m a i l = D U M M Y _ D O C K E R _ E M A I L   V e r i f y   i t   h a s   b e e n   c r e a t e d . k u b e c t l   g e t   s e c r e t s   m y r e g i s t r y k e y   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s : N A M E   T Y P E   D A T A   A G E   m y r e g i s t r y k e y   k u b e r n e t e s . i o / . d o c k e r c o n f i g j s o n   1   1 d   C r e a t e   a n   i m a g e P u l l S e c r e t ,   a s   d e s c r i b e d   i n   S p e c i f y i n g   I m a g e P u l l S e c r e t s   o n   a   P o d .   k u b e c t l   c r e a t e   s e c r e t   d o c k e r - r e g i s t r y   m y r e g i s t r y k e y   - - d o c k e r - s e r v e r = < r e g i s t r y   n a m e >   \   - - d o c k e r - u s e r n a m e = D U M M Y _ U S E R N A M E   - - d o c k e r - p a s s w o r d = D U M M Y _ D O C K E R _ P A S S W O R D   \   - - d o c k e r - e m a i l = D U M M Y _ D O C K E R _ E M A I L   V e r i f y   i t   h a s   b e e n   c r e a t e d .   k u b e c t l   g e t   s e c r e t s   m y r e g i s t r y k e y   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s :   N A M E   T Y P E   D A T A   A G E   m y r e g i s t r y k e y   k u b e r n e t e s . i o / . d o c k e r c o n f i g j s o n   1   1 d


Question: What is Add image pull secret to service account?

Answer: N e x t ,   m o d i f y   t h e   d e f a u l t   s e r v i c e   a c c o u n t   f o r   t h e   n a m e s p a c e   t o   u s e   t h i s   S e c r e t   a s   a n   i m a g e P u l l S e c r e t .   k u b e c t l   p a t c h   s e r v i c e a c c o u n t   d e f a u l t   - p   ' { " i m a g e P u l l S e c r e t s " :   [ { " n a m e " :   " m y r e g i s t r y k e y " } ] } '   Y o u   c a n   a c h i e v e   t h e   s a m e   o u t c o m e   b y   e d i t i n g   t h e   o b j e c t   m a n u a l l y :   k u b e c t l   e d i t   s e r v i c e a c c o u n t / d e f a u l t   T h e   o u t p u t   o f   t h e   s a . y a m l   f i l e   i s   s i m i l a r   t o   t h i s :   Y o u r   s e l e c t e d   t e x t   e d i t o r   w i l l   o p e n   w i t h   a   c o n f i g u r a t i o n   l o o k i n g   s o m e t h i n g   l i k e   t h i s :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e A c c o u n t   m e t a d a t a :   c r e a t i o n T i m e s t a m p :   2 0 2 1 - 0 7 - 0 7 T 2 2 : 0 2 : 3 9 Z   n a m e :   d e f a u l t   n a m e s p a c e :   d e f a u l t   r e s o u r c e V e r s i o n :   " 2 4 3 0 2 4 "   u i d :   0 5 2 f b 0 f 4 - 3 d 5 0 - 1 1 e 5 - b 0 6 6 - 4 2 0 1 0 a f 0 d 7 b 6   U s i n g   y o u r   e d i t o r ,   d e l e t e   t h e   l i n e   w i t h   k e y   r e s o u r c e V e r s i o n ,   a d d   l i n e s   f o r   i m a g e P u l l S e c r e t s :   a n d   s a v e   i t .   L e a v e   t h e   u i d   v a l u e   s e t   t h e   s a m e   a s   y o u   f o u n d   i t .   A f t e r   y o u   m a d e   t h o s e   c h a n g e s ,   t h e   e d i t e d   S e r v i c e A c c o u n t   l o o k s   s o m e t h i n g   l i k e   t h i s :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e A c c o u n t   m e t a d a t a :   c r e a t i o n T i m e s t a m p :   2 0 2 1 - 0 7 - 0 7 T 2 2 : 0 2 : 3 9 Z   n a m e :   d e f a u l t   n a m e s p a c e :   d e f a u l t   u i d :   0 5 2 f b 0 f 4 - 3 d 5 0 - 1 1 e 5 -


Question: What is Verify that imagePullSecrets are set for new Pods?

Answer: N o w ,   w h e n   a   n e w   P o d   i s   c r e a t e d   i n   t h e   c u r r e n t   n a m e s p a c e   a n d   u s i n g   t h e   d e f a u l t   S e r v i c e A c c o u n t ,   t h e   n e w   P o d   h a s   i t s   s p e c . i m a g e P u l l S e c r e t s   f i e l d   s e t   a u t o m a t i c a l l y :   k u b e c t l   r u n   n g i n x   - - i m a g e = < r e g i s t r y   n a m e > / n g i n x   - - r e s t a r t = N e v e r   k u b e c t l   g e t   p o d   n g i n x   - o = j s o n p a t h = ' { . s p e c . i m a g e P u l l S e c r e t s [ 0 ] . n a m e } { " \ n " } '   T h e   o u t p u t   i s :   m y r e g i s t r y k e y


Question: What is Note:?

Answer: T o   e n a b l e   a n d   u s e   t o k e n   r e q u e s t   p r o j e c t i o n ,   y o u   m u s t   s p e c i f y   e a c h   o f   t h e   f o l l o w i n g   c o m m a n d   l i n e   a r g u m e n t s   t o   k u b e - a p i s e r v e r :   T h e   k u b e l e t   c a n   a l s o   p r o j e c t   a   S e r v i c e A c c o u n t   t o k e n   i n t o   a   P o d .   Y o u   c a n   s p e c i f y   d e s i r e d   p r o p e r t i e s   o f   t h e   t o k e n ,   s u c h   a s   t h e   a u d i e n c e   a n d   t h e   v a l i d i t y   d u r a t i o n .   T h e s e   p r o p e r t i e s   a r e   n o t   c o n f i g u r a b l e   o n   t h e   d e f a u l t   S e r v i c e A c c o u n t   t o k e n .   T h e   t o k e n   w i l l   a l s o   b e c o m e   i n v a l i d   a g a i n s t   t h e   A P I   w h e n   e i t h e r   t h e   P o d   o r   t h e   S e r v i c e A c c o u n t   i s   d e l e t e d .   Y o u   c a n   c o n f i g u r e   t h i s   b e h a v i o r   f o r   t h e   s p e c   o f   a   P o d   u s i n g   a   p r o j e c t e d   v o l u m e   t y p e   c a l l e d   S e r v i c e A c c o u n t T o k e n .   T h e   t o k e n   f r o m   t h i s   p r o j e c t e d   v o l u m e   i s   a   J S O N   W e b   T o k e n   ( J W T ) .   T h e   J S O N   p a y l o a d   o f   t h i s   t o k e n   f o l l o w s   a   w e l l   d e f i n e d   s c h e m a   -   a n   e x a m p l e   p a y l o a d   f o r   a   p o d   b o u n d   t o k e n :   {   " a u d " :   [   #   m a t c h e s   t h e   r e q u e s t e d   a u d i e n c e s ,   o r   t h e   A P I   s e r v e r ' s   d e f a u l t   a u d i e n c e s   w h e n   n o n e   a r e   e x p l i c i t l y   r e q u e s t e d   " h t t p s : / / k u b e r n e t e s . d e f a u l t . s v c "   ] ,   " e x p " :   1 7 3 1 6 1 3 4 1 3 ,   " i a t " :   1 7 0 0 0 7 7 4 1 3 ,   " i s s " :   " h t t p s : / / k u b e r n e t e s . d e f a u l t . s v c " ,   #   m a t c h e s   t h e   f i r s t


Question: What is Launch a Pod using service account token projection?

Answer: T o   p r o v i d e   a   P o d   w i t h   a   t o k e n   w i t h   a n   a u d i e n c e   o f   v a u l t   a n d   a   v a l i d i t y   d u r a t i o n   o f   t w o   h o u r s ,   y o u   c o u l d   d e f i n e   a   P o d   m a n i f e s t   t h a t   i s   s i m i l a r   t o :   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   n g i n x   s p e c :   c o n t a i n e r s :   -   i m a g e :   n g i n x   n a m e :   n g i n x   v o l u m e M o u n t s :   -   m o u n t P a t h :   / v a r / r u n / s e c r e t s / t o k e n s   n a m e :   v a u l t - t o k e n   s e r v i c e A c c o u n t N a m e :   b u i l d - r o b o t   v o l u m e s :   -   n a m e :   v a u l t - t o k e n   p r o j e c t e d :   s o u r c e s :   -   s e r v i c e A c c o u n t T o k e n :   p a t h :   v a u l t - t o k e n   e x p i r a t i o n S e c o n d s :   7 2 0 0   a u d i e n c e :   v a u l t   C r e a t e   t h e   P o d :   k u b e c t l   c r e a t e   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / p o d s / p o d - p r o j e c t e d - s v c - t o k e n . y a m l   T h e   k u b e l e t   w i l l :   r e q u e s t   a n d   s t o r e   t h e   t o k e n   o n   b e h a l f   o f   t h e   P o d ;   m a k e   t h e   t o k e n   a v a i l a b l e   t o   t h e   P o d   a t   a   c o n f i g u r a b l e   f i l e   p a t h ;   a n d   r e f r e s h   t h e   t o k e n   a s   i t   a p p r o a c h e s   e x p i r a t i o n .   T h e   k u b e l e t   p r o a c t i v e l y   r e q u e s t s   r o t a t i o n   f o r   t h e   t o k e n   i f   i t   i s   o l d e r   t h a n   8 0 %   o f   i t s   t o t a l   t i m e - t o - l i v e   ( T T L ) ,   o r   i f   t h e   t o k e n   i s   o l d e r   t h a n   2 4   h o u r s .   T h e   a p p l i c a t i o n   i s   r e s p o n s i b l e   f o r   r e l o a d i n g   t h e   t o k e n   w h e n   i t   r o t a t e s .   I t ' s   o f t e n   g o o d   e n o u g h   f o r   t h e


Question: What is Service account issuer discovery?

Answer: I f   y o u   h a v e   e n a b l e d   t o k e n   p r o j e c t i o n   f o r   S e r v i c e A c c o u n t s   i n   y o u r   c l u s t e r ,   t h e n   y o u   c a n   a l s o   m a k e   u s e   o f   t h e   d i s c o v e r y   f e a t u r e .   K u b e r n e t e s   p r o v i d e s   a   w a y   f o r   c l i e n t s   t o   f e d e r a t e   a s   a n   i d e n t i t y   p r o v i d e r ,   s o   t h a t   o n e   o r   m o r e   e x t e r n a l   s y s t e m s   c a n   a c t   a s   a   r e l y i n g   p a r t y .


Question: What is Note:?

Answer: T h e   i s s u e r   U R L   m u s t   c o m p l y   w i t h   t h e   O I D C   D i s c o v e r y   S p e c .   I n   p r a c t i c e ,   t h i s   m e a n s   i t   m u s t   u s e   t h e   h t t p s   s c h e m e ,   a n d   s h o u l d   s e r v e   a n   O p e n I D   p r o v i d e r   c o n f i g u r a t i o n   a t   { s e r v i c e - a c c o u n t - i s s u e r } / . w e l l - k n o w n / o p e n i d - c o n f i g u r a t i o n .   I f   t h e   U R L   d o e s   n o t   c o m p l y ,   S e r v i c e A c c o u n t   i s s u e r   d i s c o v e r y   e n d p o i n t s   a r e   n o t   r e g i s t e r e d   o r   a c c e s s i b l e .   W h e n   e n a b l e d ,   t h e   K u b e r n e t e s   A P I   s e r v e r   p u b l i s h e s   a n   O p e n I D   P r o v i d e r   C o n f i g u r a t i o n   d o c u m e n t   v i a   H T T P .   T h e   c o n f i g u r a t i o n   d o c u m e n t   i s   p u b l i s h e d   a t   / . w e l l - k n o w n / o p e n i d - c o n f i g u r a t i o n .   T h e   O p e n I D   P r o v i d e r   C o n f i g u r a t i o n   i s   s o m e t i m e s   r e f e r r e d   t o   a s   t h e   d i s c o v e r y   d o c u m e n t .   T h e   K u b e r n e t e s   A P I   s e r v e r   p u b l i s h e s   t h e   r e l a t e d   J S O N   W e b   K e y   S e t   ( J W K S ) ,   a l s o   v i a   H T T P ,   a t   / o p e n i d / v 1 / j w k s .


Question: What is Note:?

Answer: C l u s t e r s   t h a t   u s e   R B A C   i n c l u d e   a   d e f a u l t   C l u s t e r R o l e   c a l l e d   s y s t e m : s e r v i c e - a c c o u n t - i s s u e r - d i s c o v e r y .   A   d e f a u l t   C l u s t e r R o l e B i n d i n g   a s s i g n s   t h i s   r o l e   t o   t h e   s y s t e m : s e r v i c e a c c o u n t s   g r o u p ,   w h i c h   a l l   S e r v i c e A c c o u n t s   i m p l i c i t l y   b e l o n g   t o .   T h i s   a l l o w s   p o d s   r u n n i n g   o n   t h e   c l u s t e r   t o   a c c e s s   t h e   s e r v i c e   a c c o u n t   d i s c o v e r y   d o c u m e n t   v i a   t h e i r   m o u n t e d   s e r v i c e   a c c o u n t   t o k e n .   A d m i n i s t r a t o r s   m a y ,   a d d i t i o n a l l y ,   c h o o s e   t o   b i n d   t h e   r o l e   t o   s y s t e m : a u t h e n t i c a t e d   o r   s y s t e m : u n a u t h e n t i c a t e d   d e p e n d i n g   o n   t h e i r   s e c u r i t y   r e q u i r e m e n t s   a n d   w h i c h   e x t e r n a l   s y s t e m s   t h e y   i n t e n d   t o   f e d e r a t e   w i t h .   T h e   J W K S   r e s p o n s e   c o n t a i n s   p u b l i c   k e y s   t h a t   a   r e l y i n g   p a r t y   c a n   u s e   t o   v a l i d a t e   t h e   K u b e r n e t e s   s e r v i c e   a c c o u n t   t o k e n s .   R e l y i n g   p a r t i e s   f i r s t   q u e r y   f o r   t h e   O p e n I D   P r o v i d e r   C o n f i g u r a t i o n ,   a n d   u s e   t h e   j w k s _ u r i   f i e l d   i n   t h e   r e s p o n s e   t o   f i n d   t h e   J W K S .   I n   m a n y   c a s e s ,   K u b e r n e t e s   A P I   s e r v e r s   a r e   n o t   a v a i l a b l e   o n   t h e   p u b l i c   i n t e r n e t ,   b u t   p u b l i c   e n d p o i n t s   t h a t   s e r v e   c a c h e d   r e s p o n s e s   f r o m   t h e   A P I   s e r v e r   c a n   b e   m a d e   a v a i l a b l e   b y   u s e r s   o r   b


Question: What is What's next?

Answer: S e e   a l s o :   R e a d   t h e   C l u s t e r   A d m i n   G u i d e   t o   S e r v i c e   A c c o u n t s R e a d   a b o u t   A u t h o r i z a t i o n   i n   K u b e r n e t e s R e a d   a b o u t   S e c r e t s o r   l e a r n   t o   d i s t r i b u t e   c r e d e n t i a l s   s e c u r e l y   u s i n g   S e c r e t s b u t   a l s o   b e a r   i n   m i n d   t h a t   u s i n g   S e c r e t s   f o r   a u t h e n t i c a t i n g   a s   a   S e r v i c e A c c o u n t   i s   d e p r e c a t e d .   T h e   r e c o m m e n d e d   a l t e r n a t i v e   i s   S e r v i c e A c c o u n t   t o k e n   v o l u m e   p r o j e c t i o n . R e a d   a b o u t   p r o j e c t e d   v o l u m e s . F o r   b a c k g r o u n d   o n   O I D C   d i s c o v e r y ,   r e a d   t h e   S e r v i c e A c c o u n t   s i g n i n g   k e y   r e t r i e v a l   K u b e r n e t e s   E n h a n c e m e n t   P r o p o s a l R e a d   t h e   O I D C   D i s c o v e r y   S p e c   o r   l e a r n   t o   d i s t r i b u t e   c r e d e n t i a l s   s e c u r e l y   u s i n g   S e c r e t s b u t   a l s o   b e a r   i n   m i n d   t h a t   u s i n g   S e c r e t s   f o r   a u t h e n t i c a t i n g   a s   a   S e r v i c e A c c o u n t   i s   d e p r e c a t e d .   T h e   r e c o m m e n d e d   a l t e r n a t i v e   i s   S e r v i c e A c c o u n t   t o k e n   v o l u m e   p r o j e c t i o n .


Question: What is NetworkPolicy?

Answer: NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of Pods.apiVersion: networking.k8s.io/v1import "k8s.io/api/networking/v1"NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of PodsapiVersion: networking.k8s.io/v1kind: NetworkPolicymetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (NetworkPolicySpec)spec represents the specification of the desired behavior for this NetworkPolicy.NetworkPolicySpecNetworkPolicySpec provides the specification of a NetworkPolicypodSelector (LabelSelector)podSelector selects the pods to which this NetworkPolicy object applies. The array of rules is applied to any pods selected by this field. An empty selector matches all pods in the policy's namespace. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is optional. If it is not specified, it defaults to an empty selector.policyTypes ([]string)Atomic: will be replaced during a mergepolicyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8ingress ([]NetworkPolicyIngressRule)Atomic: will be replaced during a mergeingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.ingress.from ([]NetworkPolicyPeer)Atomic: will be replaced during a mergefrom is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restric


Question: How does NetworkPolicy work?

Answer: NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of Pods.apiVersion: networking.k8s.io/v1import "k8s.io/api/networking/v1"NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of PodsapiVersion: networking.k8s.io/v1kind: NetworkPolicymetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (NetworkPolicySpec)spec represents the specification of the desired behavior for this NetworkPolicy.NetworkPolicySpecNetworkPolicySpec provides the specification of a NetworkPolicypodSelector (LabelSelector)podSelector selects the pods to which this NetworkPolicy object applies. The array of rules is applied to any pods selected by this field. An empty selector matches all pods in the policy's namespace. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is optional. If it is not specified, it defaults to an empty selector.policyTypes ([]string)Atomic: will be replaced during a mergepolicyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8ingress ([]NetworkPolicyIngressRule)Atomic: will be replaced during a mergeingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.ingress.from ([]NetworkPolicyPeer)Atomic: will be replaced during a mergefrom is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restric


Question: When would you use NetworkPolicy?

Answer: NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of Pods.apiVersion: networking.k8s.io/v1import "k8s.io/api/networking/v1"NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of PodsapiVersion: networking.k8s.io/v1kind: NetworkPolicymetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (NetworkPolicySpec)spec represents the specification of the desired behavior for this NetworkPolicy.NetworkPolicySpecNetworkPolicySpec provides the specification of a NetworkPolicypodSelector (LabelSelector)podSelector selects the pods to which this NetworkPolicy object applies. The array of rules is applied to any pods selected by this field. An empty selector matches all pods in the policy's namespace. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is optional. If it is not specified, it defaults to an empty selector.policyTypes ([]string)Atomic: will be replaced during a mergepolicyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8ingress ([]NetworkPolicyIngressRule)Atomic: will be replaced during a mergeingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.ingress.from ([]NetworkPolicyPeer)Atomic: will be replaced during a mergefrom is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restric


Question: What are the benefits of NetworkPolicy?

Answer: NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of Pods.apiVersion: networking.k8s.io/v1import "k8s.io/api/networking/v1"NetworkPolicyNetworkPolicy describes what network traffic is allowed for a set of PodsapiVersion: networking.k8s.io/v1kind: NetworkPolicymetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (NetworkPolicySpec)spec represents the specification of the desired behavior for this NetworkPolicy.NetworkPolicySpecNetworkPolicySpec provides the specification of a NetworkPolicypodSelector (LabelSelector)podSelector selects the pods to which this NetworkPolicy object applies. The array of rules is applied to any pods selected by this field. An empty selector matches all pods in the policy's namespace. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is optional. If it is not specified, it defaults to an empty selector.policyTypes ([]string)Atomic: will be replaced during a mergepolicyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8ingress ([]NetworkPolicyIngressRule)Atomic: will be replaced during a mergeingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.ingress.from ([]NetworkPolicyPeer)Atomic: will be replaced during a mergefrom is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restric


Question: What is NetworkPolicy?

Answer: a p i V e r s i o n :   n e t w o r k i n g . k 8 s . i o / v 1   i m p o r t   " k 8 s . i o / a p i / n e t w o r k i n g / v 1 "


Question: What is NetworkPolicy?

Answer: N e t w o r k P o l i c y   d e s c r i b e s   w h a t   n e t w o r k   t r a f f i c   i s   a l l o w e d   f o r   a   s e t   o f   P o d s   a p i V e r s i o n :   n e t w o r k i n g . k 8 s . i o / v 1 k i n d :   N e t w o r k P o l i c y m e t a d a t a   ( O b j e c t M e t a ) S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a s p e c   ( N e t w o r k P o l i c y S p e c ) s p e c   r e p r e s e n t s   t h e   s p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   f o r   t h i s   N e t w o r k P o l i c y .   a p i V e r s i o n :   n e t w o r k i n g . k 8 s . i o / v 1   k i n d :   N e t w o r k P o l i c y   m e t a d a t a   ( O b j e c t M e t a )   S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   s p e c   ( N e t w o r k P o l i c y S p e c )   s p e c   r e p r e s e n t s   t h e   s p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   f o r   t h i s   N e t w o r k P o l i c y .


Question: What is NetworkPolicySpec?

Answer: N e t w o r k P o l i c y S p e c   p r o v i d e s   t h e   s p e c i f i c a t i o n   o f   a   N e t w o r k P o l i c y   p o d S e l e c t o r   ( L a b e l S e l e c t o r ) p o d S e l e c t o r   s e l e c t s   t h e   p o d s   t o   w h i c h   t h i s   N e t w o r k P o l i c y   o b j e c t   a p p l i e s .   T h e   a r r a y   o f   r u l e s   i s   a p p l i e d   t o   a n y   p o d s   s e l e c t e d   b y   t h i s   f i e l d .   A n   e m p t y   s e l e c t o r   m a t c h e s   a l l   p o d s   i n   t h e   p o l i c y ' s   n a m e s p a c e .   M u l t i p l e   n e t w o r k   p o l i c i e s   c a n   s e l e c t   t h e   s a m e   s e t   o f   p o d s .   I n   t h i s   c a s e ,   t h e   i n g r e s s   r u l e s   f o r   e a c h   a r e   c o m b i n e d   a d d i t i v e l y .   T h i s   f i e l d   i s   o p t i o n a l .   I f   i t   i s   n o t   s p e c i f i e d ,   i t   d e f a u l t s   t o   a n   e m p t y   s e l e c t o r . p o l i c y T y p e s   ( [ ] s t r i n g ) A t o m i c :   w i l l   b e   r e p l a c e d   d u r i n g   a   m e r g e p o l i c y T y p e s   i s   a   l i s t   o f   r u l e   t y p e s   t h a t   t h e   N e t w o r k P o l i c y   r e l a t e s   t o .   V a l i d   o p t i o n s   a r e   [ " I n g r e s s " ] ,   [ " E g r e s s " ] ,   o r   [ " I n g r e s s " ,   " E g r e s s " ] .   I f   t h i s   f i e l d   i s   n o t   s p e c i f i e d ,   i t   w i l l   d e f a u l t   b a s e d   o n   t h e   e x i s t e n c e   o f   i n g r e s s   o r   e g r e s s   r u l e s ;   p o l i c i e s   t h a t   c o n t a i n   a n   e g r e s s   s e c t i o n   a r e   a s s u m e d   t o   a f f e c t   e g r e s s ,   a n d   a l l   p o l i c i e s   ( w h e t h e r   o r   n o t   t h e y   c o n t a i n   a n   i n g r e s s   s e c t i o n )   a r e   a s s u m e d   t o   a f f e c t   i n g r e s s .   I f   y o u   w a n t   t o   w r i t e   a n   e g r e s s - o n l y


Question: What is NetworkPolicyList?

Answer: N e t w o r k P o l i c y L i s t   i s   a   l i s t   o f   N e t w o r k P o l i c y   o b j e c t s .   a p i V e r s i o n :   n e t w o r k i n g . k 8 s . i o / v 1 k i n d :   N e t w o r k P o l i c y L i s t m e t a d a t a   ( L i s t M e t a ) S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a i t e m s   ( [ ] N e t w o r k P o l i c y ) ,   r e q u i r e d i t e m s   i s   a   l i s t   o f   s c h e m a   o b j e c t s .   a p i V e r s i o n :   n e t w o r k i n g . k 8 s . i o / v 1   k i n d :   N e t w o r k P o l i c y L i s t   m e t a d a t a   ( L i s t M e t a )   S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   i t e m s   ( [ ] N e t w o r k P o l i c y ) ,   r e q u i r e d   i t e m s   i s   a   l i s t   o f   s c h e m a   o b j e c t s .


Question: What is HTTP Request?

Answer: G E T   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   N e t w o r k P o l i c y n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   N e t w o r k P o l i c y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n e t w o r k p o l i c i e s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   N e t w o r k P o l i c y ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   N e t w o r k P o l i c y ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y ) :   O K   2 0 1   ( N e t w o r k P o l i c y ) :   C r e a t e d   2 0 2   ( N e t w o r k P o l i c y ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   N e t w o r k P o l i c y n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   N e t w o r k P o l i c y ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   N e t w o r k P o l i c y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   N e t w o r k P o l i c y ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y ) :   O K   2 0 1   ( N e t w o r k P o l i c y ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   N e t w o r k P o l i c y n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   N e t w o r k P o l i c y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( N e t w o r k P o l i c y ) :   O K   2 0 1   ( N e t w o r k P o l i c y ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   N e t w o r k P o l i c y n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   N e t w o r k P o l i c y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / n e t w o r k i n g . k 8 s . i o / v 1 / n a m e s p a c e s / { n a m e s p a c e } / n e t w o r k p o l i c i e s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is ReplicationController?

Answer: ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1import "k8s.io/api/core/v1"ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1kind: ReplicationControllermetadata (ObjectMeta)If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (ReplicationControllerSpec)Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (ReplicationControllerStatus)Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusReplicationControllerSpecReplicationControllerSpec is the specification of a replication controller.selector (map[string]string)Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorstemplate (PodTemplateSpec)Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is "Always". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-templatereplicas (int32)Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrollerminReadySeconds (int32)Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)ReplicationControllerStatusReplicationControllerStatus represents the current status of a replication controller.replicas (int32), requiredReplicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrolleravailableReplicas (int32)The number of available replicas (ready for at least minReadySeconds) for this replication controller.readyReplicas (int32)The number of ready replicas for this replic


Question: How does ReplicationController work?

Answer: ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1import "k8s.io/api/core/v1"ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1kind: ReplicationControllermetadata (ObjectMeta)If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (ReplicationControllerSpec)Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (ReplicationControllerStatus)Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusReplicationControllerSpecReplicationControllerSpec is the specification of a replication controller.selector (map[string]string)Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorstemplate (PodTemplateSpec)Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is "Always". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-templatereplicas (int32)Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrollerminReadySeconds (int32)Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)ReplicationControllerStatusReplicationControllerStatus represents the current status of a replication controller.replicas (int32), requiredReplicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrolleravailableReplicas (int32)The number of available replicas (ready for at least minReadySeconds) for this replication controller.readyReplicas (int32)The number of ready replicas for this replic


Question: When would you use ReplicationController?

Answer: ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1import "k8s.io/api/core/v1"ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1kind: ReplicationControllermetadata (ObjectMeta)If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (ReplicationControllerSpec)Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (ReplicationControllerStatus)Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusReplicationControllerSpecReplicationControllerSpec is the specification of a replication controller.selector (map[string]string)Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorstemplate (PodTemplateSpec)Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is "Always". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-templatereplicas (int32)Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrollerminReadySeconds (int32)Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)ReplicationControllerStatusReplicationControllerStatus represents the current status of a replication controller.replicas (int32), requiredReplicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrolleravailableReplicas (int32)The number of available replicas (ready for at least minReadySeconds) for this replication controller.readyReplicas (int32)The number of ready replicas for this replic


Question: What are the benefits of ReplicationController?

Answer: ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1import "k8s.io/api/core/v1"ReplicationControllerReplicationController represents the configuration of a replication controller.apiVersion: v1kind: ReplicationControllermetadata (ObjectMeta)If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (ReplicationControllerSpec)Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (ReplicationControllerStatus)Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusReplicationControllerSpecReplicationControllerSpec is the specification of a replication controller.selector (map[string]string)Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorstemplate (PodTemplateSpec)Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is "Always". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-templatereplicas (int32)Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrollerminReadySeconds (int32)Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)ReplicationControllerStatusReplicationControllerStatus represents the current status of a replication controller.replicas (int32), requiredReplicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontrolleravailableReplicas (int32)The number of available replicas (ready for at least minReadySeconds) for this replication controller.readyReplicas (int32)The number of ready replicas for this replic


Question: What is ReplicationController?

Answer: a p i V e r s i o n :   v 1   i m p o r t   " k 8 s . i o / a p i / c o r e / v 1 "


Question: What is ReplicationController?

Answer: R e p l i c a t i o n C o n t r o l l e r   r e p r e s e n t s   t h e   c o n f i g u r a t i o n   o f   a   r e p l i c a t i o n   c o n t r o l l e r .   a p i V e r s i o n :   v 1 k i n d :   R e p l i c a t i o n C o n t r o l l e r m e t a d a t a   ( O b j e c t M e t a ) I f   t h e   L a b e l s   o f   a   R e p l i c a t i o n C o n t r o l l e r   a r e   e m p t y ,   t h e y   a r e   d e f a u l t e d   t o   b e   t h e   s a m e   a s   t h e   P o d ( s )   t h a t   t h e   r e p l i c a t i o n   c o n t r o l l e r   m a n a g e s .   S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a s p e c   ( R e p l i c a t i o n C o n t r o l l e r S p e c ) S p e c   d e f i n e s   t h e   s p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   o f   t h e   r e p l i c a t i o n   c o n t r o l l e r .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s s t a t u s   ( R e p l i c a t i o n C o n t r o l l e r S t a t u s ) S t a t u s   i s   t h e   m o s t   r e c e n t l y   o b s e r v e d   s t a t u s   o f   t h e   r e p l i c a t i o n   c o n t r o l l e r .   T h i s   d a t a   m a y   b e   o u t   o f   d a t e   b y   s o m e   w i n d o w   o f   t i m e .   P o p u l a t e d   b y   t h e   s y s t e m .   R e a d - o n l y .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s   a p i V e r s i o n :   v 1   k i n d :   R e p l i c a t i o n C o n t r o l l e r   m e t a


Question: What is ReplicationControllerSpec?

Answer: R e p l i c a t i o n C o n t r o l l e r S p e c   i s   t h e   s p e c i f i c a t i o n   o f   a   r e p l i c a t i o n   c o n t r o l l e r .   s e l e c t o r   ( m a p [ s t r i n g ] s t r i n g ) S e l e c t o r   i s   a   l a b e l   q u e r y   o v e r   p o d s   t h a t   s h o u l d   m a t c h   t h e   R e p l i c a s   c o u n t .   I f   S e l e c t o r   i s   e m p t y ,   i t   i s   d e f a u l t e d   t o   t h e   l a b e l s   p r e s e n t   o n   t h e   P o d   t e m p l a t e .   L a b e l   k e y s   a n d   v a l u e s   t h a t   m u s t   m a t c h   i n   o r d e r   t o   b e   c o n t r o l l e d   b y   t h i s   r e p l i c a t i o n   c o n t r o l l e r ,   i f   e m p t y   d e f a u l t e d   t o   l a b e l s   o n   P o d   t e m p l a t e .   M o r e   i n f o :   h t t p s : / / k u b e r n e t e s . i o / d o c s / c o n c e p t s / o v e r v i e w / w o r k i n g - w i t h - o b j e c t s / l a b e l s / # l a b e l - s e l e c t o r s t e m p l a t e   ( P o d T e m p l a t e S p e c ) T e m p l a t e   i s   t h e   o b j e c t   t h a t   d e s c r i b e s   t h e   p o d   t h a t   w i l l   b e   c r e a t e d   i f   i n s u f f i c i e n t   r e p l i c a s   a r e   d e t e c t e d .   T h i s   t a k e s   p r e c e d e n c e   o v e r   a   T e m p l a t e R e f .   T h e   o n l y   a l l o w e d   t e m p l a t e . s p e c . r e s t a r t P o l i c y   v a l u e   i s   " A l w a y s " .   M o r e   i n f o :   h t t p s : / / k u b e r n e t e s . i o / d o c s / c o n c e p t s / w o r k l o a d s / c o n t r o l l e r s / r e p l i c a t i o n c o n t r o l l e r # p o d - t e m p l a t e r e p l i c a s   ( i n t 3 2 ) R e p l i c a s   i s   t h e   n u m b e r   o f   d e s i r e d   r e p l i c a s .   T h i s   i s   a   p o i n t e r   t o   d i s t i n g u i s h   b e t w e e n   e x p l i c i t   z e r o   a n d   u n s p e c i f i e d .   D e f a u l t s   t o   1 .   M o r e   i n f o :


Question: What is ReplicationControllerStatus?

Answer: R e p l i c a t i o n C o n t r o l l e r S t a t u s   r e p r e s e n t s   t h e   c u r r e n t   s t a t u s   o f   a   r e p l i c a t i o n   c o n t r o l l e r .   r e p l i c a s   ( i n t 3 2 ) ,   r e q u i r e d R e p l i c a s   i s   t h e   m o s t   r e c e n t l y   o b s e r v e d   n u m b e r   o f   r e p l i c a s .   M o r e   i n f o :   h t t p s : / / k u b e r n e t e s . i o / d o c s / c o n c e p t s / w o r k l o a d s / c o n t r o l l e r s / r e p l i c a t i o n c o n t r o l l e r # w h a t - i s - a - r e p l i c a t i o n c o n t r o l l e r a v a i l a b l e R e p l i c a s   ( i n t 3 2 ) T h e   n u m b e r   o f   a v a i l a b l e   r e p l i c a s   ( r e a d y   f o r   a t   l e a s t   m i n R e a d y S e c o n d s )   f o r   t h i s   r e p l i c a t i o n   c o n t r o l l e r . r e a d y R e p l i c a s   ( i n t 3 2 ) T h e   n u m b e r   o f   r e a d y   r e p l i c a s   f o r   t h i s   r e p l i c a t i o n   c o n t r o l l e r . f u l l y L a b e l e d R e p l i c a s   ( i n t 3 2 ) T h e   n u m b e r   o f   p o d s   t h a t   h a v e   l a b e l s   m a t c h i n g   t h e   l a b e l s   o f   t h e   p o d   t e m p l a t e   o f   t h e   r e p l i c a t i o n   c o n t r o l l e r . c o n d i t i o n s   ( [ ] R e p l i c a t i o n C o n t r o l l e r C o n d i t i o n ) P a t c h   s t r a t e g y :   m e r g e   o n   k e y   t y p e M a p :   u n i q u e   v a l u e s   o n   k e y   t y p e   w i l l   b e   k e p t   d u r i n g   a   m e r g e R e p r e s e n t s   t h e   l a t e s t   a v a i l a b l e   o b s e r v a t i o n s   o f   a   r e p l i c a t i o n   c o n t r o l l e r ' s   c u r r e n t   s t a t e . R e p l i c a t i o n C o n t r o l l e r C o n d i t i o n   d e s c r i b e s   t h e   s t a t e   o f   a   r e p l i c a t i o n   c o n t r o l l e r   a t   a   c e r t a i n   p o i n t . c o n d i t i o n s . s t a t u s   ( s t r i n g ) ,   r e q u i r e d S t a t


Question: What is ReplicationControllerList?

Answer: R e p l i c a t i o n C o n t r o l l e r L i s t   i s   a   c o l l e c t i o n   o f   r e p l i c a t i o n   c o n t r o l l e r s .   a p i V e r s i o n :   v 1 k i n d :   R e p l i c a t i o n C o n t r o l l e r L i s t m e t a d a t a   ( L i s t M e t a ) S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # t y p e s - k i n d s i t e m s   ( [ ] R e p l i c a t i o n C o n t r o l l e r ) ,   r e q u i r e d L i s t   o f   r e p l i c a t i o n   c o n t r o l l e r s .   M o r e   i n f o :   h t t p s : / / k u b e r n e t e s . i o / d o c s / c o n c e p t s / w o r k l o a d s / c o n t r o l l e r s / r e p l i c a t i o n c o n t r o l l e r   a p i V e r s i o n :   v 1   k i n d :   R e p l i c a t i o n C o n t r o l l e r L i s t   m e t a d a t a   ( L i s t M e t a )   S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # t y p e s - k i n d s   i t e m s   ( [ ] R e p l i c a t i o n C o n t r o l l e r ) ,   r e q u i r e d   L i s t   o f   r e p l i c a t i o n   c o n t r o l l e r s .   M o r e   i n f o :   h t t p s : / / k u b e r n e t e s . i o / d o c s / c o n c e p t s / w o r k l o a d s / c o n t r o l l e r s / r e p l i c a t i o n c o n t r o l l e r


Question: What is HTTP Request?

Answer: G E T   / a p i / v 1 / n a m e s p a c e s / { n a m e s p a c e } / r e p l i c a t i o n c o n t r o l l e r s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   R e p l i c a t i o n C o n t r o l l e r n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   R e p l i c a t i o n C o n t r o l l e r   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( R e p l i c a t i o n C o n t r o l l e r ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i / v 1 / n a m e s p a c e s / { n a m e s p a c e } / r e p l i c a t i o n c o n t r o l l e r s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   R e p l i c a t i o n C o n t r o l l e r n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   R e p l i c a t i o n C o n t r o l l e r   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( R e p l i c a t i o n C o n t r o l l e r ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i / v 1 / n a m e s p a c e s / { n a m e s p a c e } / r e p l i c a t i o n c o n t r o l l e r s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n


Question: What is Response?

Answer: 2 0 0   ( R e p l i c a t i o n C o n t r o l l e r L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i / v 1 / r e p l i c a t i o n c o n t r o l l e r s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( R e p l i c a t i o n C o n t r o l l e r L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i / v 1 / n a m e s p a c e s / { n a m e s p a c e } / r e p l i c a t i o n c o n t r o l l e r s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   R e p l i c a t i o n C o n t r o l l e r ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   R e p l i c a t i o n C o n t r o l l e r ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( R e p l i c a t i o n C o n t r o l l e r ) :   O K   2 0 1   ( R e p l i c a t i o n C o n t r o l l e r ) :   C r e a t e d   2 0 2   ( R e p l i c a t i o n C o n t r o l l e r ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i / v 1 / n a m e s p a c e s / { n a m e s p a c e } / r e p l i c a t i o n c o n t r o l l e r s / { n a m e }