Question: What is DaemonSet rolling update is stuck?

Answer: S o m e t i m e s ,   a   D a e m o n S e t   r o l l i n g   u p d a t e   m a y   b e   s t u c k .   H e r e   a r e   s o m e   p o s s i b l e   c a u s e s :


Question: What is Some nodes run out of resources?

Answer: T h e   r o l l o u t   i s   s t u c k   b e c a u s e   n e w   D a e m o n S e t   p o d s   c a n ' t   b e   s c h e d u l e d   o n   a t   l e a s t   o n e   n o d e .   T h i s   i s   p o s s i b l e   w h e n   t h e   n o d e   i s   r u n n i n g   o u t   o f   r e s o u r c e s .   W h e n   t h i s   h a p p e n s ,   f i n d   t h e   n o d e s   t h a t   d o n ' t   h a v e   t h e   D a e m o n S e t   p o d s   s c h e d u l e d   o n   b y   c o m p a r i n g   t h e   o u t p u t   o f   k u b e c t l   g e t   n o d e s   a n d   t h e   o u t p u t   o f :   k u b e c t l   g e t   p o d s   - l   n a m e = f l u e n t d - e l a s t i c s e a r c h   - o   w i d e   - n   k u b e - s y s t e m   O n c e   y o u ' v e   f o u n d   t h o s e   n o d e s ,   d e l e t e   s o m e   n o n - D a e m o n S e t   p o d s   f r o m   t h e   n o d e   t o   m a k e   r o o m   f o r   n e w   D a e m o n S e t   p o d s .


Question: What is Broken rollout?

Answer: I f   t h e   r e c e n t   D a e m o n S e t   t e m p l a t e   u p d a t e   i s   b r o k e n ,   f o r   e x a m p l e ,   t h e   c o n t a i n e r   i s   c r a s h   l o o p i n g ,   o r   t h e   c o n t a i n e r   i m a g e   d o e s n ' t   e x i s t   ( o f t e n   d u e   t o   a   t y p o ) ,   D a e m o n S e t   r o l l o u t   w o n ' t   p r o g r e s s .   T o   f i x   t h i s ,   u p d a t e   t h e   D a e m o n S e t   t e m p l a t e   a g a i n .   N e w   r o l l o u t   w o n ' t   b e   b l o c k e d   b y   p r e v i o u s   u n h e a l t h y   r o l l o u t s .


Question: What is Clock skew?

Answer: I f   . s p e c . m i n R e a d y S e c o n d s   i s   s p e c i f i e d   i n   t h e   D a e m o n S e t ,   c l o c k   s k e w   b e t w e e n   m a s t e r   a n d   n o d e s   w i l l   m a k e   D a e m o n S e t   u n a b l e   t o   d e t e c t   t h e   r i g h t   r o l l o u t   p r o g r e s s .


Question: What is Clean up?

Answer: D e l e t e   D a e m o n S e t   f r o m   a   n a m e s p a c e   :   k u b e c t l   d e l e t e   d s   f l u e n t d - e l a s t i c s e a r c h   - n   k u b e - s y s t e m


Question: What is What's next?

Answer: S e e   P e r f o r m i n g   a   r o l l b a c k   o n   a   D a e m o n S e t S e e   C r e a t i n g   a   D a e m o n S e t   t o   a d o p t   e x i s t i n g   D a e m o n S e t   p o d s


Question: What is Common Parameters?

Answer: Common ParametersallowWatchBookmarksallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.continueThe continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the


Question: How does Common Parameters work?

Answer: Common ParametersallowWatchBookmarksallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.continueThe continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the


Question: When would you use Common Parameters?

Answer: Common ParametersallowWatchBookmarksallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.continueThe continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the


Question: What are the benefits of Common Parameters?

Answer: Common ParametersallowWatchBookmarksallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.continueThe continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the


Question: What is allowWatchBookmarks?

Answer: a l l o w W a t c h B o o k m a r k s   r e q u e s t s   w a t c h   e v e n t s   w i t h   t y p e   " B O O K M A R K " .   S e r v e r s   t h a t   d o   n o t   i m p l e m e n t   b o o k m a r k s   m a y   i g n o r e   t h i s   f l a g   a n d   b o o k m a r k s   a r e   s e n t   a t   t h e   s e r v e r ' s   d i s c r e t i o n .   C l i e n t s   s h o u l d   n o t   a s s u m e   b o o k m a r k s   a r e   r e t u r n e d   a t   a n y   s p e c i f i c   i n t e r v a l ,   n o r   m a y   t h e y   a s s u m e   t h e   s e r v e r   w i l l   s e n d   a n y   B O O K M A R K   e v e n t   d u r i n g   a   s e s s i o n .   I f   t h i s   i s   n o t   a   w a t c h ,   t h i s   f i e l d   i s   i g n o r e d .


Question: What is continue?

Answer: T h e   c o n t i n u e   o p t i o n   s h o u l d   b e   s e t   w h e n   r e t r i e v i n g   m o r e   r e s u l t s   f r o m   t h e   s e r v e r .   S i n c e   t h i s   v a l u e   i s   s e r v e r   d e f i n e d ,   c l i e n t s   m a y   o n l y   u s e   t h e   c o n t i n u e   v a l u e   f r o m   a   p r e v i o u s   q u e r y   r e s u l t   w i t h   i d e n t i c a l   q u e r y   p a r a m e t e r s   ( e x c e p t   f o r   t h e   v a l u e   o f   c o n t i n u e )   a n d   t h e   s e r v e r   m a y   r e j e c t   a   c o n t i n u e   v a l u e   i t   d o e s   n o t   r e c o g n i z e .   I f   t h e   s p e c i f i e d   c o n t i n u e   v a l u e   i s   n o   l o n g e r   v a l i d   w h e t h e r   d u e   t o   e x p i r a t i o n   ( g e n e r a l l y   f i v e   t o   f i f t e e n   m i n u t e s )   o r   a   c o n f i g u r a t i o n   c h a n g e   o n   t h e   s e r v e r ,   t h e   s e r v e r   w i l l   r e s p o n d   w i t h   a   4 1 0   R e s o u r c e E x p i r e d   e r r o r   t o g e t h e r   w i t h   a   c o n t i n u e   t o k e n .   I f   t h e   c l i e n t   n e e d s   a   c o n s i s t e n t   l i s t ,   i t   m u s t   r e s t a r t   t h e i r   l i s t   w i t h o u t   t h e   c o n t i n u e   f i e l d .   O t h e r w i s e ,   t h e   c l i e n t   m a y   s e n d   a n o t h e r   l i s t   r e q u e s t   w i t h   t h e   t o k e n   r e c e i v e d   w i t h   t h e   4 1 0   e r r o r ,   t h e   s e r v e r   w i l l   r e s p o n d   w i t h   a   l i s t   s t a r t i n g   f r o m   t h e


Question: What is dryRun?

Answer: W h e n   p r e s e n t ,   i n d i c a t e s   t h a t   m o d i f i c a t i o n s   s h o u l d   n o t   b e   p e r s i s t e d .   A n   i n v a l i d   o r   u n r e c o g n i z e d   d r y R u n   d i r e c t i v e   w i l l   r e s u l t   i n   a n   e r r o r   r e s p o n s e   a n d   n o   f u r t h e r   p r o c e s s i n g   o f   t h e   r e q u e s t .   V a l i d   v a l u e s   a r e :   -   A l l :   a l l   d r y   r u n   s t a g e s   w i l l   b e   p r o c e s s e d


Question: What is fieldManager?

Answer: f i e l d M a n a g e r   i s   a   n a m e   a s s o c i a t e d   w i t h   t h e   a c t o r   o r   e n t i t y   t h a t   i s   m a k i n g   t h e s e   c h a n g e s .   T h e   v a l u e   m u s t   b e   l e s s   t h a n   o r   1 2 8   c h a r a c t e r s   l o n g ,   a n d   o n l y   c o n t a i n   p r i n t a b l e   c h a r a c t e r s ,   a s   d e f i n e d   b y   h t t p s : / / g o l a n g . o r g / p k g / u n i c o d e / # I s P r i n t .


Question: What is fieldSelector?

Answer: A   s e l e c t o r   t o   r e s t r i c t   t h e   l i s t   o f   r e t u r n e d   o b j e c t s   b y   t h e i r   f i e l d s .   D e f a u l t s   t o   e v e r y t h i n g .


Question: What is fieldValidation?

Answer: f i e l d V a l i d a t i o n   i n s t r u c t s   t h e   s e r v e r   o n   h o w   t o   h a n d l e   o b j e c t s   i n   t h e   r e q u e s t   ( P O S T / P U T / P A T C H )   c o n t a i n i n g   u n k n o w n   o r   d u p l i c a t e   f i e l d s .   V a l i d   v a l u e s   a r e :   -   I g n o r e :   T h i s   w i l l   i g n o r e   a n y   u n k n o w n   f i e l d s   t h a t   a r e   s i l e n t l y   d r o p p e d   f r o m   t h e   o b j e c t ,   a n d   w i l l   i g n o r e   a l l   b u t   t h e   l a s t   d u p l i c a t e   f i e l d   t h a t   t h e   d e c o d e r   e n c o u n t e r s .   T h i s   i s   t h e   d e f a u l t   b e h a v i o r   p r i o r   t o   v 1 . 2 3 .   -   W a r n :   T h i s   w i l l   s e n d   a   w a r n i n g   v i a   t h e   s t a n d a r d   w a r n i n g   r e s p o n s e   h e a d e r   f o r   e a c h   u n k n o w n   f i e l d   t h a t   i s   d r o p p e d   f r o m   t h e   o b j e c t ,   a n d   f o r   e a c h   d u p l i c a t e   f i e l d   t h a t   i s   e n c o u n t e r e d .   T h e   r e q u e s t   w i l l   s t i l l   s u c c e e d   i f   t h e r e   a r e   n o   o t h e r   e r r o r s ,   a n d   w i l l   o n l y   p e r s i s t   t h e   l a s t   o f   a n y   d u p l i c a t e   f i e l d s .   T h i s   i s   t h e   d e f a u l t   i n   v 1 . 2 3 +   -   S t r i c t :   T h i s   w i l l   f a i l   t h e   r e q u e s t   w i t h   a   B a d R e q u e s t   e r r o r   i f   a n y   u n k n o w n   f i e l d s   w o u l d   b e   d r o p p e d   f r o m   t h e   o b j e c t ,   o r   i f   a n y   d u p l i c a t e   f i e l d s   a r e   p r e s e n t .   T h e   e r r o r   r e t u r n e d   f r o m   t h e   s e r v e r   w i l l   c o n t a i n   a l l   u n k n o w n   a n d   d u p l i c a t e   f i e l d s   e n c o u n t e r e d .


Question: What is force?

Answer: F o r c e   i s   g o i n g   t o   " f o r c e "   A p p l y   r e q u e s t s .   I t   m e a n s   u s e r   w i l l   r e - a c q u i r e   c o n f l i c t i n g   f i e l d s   o w n e d   b y   o t h e r   p e o p l e .   F o r c e   f l a g   m u s t   b e   u n s e t   f o r   n o n - a p p l y   p a t c h   r e q u e s t s .


Question: What is gracePeriodSeconds?

Answer: T h e   d u r a t i o n   i n   s e c o n d s   b e f o r e   t h e   o b j e c t   s h o u l d   b e   d e l e t e d .   V a l u e   m u s t   b e   n o n - n e g a t i v e   i n t e g e r .   T h e   v a l u e   z e r o   i n d i c a t e s   d e l e t e   i m m e d i a t e l y .   I f   t h i s   v a l u e   i s   n i l ,   t h e   d e f a u l t   g r a c e   p e r i o d   f o r   t h e   s p e c i f i e d   t y p e   w i l l   b e   u s e d .   D e f a u l t s   t o   a   p e r   o b j e c t   v a l u e   i f   n o t   s p e c i f i e d .   z e r o   m e a n s   d e l e t e   i m m e d i a t e l y .


Question: What is ignoreStoreReadErrorWithClusterBreakingPotential?

Answer: i f   s e t   t o   t r u e ,   i t   w i l l   t r i g g e r   a n   u n s a f e   d e l e t i o n   o f   t h e   r e s o u r c e   i n   c a s e   t h e   n o r m a l   d e l e t i o n   f l o w   f a i l s   w i t h   a   c o r r u p t   o b j e c t   e r r o r .   A   r e s o u r c e   i s   c o n s i d e r e d   c o r r u p t   i f   i t   c a n   n o t   b e   r e t r i e v e d   f r o m   t h e   u n d e r l y i n g   s t o r a g e   s u c c e s s f u l l y   b e c a u s e   o f   a )   i t s   d a t a   c a n   n o t   b e   t r a n s f o r m e d   e . g .   d e c r y p t i o n   f a i l u r e ,   o r   b )   i t   f a i l s   t o   d e c o d e   i n t o   a n   o b j e c t .   N O T E :   u n s a f e   d e l e t i o n   i g n o r e s   f i n a l i z e r   c o n s t r a i n t s ,   s k i p s   p r e c o n d i t i o n   c h e c k s ,   a n d   r e m o v e s   t h e   o b j e c t   f r o m   t h e   s t o r a g e .   W A R N I N G :   T h i s   m a y   p o t e n t i a l l y   b r e a k   t h e   c l u s t e r   i f   t h e   w o r k l o a d   a s s o c i a t e d   w i t h   t h e   r e s o u r c e   b e i n g   u n s a f e - d e l e t e d   r e l i e s   o n   n o r m a l   d e l e t i o n   f l o w .   U s e   o n l y   i f   y o u   R E A L L Y   k n o w   w h a t   y o u   a r e   d o i n g .   T h e   d e f a u l t   v a l u e   i s   f a l s e ,   a n d   t h e   u s e r   m u s t   o p t   i n   t o   e n a b l e   i t


Question: What is labelSelector?

Answer: A   s e l e c t o r   t o   r e s t r i c t   t h e   l i s t   o f   r e t u r n e d   o b j e c t s   b y   t h e i r   l a b e l s .   D e f a u l t s   t o   e v e r y t h i n g .


Question: What is limit?

Answer: l i m i t   i s   a   m a x i m u m   n u m b e r   o f   r e s p o n s e s   t o   r e t u r n   f o r   a   l i s t   c a l l .   I f   m o r e   i t e m s   e x i s t ,   t h e   s e r v e r   w i l l   s e t   t h e   c o n t i n u e   f i e l d   o n   t h e   l i s t   m e t a d a t a   t o   a   v a l u e   t h a t   c a n   b e   u s e d   w i t h   t h e   s a m e   i n i t i a l   q u e r y   t o   r e t r i e v e   t h e   n e x t   s e t   o f   r e s u l t s .   S e t t i n g   a   l i m i t   m a y   r e t u r n   f e w e r   t h a n   t h e   r e q u e s t e d   a m o u n t   o f   i t e m s   ( u p   t o   z e r o   i t e m s )   i n   t h e   e v e n t   a l l   r e q u e s t e d   o b j e c t s   a r e   f i l t e r e d   o u t   a n d   c l i e n t s   s h o u l d   o n l y   u s e   t h e   p r e s e n c e   o f   t h e   c o n t i n u e   f i e l d   t o   d e t e r m i n e   w h e t h e r   m o r e   r e s u l t s   a r e   a v a i l a b l e .   S e r v e r s   m a y   c h o o s e   n o t   t o   s u p p o r t   t h e   l i m i t   a r g u m e n t   a n d   w i l l   r e t u r n   a l l   o f   t h e   a v a i l a b l e   r e s u l t s .   I f   l i m i t   i s   s p e c i f i e d   a n d   t h e   c o n t i n u e   f i e l d   i s   e m p t y ,   c l i e n t s   m a y   a s s u m e   t h a t   n o   m o r e   r e s u l t s   a r e   a v a i l a b l e .   T h i s   f i e l d   i s   n o t   s u p p o r t e d   i f   w a t c h   i s   t r u e .   T h e   s e r v e r   g u a r a n t e e s   t h a t   t h e   o b j e c t s   r e t u r n e d   w h e n   u s i n g   c o n t i n u e   w i l l   b e   i d e n t i c a l   t o   i s s u i n g   a   s i n g l e   l i s t   c a l l   w i t h o u t   a   l i m i t   -   t h a t   i s ,   n o   o b j e c t s   c r e a t e d ,   m o d i f i e d ,   o r   d e l e t e d   a f t e r   t h e   f i r s t   r e q u e s t   i s   i s s u e d   w i l l   b e   i n c l u d e d   i n   a n y   s u b s e q u e n t   c


Question: What is namespace?

Answer: o b j e c t   n a m e   a n d   a u t h   s c o p e ,   s u c h   a s   f o r   t e a m s   a n d   p r o j e c t s


Question: What is pretty?

Answer: I f   ' t r u e ' ,   t h e n   t h e   o u t p u t   i s   p r e t t y   p r i n t e d .   D e f a u l t s   t o   ' f a l s e '   u n l e s s   t h e   u s e r - a g e n t   i n d i c a t e s   a   b r o w s e r   o r   c o m m a n d - l i n e   H T T P   t o o l   ( c u r l   a n d   w g e t ) .


Question: What is propagationPolicy?

Answer: W h e t h e r   a n d   h o w   g a r b a g e   c o l l e c t i o n   w i l l   b e   p e r f o r m e d .   E i t h e r   t h i s   f i e l d   o r   O r p h a n D e p e n d e n t s   m a y   b e   s e t ,   b u t   n o t   b o t h .   T h e   d e f a u l t   p o l i c y   i s   d e c i d e d   b y   t h e   e x i s t i n g   f i n a l i z e r   s e t   i n   t h e   m e t a d a t a . f i n a l i z e r s   a n d   t h e   r e s o u r c e - s p e c i f i c   d e f a u l t   p o l i c y .   A c c e p t a b l e   v a l u e s   a r e :   ' O r p h a n '   -   o r p h a n   t h e   d e p e n d e n t s ;   ' B a c k g r o u n d '   -   a l l o w   t h e   g a r b a g e   c o l l e c t o r   t o   d e l e t e   t h e   d e p e n d e n t s   i n   t h e   b a c k g r o u n d ;   ' F o r e g r o u n d '   -   a   c a s c a d i n g   p o l i c y   t h a t   d e l e t e s   a l l   d e p e n d e n t s   i n   t h e   f o r e g r o u n d .


Question: What is resourceVersion?

Answer: r e s o u r c e V e r s i o n   s e t s   a   c o n s t r a i n t   o n   w h a t   r e s o u r c e   v e r s i o n s   a   r e q u e s t   m a y   b e   s e r v e d   f r o m .   S e e   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / u s i n g - a p i / a p i - c o n c e p t s / # r e s o u r c e - v e r s i o n s   f o r   d e t a i l s .   D e f a u l t s   t o   u n s e t


Question: What is resourceVersionMatch?

Answer: r e s o u r c e V e r s i o n M a t c h   d e t e r m i n e s   h o w   r e s o u r c e V e r s i o n   i s   a p p l i e d   t o   l i s t   c a l l s .   I t   i s   h i g h l y   r e c o m m e n d e d   t h a t   r e s o u r c e V e r s i o n M a t c h   b e   s e t   f o r   l i s t   c a l l s   w h e r e   r e s o u r c e V e r s i o n   i s   s e t   S e e   h t t p s : / / k u b e r n e t e s . i o / d o c s / r e f e r e n c e / u s i n g - a p i / a p i - c o n c e p t s / # r e s o u r c e - v e r s i o n s   f o r   d e t a i l s .   D e f a u l t s   t o   u n s e t


Question: What is sendInitialEvents?

Answer: s e n d I n i t i a l E v e n t s = t r u e   m a y   b e   s e t   t o g e t h e r   w i t h   w a t c h = t r u e .   I n   t h a t   c a s e ,   t h e   w a t c h   s t r e a m   w i l l   b e g i n   w i t h   s y n t h e t i c   e v e n t s   t o   p r o d u c e   t h e   c u r r e n t   s t a t e   o f   o b j e c t s   i n   t h e   c o l l e c t i o n .   O n c e   a l l   s u c h   e v e n t s   h a v e   b e e n   s e n t ,   a   s y n t h e t i c   " B o o k m a r k "   e v e n t   w i l l   b e   s e n t .   T h e   b o o k m a r k   w i l l   r e p o r t   t h e   R e s o u r c e V e r s i o n   ( R V )   c o r r e s p o n d i n g   t o   t h e   s e t   o f   o b j e c t s ,   a n d   b e   m a r k e d   w i t h   " k 8 s . i o / i n i t i a l - e v e n t s - e n d " :   " t r u e "   a n n o t a t i o n .   A f t e r w a r d s ,   t h e   w a t c h   s t r e a m   w i l l   p r o c e e d   a s   u s u a l ,   s e n d i n g   w a t c h   e v e n t s   c o r r e s p o n d i n g   t o   c h a n g e s   ( s u b s e q u e n t   t o   t h e   R V )   t o   o b j e c t s   w a t c h e d .   W h e n   s e n d I n i t i a l E v e n t s   o p t i o n   i s   s e t ,   w e   r e q u i r e   r e s o u r c e V e r s i o n M a t c h   o p t i o n   t o   a l s o   b e   s e t .   T h e   s e m a n t i c   o f   t h e   w a t c h   r e q u e s t   i s   a s   f o l l o w i n g :   -   r e s o u r c e V e r s i o n M a t c h   =   N o t O l d e r T h a n   i s   i n t e r p r e t e d   a s   " d a t a   a t   l e a s t   a s   n e w   a s   t h e   p r o v i d e d   r e s o u r c e V e r s i o n "   a n d   t h e   b o o k m a r k   e v e n t   i s   s e n d   w h e n   t h e   s t a t e   i s   s y n c e d   t o   a   r e s o u r c e V e r s i o n   a t   l e a s t   a s   f r e s h   a s   t h e   o n e   p r o v i d e d   b y   t h e   L i s t O p t i o n s .   I f   r e s o u r c e V e r s i o n   i s   u n s e t ,   t h i s   i s   i n t e r p r e t e d   a s


Question: What is timeoutSeconds?

Answer: T i m e o u t   f o r   t h e   l i s t / w a t c h   c a l l .   T h i s   l i m i t s   t h e   d u r a t i o n   o f   t h e   c a l l ,   r e g a r d l e s s   o f   a n y   a c t i v i t y   o r   i n a c t i v i t y .


Question: What is watch?

Answer: W a t c h   f o r   c h a n g e s   t o   t h e   d e s c r i b e d   r e s o u r c e s   a n d   r e t u r n   t h e m   a s   a   s t r e a m   o f   a d d ,   u p d a t e ,   a n d   r e m o v e   n o t i f i c a t i o n s .   S p e c i f y   r e s o u r c e V e r s i o n .   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Node metrics data?

Answer: Node metrics dataMechanisms for accessing metrics at node, volume, pod and container level, as seen by the kubelet.The kubelet gathers metric statistics at the node, volume, pod and container level, and emits this information in the Summary API.You can send a proxied request to the stats summary API via the Kubernetes API server.Here is an example of a Summary API request for a node named minikube:kubectl get --raw "/api/v1/nodes/minikube/proxy/stats/summary" Here is the same API call using curl:# You need to run "kubectl proxy" first # Change 8080 to the port that "kubectl proxy" assigns curl http://localhost:8080/api/v1/nodes/minikube/proxy/stats/summary Note:Beginning with metrics-server 0.6.x, metrics-server queries the /metrics/resource kubelet endpoint, and not /stats/summary.Summary metrics API sourceBy default, Kubernetes fetches node summary metrics data using an embedded cAdvisor that runs within the kubelet. If you enable the PodAndContainerStatsFromCRI feature gate in your cluster, and you use a container runtime that supports statistics access via Container Runtime Interface (CRI), then the kubelet fetches Pod- and container-level metric data using CRI, and not via cAdvisor.Pressure Stall Information (PSI)FEATURE STATE: Kubernetes v1.34 [beta]As a beta feature, Kubernetes lets you configure kubelet to collect Linux kernel Pressure Stall Information (PSI) for CPU, memory, and I/O usage. The information is collected at node, pod and container level. See Summary API for detailed schema. This feature is enabled by default, by setting the KubeletPSI feature gate. The information is also exposed in Prometheus metrics.You can learn how to interpret the PSI metrics in Understand PSI Metrics.RequirementsPressure Stall Information requires:Linux kernel versions 4.20 or later.cgroup v2What's nextThe task pages for Troubleshooting Clusters discuss how to use a metrics pipeline that rely on these data.


Question: How does Node metrics data work?

Answer: Node metrics dataMechanisms for accessing metrics at node, volume, pod and container level, as seen by the kubelet.The kubelet gathers metric statistics at the node, volume, pod and container level, and emits this information in the Summary API.You can send a proxied request to the stats summary API via the Kubernetes API server.Here is an example of a Summary API request for a node named minikube:kubectl get --raw "/api/v1/nodes/minikube/proxy/stats/summary" Here is the same API call using curl:# You need to run "kubectl proxy" first # Change 8080 to the port that "kubectl proxy" assigns curl http://localhost:8080/api/v1/nodes/minikube/proxy/stats/summary Note:Beginning with metrics-server 0.6.x, metrics-server queries the /metrics/resource kubelet endpoint, and not /stats/summary.Summary metrics API sourceBy default, Kubernetes fetches node summary metrics data using an embedded cAdvisor that runs within the kubelet. If you enable the PodAndContainerStatsFromCRI feature gate in your cluster, and you use a container runtime that supports statistics access via Container Runtime Interface (CRI), then the kubelet fetches Pod- and container-level metric data using CRI, and not via cAdvisor.Pressure Stall Information (PSI)FEATURE STATE: Kubernetes v1.34 [beta]As a beta feature, Kubernetes lets you configure kubelet to collect Linux kernel Pressure Stall Information (PSI) for CPU, memory, and I/O usage. The information is collected at node, pod and container level. See Summary API for detailed schema. This feature is enabled by default, by setting the KubeletPSI feature gate. The information is also exposed in Prometheus metrics.You can learn how to interpret the PSI metrics in Understand PSI Metrics.RequirementsPressure Stall Information requires:Linux kernel versions 4.20 or later.cgroup v2What's nextThe task pages for Troubleshooting Clusters discuss how to use a metrics pipeline that rely on these data.


Question: When would you use Node metrics data?

Answer: Node metrics dataMechanisms for accessing metrics at node, volume, pod and container level, as seen by the kubelet.The kubelet gathers metric statistics at the node, volume, pod and container level, and emits this information in the Summary API.You can send a proxied request to the stats summary API via the Kubernetes API server.Here is an example of a Summary API request for a node named minikube:kubectl get --raw "/api/v1/nodes/minikube/proxy/stats/summary" Here is the same API call using curl:# You need to run "kubectl proxy" first # Change 8080 to the port that "kubectl proxy" assigns curl http://localhost:8080/api/v1/nodes/minikube/proxy/stats/summary Note:Beginning with metrics-server 0.6.x, metrics-server queries the /metrics/resource kubelet endpoint, and not /stats/summary.Summary metrics API sourceBy default, Kubernetes fetches node summary metrics data using an embedded cAdvisor that runs within the kubelet. If you enable the PodAndContainerStatsFromCRI feature gate in your cluster, and you use a container runtime that supports statistics access via Container Runtime Interface (CRI), then the kubelet fetches Pod- and container-level metric data using CRI, and not via cAdvisor.Pressure Stall Information (PSI)FEATURE STATE: Kubernetes v1.34 [beta]As a beta feature, Kubernetes lets you configure kubelet to collect Linux kernel Pressure Stall Information (PSI) for CPU, memory, and I/O usage. The information is collected at node, pod and container level. See Summary API for detailed schema. This feature is enabled by default, by setting the KubeletPSI feature gate. The information is also exposed in Prometheus metrics.You can learn how to interpret the PSI metrics in Understand PSI Metrics.RequirementsPressure Stall Information requires:Linux kernel versions 4.20 or later.cgroup v2What's nextThe task pages for Troubleshooting Clusters discuss how to use a metrics pipeline that rely on these data.


Question: What are the benefits of Node metrics data?

Answer: Node metrics dataMechanisms for accessing metrics at node, volume, pod and container level, as seen by the kubelet.The kubelet gathers metric statistics at the node, volume, pod and container level, and emits this information in the Summary API.You can send a proxied request to the stats summary API via the Kubernetes API server.Here is an example of a Summary API request for a node named minikube:kubectl get --raw "/api/v1/nodes/minikube/proxy/stats/summary" Here is the same API call using curl:# You need to run "kubectl proxy" first # Change 8080 to the port that "kubectl proxy" assigns curl http://localhost:8080/api/v1/nodes/minikube/proxy/stats/summary Note:Beginning with metrics-server 0.6.x, metrics-server queries the /metrics/resource kubelet endpoint, and not /stats/summary.Summary metrics API sourceBy default, Kubernetes fetches node summary metrics data using an embedded cAdvisor that runs within the kubelet. If you enable the PodAndContainerStatsFromCRI feature gate in your cluster, and you use a container runtime that supports statistics access via Container Runtime Interface (CRI), then the kubelet fetches Pod- and container-level metric data using CRI, and not via cAdvisor.Pressure Stall Information (PSI)FEATURE STATE: Kubernetes v1.34 [beta]As a beta feature, Kubernetes lets you configure kubelet to collect Linux kernel Pressure Stall Information (PSI) for CPU, memory, and I/O usage. The information is collected at node, pod and container level. See Summary API for detailed schema. This feature is enabled by default, by setting the KubeletPSI feature gate. The information is also exposed in Prometheus metrics.You can learn how to interpret the PSI metrics in Understand PSI Metrics.RequirementsPressure Stall Information requires:Linux kernel versions 4.20 or later.cgroup v2What's nextThe task pages for Troubleshooting Clusters discuss how to use a metrics pipeline that rely on these data.


Question: What is Node metrics data?

Answer: T h e   k u b e l e t   g a t h e r s   m e t r i c   s t a t i s t i c s   a t   t h e   n o d e ,   v o l u m e ,   p o d   a n d   c o n t a i n e r   l e v e l ,   a n d   e m i t s   t h i s   i n f o r m a t i o n   i n   t h e   S u m m a r y   A P I .   Y o u   c a n   s e n d   a   p r o x i e d   r e q u e s t   t o   t h e   s t a t s   s u m m a r y   A P I   v i a   t h e   K u b e r n e t e s   A P I   s e r v e r .   H e r e   i s   a n   e x a m p l e   o f   a   S u m m a r y   A P I   r e q u e s t   f o r   a   n o d e   n a m e d   m i n i k u b e :   k u b e c t l   g e t   - - r a w   " / a p i / v 1 / n o d e s / m i n i k u b e / p r o x y / s t a t s / s u m m a r y "   H e r e   i s   t h e   s a m e   A P I   c a l l   u s i n g   c u r l :   #   Y o u   n e e d   t o   r u n   " k u b e c t l   p r o x y "   f i r s t   #   C h a n g e   8 0 8 0   t o   t h e   p o r t   t h a t   " k u b e c t l   p r o x y "   a s s i g n s   c u r l   h t t p : / / l o c a l h o s t : 8 0 8 0 / a p i / v 1 / n o d e s / m i n i k u b e / p r o x y / s t a t s / s u m m a r y


Question: What is Summary metrics API source?

Answer: B y   d e f a u l t ,   K u b e r n e t e s   f e t c h e s   n o d e   s u m m a r y   m e t r i c s   d a t a   u s i n g   a n   e m b e d d e d   c A d v i s o r   t h a t   r u n s   w i t h i n   t h e   k u b e l e t .   I f   y o u   e n a b l e   t h e   P o d A n d C o n t a i n e r S t a t s F r o m C R I   f e a t u r e   g a t e   i n   y o u r   c l u s t e r ,   a n d   y o u   u s e   a   c o n t a i n e r   r u n t i m e   t h a t   s u p p o r t s   s t a t i s t i c s   a c c e s s   v i a   C o n t a i n e r   R u n t i m e   I n t e r f a c e   ( C R I ) ,   t h e n   t h e   k u b e l e t   f e t c h e s   P o d -   a n d   c o n t a i n e r - l e v e l   m e t r i c   d a t a   u s i n g   C R I ,   a n d   n o t   v i a   c A d v i s o r .


Question: What is Pressure Stall Information (PSI)?

Answer: A s   a   b e t a   f e a t u r e ,   K u b e r n e t e s   l e t s   y o u   c o n f i g u r e   k u b e l e t   t o   c o l l e c t   L i n u x   k e r n e l   P r e s s u r e   S t a l l   I n f o r m a t i o n   ( P S I )   f o r   C P U ,   m e m o r y ,   a n d   I / O   u s a g e .   T h e   i n f o r m a t i o n   i s   c o l l e c t e d   a t   n o d e ,   p o d   a n d   c o n t a i n e r   l e v e l .   S e e   S u m m a r y   A P I   f o r   d e t a i l e d   s c h e m a .   T h i s   f e a t u r e   i s   e n a b l e d   b y   d e f a u l t ,   b y   s e t t i n g   t h e   K u b e l e t P S I   f e a t u r e   g a t e .   T h e   i n f o r m a t i o n   i s   a l s o   e x p o s e d   i n   P r o m e t h e u s   m e t r i c s .   Y o u   c a n   l e a r n   h o w   t o   i n t e r p r e t   t h e   P S I   m e t r i c s   i n   U n d e r s t a n d   P S I   M e t r i c s .


Question: What is Requirements?

Answer: P r e s s u r e   S t a l l   I n f o r m a t i o n   r e q u i r e s :   L i n u x   k e r n e l   v e r s i o n s   4 . 2 0   o r   l a t e r . c g r o u p   v 2


Question: What is What's next?

Answer: T h e   t a s k   p a g e s   f o r   T r o u b l e s h o o t i n g   C l u s t e r s   d i s c u s s   h o w   t o   u s e   a   m e t r i c s   p i p e l i n e   t h a t   r e l y   o n   t h e s e   d a t a .


Question: What is ValidatingWebhookConfiguration?

Answer: ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1import "k8s.io/api/admissionregistration/v1"ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1kind: ValidatingWebhookConfigurationmetadata (ObjectMeta)Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.webhooks ([]ValidatingWebhook)Patch strategy: merge on key nameMap: unique values on key name will be kept during a mergeWebhooks is a list of webhooks and the affected resources and operations.ValidatingWebhook describes an admission webhook and the resources and operations it applies to.webhooks.admissionReviewVersions ([]string), requiredAtomic: will be replaced during a mergeAdmissionReviewVersions is an ordered list of preferred AdmissionReview versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.webhooks.clientConfig (WebhookClientConfig), requiredClientConfig defines how to communicate with the hook. RequiredWebhookClientConfig contains the information to make a TLS connection with the webhookwebhooks.clientConfig.caBundle ([]byte)caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.webhooks.clientConfig.service (ServiceReference)service is a reference to the service for this webhook. Either service or url must be specified.If the webhook is running within the cluster, then you should use service.ServiceReference holds a reference to Service.legacy.k8s.iowebhooks.clientConfig.service.name (string), requiredname is the name of the service. Requiredwebhooks.clientConfig.service.namespace (string), requirednamespace is the namespace of the service. Requiredwebhooks.clientConfig.service.path (string)path is an optional URL path which will be sent in any request to this service.webhooks.clientConfig.service.port (int32)If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. port should be a valid port number (1-65535, inclusive).webhooks.clientConfig.url (string)url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of url or service must be specified.The host should not refer to a service running in the cluster; use the service field instead. The host might be resol


Question: How does ValidatingWebhookConfiguration work?

Answer: ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1import "k8s.io/api/admissionregistration/v1"ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1kind: ValidatingWebhookConfigurationmetadata (ObjectMeta)Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.webhooks ([]ValidatingWebhook)Patch strategy: merge on key nameMap: unique values on key name will be kept during a mergeWebhooks is a list of webhooks and the affected resources and operations.ValidatingWebhook describes an admission webhook and the resources and operations it applies to.webhooks.admissionReviewVersions ([]string), requiredAtomic: will be replaced during a mergeAdmissionReviewVersions is an ordered list of preferred AdmissionReview versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.webhooks.clientConfig (WebhookClientConfig), requiredClientConfig defines how to communicate with the hook. RequiredWebhookClientConfig contains the information to make a TLS connection with the webhookwebhooks.clientConfig.caBundle ([]byte)caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.webhooks.clientConfig.service (ServiceReference)service is a reference to the service for this webhook. Either service or url must be specified.If the webhook is running within the cluster, then you should use service.ServiceReference holds a reference to Service.legacy.k8s.iowebhooks.clientConfig.service.name (string), requiredname is the name of the service. Requiredwebhooks.clientConfig.service.namespace (string), requirednamespace is the namespace of the service. Requiredwebhooks.clientConfig.service.path (string)path is an optional URL path which will be sent in any request to this service.webhooks.clientConfig.service.port (int32)If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. port should be a valid port number (1-65535, inclusive).webhooks.clientConfig.url (string)url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of url or service must be specified.The host should not refer to a service running in the cluster; use the service field instead. The host might be resol


Question: When would you use ValidatingWebhookConfiguration?

Answer: ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1import "k8s.io/api/admissionregistration/v1"ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1kind: ValidatingWebhookConfigurationmetadata (ObjectMeta)Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.webhooks ([]ValidatingWebhook)Patch strategy: merge on key nameMap: unique values on key name will be kept during a mergeWebhooks is a list of webhooks and the affected resources and operations.ValidatingWebhook describes an admission webhook and the resources and operations it applies to.webhooks.admissionReviewVersions ([]string), requiredAtomic: will be replaced during a mergeAdmissionReviewVersions is an ordered list of preferred AdmissionReview versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.webhooks.clientConfig (WebhookClientConfig), requiredClientConfig defines how to communicate with the hook. RequiredWebhookClientConfig contains the information to make a TLS connection with the webhookwebhooks.clientConfig.caBundle ([]byte)caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.webhooks.clientConfig.service (ServiceReference)service is a reference to the service for this webhook. Either service or url must be specified.If the webhook is running within the cluster, then you should use service.ServiceReference holds a reference to Service.legacy.k8s.iowebhooks.clientConfig.service.name (string), requiredname is the name of the service. Requiredwebhooks.clientConfig.service.namespace (string), requirednamespace is the namespace of the service. Requiredwebhooks.clientConfig.service.path (string)path is an optional URL path which will be sent in any request to this service.webhooks.clientConfig.service.port (int32)If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. port should be a valid port number (1-65535, inclusive).webhooks.clientConfig.url (string)url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of url or service must be specified.The host should not refer to a service running in the cluster; use the service field instead. The host might be resol


Question: What are the benefits of ValidatingWebhookConfiguration?

Answer: ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1import "k8s.io/api/admissionregistration/v1"ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.apiVersion: admissionregistration.k8s.io/v1kind: ValidatingWebhookConfigurationmetadata (ObjectMeta)Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.webhooks ([]ValidatingWebhook)Patch strategy: merge on key nameMap: unique values on key name will be kept during a mergeWebhooks is a list of webhooks and the affected resources and operations.ValidatingWebhook describes an admission webhook and the resources and operations it applies to.webhooks.admissionReviewVersions ([]string), requiredAtomic: will be replaced during a mergeAdmissionReviewVersions is an ordered list of preferred AdmissionReview versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.webhooks.clientConfig (WebhookClientConfig), requiredClientConfig defines how to communicate with the hook. RequiredWebhookClientConfig contains the information to make a TLS connection with the webhookwebhooks.clientConfig.caBundle ([]byte)caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.webhooks.clientConfig.service (ServiceReference)service is a reference to the service for this webhook. Either service or url must be specified.If the webhook is running within the cluster, then you should use service.ServiceReference holds a reference to Service.legacy.k8s.iowebhooks.clientConfig.service.name (string), requiredname is the name of the service. Requiredwebhooks.clientConfig.service.namespace (string), requirednamespace is the namespace of the service. Requiredwebhooks.clientConfig.service.path (string)path is an optional URL path which will be sent in any request to this service.webhooks.clientConfig.service.port (int32)If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. port should be a valid port number (1-65535, inclusive).webhooks.clientConfig.url (string)url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of url or service must be specified.The host should not refer to a service running in the cluster; use the service field instead. The host might be resol


Question: What is ValidatingWebhookConfiguration?

Answer: a p i V e r s i o n :   a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1   i m p o r t   " k 8 s . i o / a p i / a d m i s s i o n r e g i s t r a t i o n / v 1 "


Question: What is ValidatingWebhookConfiguration?

Answer: V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   d e s c r i b e s   t h e   c o n f i g u r a t i o n   o f   a n d   a d m i s s i o n   w e b h o o k   t h a t   a c c e p t   o r   r e j e c t   a n d   o b j e c t   w i t h o u t   c h a n g i n g   i t .   a p i V e r s i o n :   a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 k i n d :   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n m e t a d a t a   ( O b j e c t M e t a ) S t a n d a r d   o b j e c t   m e t a d a t a ;   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a . w e b h o o k s   ( [ ] V a l i d a t i n g W e b h o o k ) P a t c h   s t r a t e g y :   m e r g e   o n   k e y   n a m e M a p :   u n i q u e   v a l u e s   o n   k e y   n a m e   w i l l   b e   k e p t   d u r i n g   a   m e r g e W e b h o o k s   i s   a   l i s t   o f   w e b h o o k s   a n d   t h e   a f f e c t e d   r e s o u r c e s   a n d   o p e r a t i o n s . V a l i d a t i n g W e b h o o k   d e s c r i b e s   a n   a d m i s s i o n   w e b h o o k   a n d   t h e   r e s o u r c e s   a n d   o p e r a t i o n s   i t   a p p l i e s   t o . w e b h o o k s . a d m i s s i o n R e v i e w V e r s i o n s   ( [ ] s t r i n g ) ,   r e q u i r e d A t o m i c :   w i l l   b e   r e p l a c e d   d u r i n g   a   m e r g e A d m i s s i o n R e v i e w V e r s i o n s   i s   a n   o r d e r e d   l i s t   o f   p r e f e r r e d   A d m i s s i o n R e v i e w   v e r s i o n s   t h e   W e b h o o k   e x p e c t s .   A P I   s e r v e r   w i l l   t r y   t o   u s e   f i r s t   v e r s i o n   i n   t h e   l i s t   w h i c h   i t   s u p p o r t s .   I f   n o n e   o f   t h e   v e r s i o n s   s p e c i f i e d   i n   t h i s   l i s t   s u p p o r t e d   b y   A P I   s e r v e r ,   v a l i


Question: What is ValidatingWebhookConfigurationList?

Answer: V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n L i s t   i s   a   l i s t   o f   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n .   i t e m s   ( [ ] V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) ,   r e q u i r e d L i s t   o f   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n . a p i V e r s i o n   ( s t r i n g ) A P I V e r s i o n   d e f i n e s   t h e   v e r s i o n e d   s c h e m a   o f   t h i s   r e p r e s e n t a t i o n   o f   a n   o b j e c t .   S e r v e r s   s h o u l d   c o n v e r t   r e c o g n i z e d   s c h e m a s   t o   t h e   l a t e s t   i n t e r n a l   v a l u e ,   a n d   m a y   r e j e c t   u n r e c o g n i z e d   v a l u e s .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # r e s o u r c e s k i n d   ( s t r i n g ) K i n d   i s   a   s t r i n g   v a l u e   r e p r e s e n t i n g   t h e   R E S T   r e s o u r c e   t h i s   o b j e c t   r e p r e s e n t s .   S e r v e r s   m a y   i n f e r   t h i s   f r o m   t h e   e n d p o i n t   t h e   c l i e n t   s u b m i t s   r e q u e s t s   t o .   C a n n o t   b e   u p d a t e d .   I n   C a m e l C a s e .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # t y p e s - k i n d s m e t a d a t a   ( L i s t M e t a ) S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # t y p e s - k i n d s   i t e m s   ( [ ] V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) ,   r e q u i r e d   L i s t   o f   V a l i d a t i n g W


Question: What is HTTP Request?

Answer: G E T   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: b o d y :   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   b o d y :   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   O K   2 0 1   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   C r e a t e d   2 0 2   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n b o d y :   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   b o d y :   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   O K   2 0 1   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   O K   2 0 1   ( V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 / v a l i d a t i n g w e b h o o k c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   l a b e l S e l e c t o r   (


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Services, Load Balancing, and Networking?

Answer: This is the multi-page printable view of this section. Click here to print.Return to the regular view of this page.Services, Load Balancing, and NetworkingConcepts and resources behind networking in Kubernetes.1: Service2: Ingress3: Ingress Controllers4: Gateway API5: EndpointSlices6: Network Policies7: DNS for Services and Pods8: IPv4/IPv6 dual-stack9: Topology Aware Routing10: Networking on Windows11: Service ClusterIP allocation12: Service Internal Traffic PolicyThe Kubernetes network modelThe Kubernetes network model is built out of several pieces:Each pod in a cluster gets its own unique cluster-wide IP address.A pod has its own private network namespace which is shared by all of the containers within the pod. Processes running in different containers in the same pod can communicate with each other over localhost.The pod network (also called a cluster network) handles communication between pods. It ensures that (barring intentional network segmentation):All pods can communicate with all other pods, whether they are on the same node or on different nodes. Pods can communicate with each other directly, without the use of proxies or address translation (NAT).On Windows, this rule does not apply to host-network pods.Agents on a node (such as system daemons, or kubelet) can communicate with all pods on that node.The Service API lets you provide a stable (long lived) IP address or hostname for a service implemented by one or more backend pods, where the individual pods making up the service can change over time.Kubernetes automatically manages EndpointSlice objects to provide information about the pods currently backing a Service.A service proxy implementation monitors the set of Service and EndpointSlice objects, and programs the data plane to route service traffic to its backends, by using operating system or cloud provider APIs to intercept or rewrite packets.The Gateway API (or its predecessor, Ingress) allows you to make Services accessible to clients that are outside the cluster.A simpler, but less-configurable, mechanism for cluster ingress is available via the Service API's type: LoadBalancer, when using a supported Cloud Provider.NetworkPolicy is a built-in Kubernetes API that allows you to control traffic between pods, or between pods and the outside world.In older container systems, there was no automatic connectivity between containers on different hosts, and so it was often necessary to explicitly create links between containers, or to map container ports to host ports to make them reachable by containers on other hosts. This is not needed in Kubernetes; Kubernetes's model is that pods can be treated much like VMs or physical hosts from the perspectives of port allocation, naming, service discovery, load balancing, application configuration, and migration.Only a few parts of this model are implemented by Kubernetes itself. For the other parts, Kubernetes defines the APIs, but the corresponding functionality is provided by external com


Question: How does Services, Load Balancing, and Networking work?

Answer: This is the multi-page printable view of this section. Click here to print.Return to the regular view of this page.Services, Load Balancing, and NetworkingConcepts and resources behind networking in Kubernetes.1: Service2: Ingress3: Ingress Controllers4: Gateway API5: EndpointSlices6: Network Policies7: DNS for Services and Pods8: IPv4/IPv6 dual-stack9: Topology Aware Routing10: Networking on Windows11: Service ClusterIP allocation12: Service Internal Traffic PolicyThe Kubernetes network modelThe Kubernetes network model is built out of several pieces:Each pod in a cluster gets its own unique cluster-wide IP address.A pod has its own private network namespace which is shared by all of the containers within the pod. Processes running in different containers in the same pod can communicate with each other over localhost.The pod network (also called a cluster network) handles communication between pods. It ensures that (barring intentional network segmentation):All pods can communicate with all other pods, whether they are on the same node or on different nodes. Pods can communicate with each other directly, without the use of proxies or address translation (NAT).On Windows, this rule does not apply to host-network pods.Agents on a node (such as system daemons, or kubelet) can communicate with all pods on that node.The Service API lets you provide a stable (long lived) IP address or hostname for a service implemented by one or more backend pods, where the individual pods making up the service can change over time.Kubernetes automatically manages EndpointSlice objects to provide information about the pods currently backing a Service.A service proxy implementation monitors the set of Service and EndpointSlice objects, and programs the data plane to route service traffic to its backends, by using operating system or cloud provider APIs to intercept or rewrite packets.The Gateway API (or its predecessor, Ingress) allows you to make Services accessible to clients that are outside the cluster.A simpler, but less-configurable, mechanism for cluster ingress is available via the Service API's type: LoadBalancer, when using a supported Cloud Provider.NetworkPolicy is a built-in Kubernetes API that allows you to control traffic between pods, or between pods and the outside world.In older container systems, there was no automatic connectivity between containers on different hosts, and so it was often necessary to explicitly create links between containers, or to map container ports to host ports to make them reachable by containers on other hosts. This is not needed in Kubernetes; Kubernetes's model is that pods can be treated much like VMs or physical hosts from the perspectives of port allocation, naming, service discovery, load balancing, application configuration, and migration.Only a few parts of this model are implemented by Kubernetes itself. For the other parts, Kubernetes defines the APIs, but the corresponding functionality is provided by external com


Question: When would you use Services, Load Balancing, and Networking?

Answer: This is the multi-page printable view of this section. Click here to print.Return to the regular view of this page.Services, Load Balancing, and NetworkingConcepts and resources behind networking in Kubernetes.1: Service2: Ingress3: Ingress Controllers4: Gateway API5: EndpointSlices6: Network Policies7: DNS for Services and Pods8: IPv4/IPv6 dual-stack9: Topology Aware Routing10: Networking on Windows11: Service ClusterIP allocation12: Service Internal Traffic PolicyThe Kubernetes network modelThe Kubernetes network model is built out of several pieces:Each pod in a cluster gets its own unique cluster-wide IP address.A pod has its own private network namespace which is shared by all of the containers within the pod. Processes running in different containers in the same pod can communicate with each other over localhost.The pod network (also called a cluster network) handles communication between pods. It ensures that (barring intentional network segmentation):All pods can communicate with all other pods, whether they are on the same node or on different nodes. Pods can communicate with each other directly, without the use of proxies or address translation (NAT).On Windows, this rule does not apply to host-network pods.Agents on a node (such as system daemons, or kubelet) can communicate with all pods on that node.The Service API lets you provide a stable (long lived) IP address or hostname for a service implemented by one or more backend pods, where the individual pods making up the service can change over time.Kubernetes automatically manages EndpointSlice objects to provide information about the pods currently backing a Service.A service proxy implementation monitors the set of Service and EndpointSlice objects, and programs the data plane to route service traffic to its backends, by using operating system or cloud provider APIs to intercept or rewrite packets.The Gateway API (or its predecessor, Ingress) allows you to make Services accessible to clients that are outside the cluster.A simpler, but less-configurable, mechanism for cluster ingress is available via the Service API's type: LoadBalancer, when using a supported Cloud Provider.NetworkPolicy is a built-in Kubernetes API that allows you to control traffic between pods, or between pods and the outside world.In older container systems, there was no automatic connectivity between containers on different hosts, and so it was often necessary to explicitly create links between containers, or to map container ports to host ports to make them reachable by containers on other hosts. This is not needed in Kubernetes; Kubernetes's model is that pods can be treated much like VMs or physical hosts from the perspectives of port allocation, naming, service discovery, load balancing, application configuration, and migration.Only a few parts of this model are implemented by Kubernetes itself. For the other parts, Kubernetes defines the APIs, but the corresponding functionality is provided by external com


Question: What are the benefits of Services, Load Balancing, and Networking?

Answer: This is the multi-page printable view of this section. Click here to print.Return to the regular view of this page.Services, Load Balancing, and NetworkingConcepts and resources behind networking in Kubernetes.1: Service2: Ingress3: Ingress Controllers4: Gateway API5: EndpointSlices6: Network Policies7: DNS for Services and Pods8: IPv4/IPv6 dual-stack9: Topology Aware Routing10: Networking on Windows11: Service ClusterIP allocation12: Service Internal Traffic PolicyThe Kubernetes network modelThe Kubernetes network model is built out of several pieces:Each pod in a cluster gets its own unique cluster-wide IP address.A pod has its own private network namespace which is shared by all of the containers within the pod. Processes running in different containers in the same pod can communicate with each other over localhost.The pod network (also called a cluster network) handles communication between pods. It ensures that (barring intentional network segmentation):All pods can communicate with all other pods, whether they are on the same node or on different nodes. Pods can communicate with each other directly, without the use of proxies or address translation (NAT).On Windows, this rule does not apply to host-network pods.Agents on a node (such as system daemons, or kubelet) can communicate with all pods on that node.The Service API lets you provide a stable (long lived) IP address or hostname for a service implemented by one or more backend pods, where the individual pods making up the service can change over time.Kubernetes automatically manages EndpointSlice objects to provide information about the pods currently backing a Service.A service proxy implementation monitors the set of Service and EndpointSlice objects, and programs the data plane to route service traffic to its backends, by using operating system or cloud provider APIs to intercept or rewrite packets.The Gateway API (or its predecessor, Ingress) allows you to make Services accessible to clients that are outside the cluster.A simpler, but less-configurable, mechanism for cluster ingress is available via the Service API's type: LoadBalancer, when using a supported Cloud Provider.NetworkPolicy is a built-in Kubernetes API that allows you to control traffic between pods, or between pods and the outside world.In older container systems, there was no automatic connectivity between containers on different hosts, and so it was often necessary to explicitly create links between containers, or to map container ports to host ports to make them reachable by containers on other hosts. This is not needed in Kubernetes; Kubernetes's model is that pods can be treated much like VMs or physical hosts from the perspectives of port allocation, naming, service discovery, load balancing, application configuration, and migration.Only a few parts of this model are implemented by Kubernetes itself. For the other parts, Kubernetes defines the APIs, but the corresponding functionality is provided by external com


Question: What is Services, Load Balancing, and Networking?

Answer: 1 :   S e r v i c e 2 :   I n g r e s s 3 :   I n g r e s s   C o n t r o l l e r s 4 :   G a t e w a y   A P I 5 :   E n d p o i n t S l i c e s 6 :   N e t w o r k   P o l i c i e s 7 :   D N S   f o r   S e r v i c e s   a n d   P o d s 8 :   I P v 4 / I P v 6   d u a l - s t a c k 9 :   T o p o l o g y   A w a r e   R o u t i n g 1 0 :   N e t w o r k i n g   o n   W i n d o w s 1 1 :   S e r v i c e   C l u s t e r I P   a l l o c a t i o n 1 2 :   S e r v i c e   I n t e r n a l   T r a f f i c   P o l i c y


Question: What is The Kubernetes network model?

Answer: T h e   K u b e r n e t e s   n e t w o r k   m o d e l   i s   b u i l t   o u t   o f   s e v e r a l   p i e c e s :   E a c h   p o d   i n   a   c l u s t e r   g e t s   i t s   o w n   u n i q u e   c l u s t e r - w i d e   I P   a d d r e s s . A   p o d   h a s   i t s   o w n   p r i v a t e   n e t w o r k   n a m e s p a c e   w h i c h   i s   s h a r e d   b y   a l l   o f   t h e   c o n t a i n e r s   w i t h i n   t h e   p o d .   P r o c e s s e s   r u n n i n g   i n   d i f f e r e n t   c o n t a i n e r s   i n   t h e   s a m e   p o d   c a n   c o m m u n i c a t e   w i t h   e a c h   o t h e r   o v e r   l o c a l h o s t . T h e   p o d   n e t w o r k   ( a l s o   c a l l e d   a   c l u s t e r   n e t w o r k )   h a n d l e s   c o m m u n i c a t i o n   b e t w e e n   p o d s .   I t   e n s u r e s   t h a t   ( b a r r i n g   i n t e n t i o n a l   n e t w o r k   s e g m e n t a t i o n ) : A l l   p o d s   c a n   c o m m u n i c a t e   w i t h   a l l   o t h e r   p o d s ,   w h e t h e r   t h e y   a r e   o n   t h e   s a m e   n o d e   o r   o n   d i f f e r e n t   n o d e s .   P o d s   c a n   c o m m u n i c a t e   w i t h   e a c h   o t h e r   d i r e c t l y ,   w i t h o u t   t h e   u s e   o f   p r o x i e s   o r   a d d r e s s   t r a n s l a t i o n   ( N A T ) . O n   W i n d o w s ,   t h i s   r u l e   d o e s   n o t   a p p l y   t o   h o s t - n e t w o r k   p o d s . A g e n t s   o n   a   n o d e   ( s u c h   a s   s y s t e m   d a e m o n s ,   o r   k u b e l e t )   c a n   c o m m u n i c a t e   w i t h   a l l   p o d s   o n   t h a t   n o d e . T h e   S e r v i c e   A P I   l e t s   y o u   p r o v i d e   a   s t a b l e   ( l o n g   l i v e d )   I P   a d d r e s s   o r   h o s t n a m e   f o r   a   s e r v i c e   i m p l e m e n t e d   b y   o n e   o r   m o r e   b a c k e n d   p o d s ,   w h e r e   t h e   i n d i v i d u a l   p o d s   m a k i


Question: What is What's next?

Answer: T h e   C o n n e c t i n g   A p p l i c a t i o n s   w i t h   S e r v i c e s   t u t o r i a l   l e t s   y o u   l e a r n   a b o u t   S e r v i c e s   a n d   K u b e r n e t e s   n e t w o r k i n g   w i t h   a   h a n d s - o n   e x a m p l e .   C l u s t e r   N e t w o r k i n g   e x p l a i n s   h o w   t o   s e t   u p   n e t w o r k i n g   f o r   y o u r   c l u s t e r ,   a n d   a l s o   p r o v i d e s   a n   o v e r v i e w   o f   t h e   t e c h n o l o g i e s   i n v o l v e d .


Question: What is 1 - Service?

Answer: I n   K u b e r n e t e s ,   a   S e r v i c e   i s   a   m e t h o d   f o r   e x p o s i n g   a   n e t w o r k   a p p l i c a t i o n   t h a t   i s   r u n n i n g   a s   o n e   o r   m o r e   P o d s   i n   y o u r   c l u s t e r .   A   k e y   a i m   o f   S e r v i c e s   i n   K u b e r n e t e s   i s   t h a t   y o u   d o n ' t   n e e d   t o   m o d i f y   y o u r   e x i s t i n g   a p p l i c a t i o n   t o   u s e   a n   u n f a m i l i a r   s e r v i c e   d i s c o v e r y   m e c h a n i s m .   Y o u   c a n   r u n   c o d e   i n   P o d s ,   w h e t h e r   t h i s   i s   a   c o d e   d e s i g n e d   f o r   a   c l o u d - n a t i v e   w o r l d ,   o r   a n   o l d e r   a p p   y o u ' v e   c o n t a i n e r i z e d .   Y o u   u s e   a   S e r v i c e   t o   m a k e   t h a t   s e t   o f   P o d s   a v a i l a b l e   o n   t h e   n e t w o r k   s o   t h a t   c l i e n t s   c a n   i n t e r a c t   w i t h   i t .   I f   y o u   u s e   a   D e p l o y m e n t   t o   r u n   y o u r   a p p ,   t h a t   D e p l o y m e n t   c a n   c r e a t e   a n d   d e s t r o y   P o d s   d y n a m i c a l l y .   F r o m   o n e   m o m e n t   t o   t h e   n e x t ,   y o u   d o n ' t   k n o w   h o w   m a n y   o f   t h o s e   P o d s   a r e   w o r k i n g   a n d   h e a l t h y ;   y o u   m i g h t   n o t   e v e n   k n o w   w h a t   t h o s e   h e a l t h y   P o d s   a r e   n a m e d .   K u b e r n e t e s   P o d s   a r e   c r e a t e d   a n d   d e s t r o y e d   t o   m a t c h   t h e   d e s i r e d   s t a t e   o f   y o u r   c l u s t e r .   P o d s   a r e   e p h e m e r a l   r e s o u r c e s   ( y o u   s h o u l d   n o t   e x p e c t   t h a t   a n   i n d i v i d u a l   P o d   i s   r e l i a b l e   a n d   d u r a b l e ) .   E a c h   P o d   g e t s   i t s   o w n   I P   a d d r e s s   ( K u b e r n e t e s   e x p e c t s   n e t w o r k   p l u g i


Question: What is Services in Kubernetes?

Answer: T h e   S e r v i c e   A P I ,   p a r t   o f   K u b e r n e t e s ,   i s   a n   a b s t r a c t i o n   t o   h e l p   y o u   e x p o s e   g r o u p s   o f   P o d s   o v e r   a   n e t w o r k .   E a c h   S e r v i c e   o b j e c t   d e f i n e s   a   l o g i c a l   s e t   o f   e n d p o i n t s   ( u s u a l l y   t h e s e   e n d p o i n t s   a r e   P o d s )   a l o n g   w i t h   a   p o l i c y   a b o u t   h o w   t o   m a k e   t h o s e   p o d s   a c c e s s i b l e .   F o r   e x a m p l e ,   c o n s i d e r   a   s t a t e l e s s   i m a g e - p r o c e s s i n g   b a c k e n d   w h i c h   i s   r u n n i n g   w i t h   3   r e p l i c a s .   T h o s e   r e p l i c a s   a r e   f u n g i b l e — f r o n t e n d s   d o   n o t   c a r e   w h i c h   b a c k e n d   t h e y   u s e .   W h i l e   t h e   a c t u a l   P o d s   t h a t   c o m p o s e   t h e   b a c k e n d   s e t   m a y   c h a n g e ,   t h e   f r o n t e n d   c l i e n t s   s h o u l d   n o t   n e e d   t o   b e   a w a r e   o f   t h a t ,   n o r   s h o u l d   t h e y   n e e d   t o   k e e p   t r a c k   o f   t h e   s e t   o f   b a c k e n d s   t h e m s e l v e s .   T h e   S e r v i c e   a b s t r a c t i o n   e n a b l e s   t h i s   d e c o u p l i n g .   T h e   s e t   o f   P o d s   t a r g e t e d   b y   a   S e r v i c e   i s   u s u a l l y   d e t e r m i n e d   b y   a   s e l e c t o r   t h a t   y o u   d e f i n e .   T o   l e a r n   a b o u t   o t h e r   w a y s   t o   d e f i n e   S e r v i c e   e n d p o i n t s ,   s e e   S e r v i c e s   w i t h o u t   s e l e c t o r s .   I f   y o u r   w o r k l o a d   s p e a k s   H T T P ,   y o u   m i g h t   c h o o s e   t o   u s e   a n   I n g r e s s   t o   c o n t r o l   h o w   w e b   t r a f f i c   r e a c h e s   t h a t   w o r k l o a d .   I n g r e s s   i s   n o t   a   S e r v i c e   t y p e ,   b u t   i t   a c t s   a


Question: What is Cloud-native service discovery?

Answer: I f   y o u ' r e   a b l e   t o   u s e   K u b e r n e t e s   A P I s   f o r   s e r v i c e   d i s c o v e r y   i n   y o u r   a p p l i c a t i o n ,   y o u   c a n   q u e r y   t h e   A P I   s e r v e r   f o r   m a t c h i n g   E n d p o i n t S l i c e s .   K u b e r n e t e s   u p d a t e s   t h e   E n d p o i n t S l i c e s   f o r   a   S e r v i c e   w h e n e v e r   t h e   s e t   o f   P o d s   i n   a   S e r v i c e   c h a n g e s .   F o r   n o n - n a t i v e   a p p l i c a t i o n s ,   K u b e r n e t e s   o f f e r s   w a y s   t o   p l a c e   a   n e t w o r k   p o r t   o r   l o a d   b a l a n c e r   i n   b e t w e e n   y o u r   a p p l i c a t i o n   a n d   t h e   b a c k e n d   P o d s .   E i t h e r   w a y ,   y o u r   w o r k l o a d   c a n   u s e   t h e s e   s e r v i c e   d i s c o v e r y   m e c h a n i s m s   t o   f i n d   t h e   t a r g e t   i t   w a n t s   t o   c o n n e c t   t o .


Question: What is Defining a Service?

Answer: A   S e r v i c e   i s   a n   o b j e c t   ( t h e   s a m e   w a y   t h a t   a   P o d   o r   a   C o n f i g M a p   i s   a n   o b j e c t ) .   Y o u   c a n   c r e a t e ,   v i e w   o r   m o d i f y   S e r v i c e   d e f i n i t i o n s   u s i n g   t h e   K u b e r n e t e s   A P I .   U s u a l l y   y o u   u s e   a   t o o l   s u c h   a s   k u b e c t l   t o   m a k e   t h o s e   A P I   c a l l s   f o r   y o u .   F o r   e x a m p l e ,   s u p p o s e   y o u   h a v e   a   s e t   o f   P o d s   t h a t   e a c h   l i s t e n   o n   T C P   p o r t   9 3 7 6   a n d   a r e   l a b e l l e d   a s   a p p . k u b e r n e t e s . i o / n a m e = M y A p p .   Y o u   c a n   d e f i n e   a   S e r v i c e   t o   p u b l i s h   t h a t   T C P   l i s t e n e r :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e   m e t a d a t a :   n a m e :   m y - s e r v i c e   s p e c :   s e l e c t o r :   a p p . k u b e r n e t e s . i o / n a m e :   M y A p p   p o r t s :   -   p r o t o c o l :   T C P   p o r t :   8 0   t a r g e t P o r t :   9 3 7 6   A p p l y i n g   t h i s   m a n i f e s t   c r e a t e s   a   n e w   S e r v i c e   n a m e d   " m y - s e r v i c e "   w i t h   t h e   d e f a u l t   C l u s t e r I P   s e r v i c e   t y p e .   T h e   S e r v i c e   t a r g e t s   T C P   p o r t   9 3 7 6   o n   a n y   P o d   w i t h   t h e   a p p . k u b e r n e t e s . i o / n a m e :   M y A p p   l a b e l .   K u b e r n e t e s   a s s i g n s   t h i s   S e r v i c e   a n   I P   a d d r e s s   ( t h e   c l u s t e r   I P ) ,   t h a t   i s   u s e d   b y   t h e   v i r t u a l   I P   a d d r e s s   m e c h a n i s m .   F o r   m o r e   d e t a i l s   o n   t h a t   m e c h a n i s m ,   r e a d   V i r t u a l   I P s   a n d   S e r v i c e   P r o x i e s .   T h e   c o n t r o l l e r   f o r   t h a t   S e r v i c e   c o n t i n u o u s l y   s c a n s   f o r


Question: What is Relaxed naming requirements for Service objects?

Answer: T h e   R e l a x e d S e r v i c e N a m e V a l i d a t i o n   f e a t u r e   g a t e   a l l o w s   S e r v i c e   o b j e c t   n a m e s   t o   s t a r t   w i t h   a   d i g i t .   W h e n   t h i s   f e a t u r e   g a t e   i s   e n a b l e d ,   S e r v i c e   o b j e c t   n a m e s   m u s t   b e   v a l i d   R F C   1 1 2 3   l a b e l   n a m e s .


Question: What is Port definitions?

Answer: P o r t   d e f i n i t i o n s   i n   P o d s   h a v e   n a m e s ,   a n d   y o u   c a n   r e f e r e n c e   t h e s e   n a m e s   i n   t h e   t a r g e t P o r t   a t t r i b u t e   o f   a   S e r v i c e .   F o r   e x a m p l e ,   w e   c a n   b i n d   t h e   t a r g e t P o r t   o f   t h e   S e r v i c e   t o   t h e   P o d   p o r t   i n   t h e   f o l l o w i n g   w a y :   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   n g i n x   l a b e l s :   a p p . k u b e r n e t e s . i o / n a m e :   p r o x y   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : s t a b l e   p o r t s :   -   c o n t a i n e r P o r t :   8 0   n a m e :   h t t p - w e b - s v c   - - -   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e   m e t a d a t a :   n a m e :   n g i n x - s e r v i c e   s p e c :   s e l e c t o r :   a p p . k u b e r n e t e s . i o / n a m e :   p r o x y   p o r t s :   -   n a m e :   n a m e - o f - s e r v i c e - p o r t   p r o t o c o l :   T C P   p o r t :   8 0   t a r g e t P o r t :   h t t p - w e b - s v c   T h i s   w o r k s   e v e n   i f   t h e r e   i s   a   m i x t u r e   o f   P o d s   i n   t h e   S e r v i c e   u s i n g   a   s i n g l e   c o n f i g u r e d   n a m e ,   w i t h   t h e   s a m e   n e t w o r k   p r o t o c o l   a v a i l a b l e   v i a   d i f f e r e n t   p o r t   n u m b e r s .   T h i s   o f f e r s   a   l o t   o f   f l e x i b i l i t y   f o r   d e p l o y i n g   a n d   e v o l v i n g   y o u r   S e r v i c e s .   F o r   e x a m p l e ,   y o u   c a n   c h a n g e   t h e   p o r t   n u m b e r s   t h a t   P o d s   e x p o s e   i n   t h e   n e x t   v e r s i o n   o f   y o u r   b a c k e n d   s o f t w a r e ,   w i t h o u t   b r e a k i n g   c l i e n t s .   T h e   d e f a u l t   p r o t o c o l   f o r   S e r v i c e s   i s   T C P ;   y o u   c


Question: What is Services without selectors?

Answer: S e r v i c e s   m o s t   c o m m o n l y   a b s t r a c t   a c c e s s   t o   K u b e r n e t e s   P o d s   t h a n k s   t o   t h e   s e l e c t o r ,   b u t   w h e n   u s e d   w i t h   a   c o r r e s p o n d i n g   s e t   o f   E n d p o i n t S l i c e s   o b j e c t s   a n d   w i t h o u t   a   s e l e c t o r ,   t h e   S e r v i c e   c a n   a b s t r a c t   o t h e r   k i n d s   o f   b a c k e n d s ,   i n c l u d i n g   o n e s   t h a t   r u n   o u t s i d e   t h e   c l u s t e r .   F o r   e x a m p l e :   Y o u   w a n t   t o   h a v e   a n   e x t e r n a l   d a t a b a s e   c l u s t e r   i n   p r o d u c t i o n ,   b u t   i n   y o u r   t e s t   e n v i r o n m e n t   y o u   u s e   y o u r   o w n   d a t a b a s e s . Y o u   w a n t   t o   p o i n t   y o u r   S e r v i c e   t o   a   S e r v i c e   i n   a   d i f f e r e n t   N a m e s p a c e   o r   o n   a n o t h e r   c l u s t e r . Y o u   a r e   m i g r a t i n g   a   w o r k l o a d   t o   K u b e r n e t e s .   W h i l e   e v a l u a t i n g   t h e   a p p r o a c h ,   y o u   r u n   o n l y   a   p o r t i o n   o f   y o u r   b a c k e n d s   i n   K u b e r n e t e s .   I n   a n y   o f   t h e s e   s c e n a r i o s   y o u   c a n   d e f i n e   a   S e r v i c e   w i t h o u t   s p e c i f y i n g   a   s e l e c t o r   t o   m a t c h   P o d s .   F o r   e x a m p l e :   a p i V e r s i o n :   v 1   k i n d :   S e r v i c e   m e t a d a t a :   n a m e :   m y - s e r v i c e   s p e c :   p o r t s :   -   n a m e :   h t t p   p r o t o c o l :   T C P   p o r t :   8 0   t a r g e t P o r t :   9 3 7 6   B e c a u s e   t h i s   S e r v i c e   h a s   n o   s e l e c t o r ,   t h e   c o r r e s p o n d i n g   E n d p o i n t S l i c e   o b j e c t s   a r e   n o t   c r e a t e d   a u t o m a t i c a l l y .   Y o u   c a n   m a p   t h e   S e r v i c e   t o   t h e   n e t w o r k   a d d r


Question: What is Custom EndpointSlices?

Answer: W h e n   y o u   c r e a t e   a n   E n d p o i n t S l i c e   o b j e c t   f o r   a   S e r v i c e ,   y o u   c a n   u s e   a n y   n a m e   f o r   t h e   E n d p o i n t S l i c e .   E a c h   E n d p o i n t S l i c e   i n   a   n a m e s p a c e   m u s t   h a v e   a   u n i q u e   n a m e .   Y o u   l i n k   a n   E n d p o i n t S l i c e   t o   a   S e r v i c e   b y   s e t t i n g   t h e   k u b e r n e t e s . i o / s e r v i c e - n a m e   l a b e l   o n   t h a t   E n d p o i n t S l i c e .


Question: What is Note:?

Answer: T h e   e n d p o i n t   I P s   m u s t   n o t   b e :   l o o p b a c k   ( 1 2 7 . 0 . 0 . 0 / 8   f o r   I P v 4 ,   : : 1 / 1 2 8   f o r   I P v 6 ) ,   o r   l i n k - l o c a l   ( 1 6 9 . 2 5 4 . 0 . 0 / 1 6   a n d   2 2 4 . 0 . 0 . 0 / 2 4   f o r   I P v 4 ,   f e 8 0 : : / 6 4   f o r   I P v 6 ) .   T h e   e n d p o i n t   I P   a d d r e s s e s   c a n n o t   b e   t h e   c l u s t e r   I P s   o f   o t h e r   K u b e r n e t e s   S e r v i c e s ,   b e c a u s e   k u b e - p r o x y   d o e s n ' t   s u p p o r t   v i r t u a l   I P s   a s   a   d e s t i n a t i o n .   F o r   a n   E n d p o i n t S l i c e   t h a t   y o u   c r e a t e   y o u r s e l f ,   o r   i n   y o u r   o w n   c o d e ,   y o u   s h o u l d   a l s o   p i c k   a   v a l u e   t o   u s e   f o r   t h e   l a b e l   e n d p o i n t s l i c e . k u b e r n e t e s . i o / m a n a g e d - b y .   I f   y o u   c r e a t e   y o u r   o w n   c o n t r o l l e r   c o d e   t o   m a n a g e   E n d p o i n t S l i c e s ,   c o n s i d e r   u s i n g   a   v a l u e   s i m i l a r   t o   " m y - d o m a i n . e x a m p l e / n a m e - o f - c o n t r o l l e r " .   I f   y o u   a r e   u s i n g   a   t h i r d   p a r t y   t o o l ,   u s e   t h e   n a m e   o f   t h e   t o o l   i n   a l l - l o w e r c a s e   a n d   c h a n g e   s p a c e s   a n d   o t h e r   p u n c t u a t i o n   t o   d a s h e s   ( - ) .   I f   p e o p l e   a r e   d i r e c t l y   u s i n g   a   t o o l   s u c h   a s   k u b e c t l   t o   m a n a g e   E n d p o i n t S l i c e s ,   u s e   a   n a m e   t h a t   d e s c r i b e s   t h i s   m a n u a l   m a n a g e m e n t ,   s u c h   a s   " s t a f f "   o r   " c l u s t e r - a d m i n s " .   Y o u   s h o u l d   a v o i d   u s i n g   t h e   r e s e r v e d   v a l u e   " c o n t r o l l e r " ,   w h i c h   i d e n t i f i e s   E n d p o i n t S l i c e s   m a n a g e d   b y


Question: What is Accessing a Service without a selector?

Answer: A c c e s s i n g   a   S e r v i c e   w i t h o u t   a   s e l e c t o r   w o r k s   t h e   s a m e   a s   i f   i t   h a d   a   s e l e c t o r .   I n   t h e   e x a m p l e   f o r   a   S e r v i c e   w i t h o u t   a   s e l e c t o r ,   t r a f f i c   i s   r o u t e d   t o   o n e   o f   t h e   t w o   e n d p o i n t s   d e f i n e d   i n   t h e   E n d p o i n t S l i c e   m a n i f e s t :   a   T C P   c o n n e c t i o n   t o   1 0 . 1 . 2 . 3   o r   1 0 . 4 . 5 . 6 ,   o n   p o r t   9 3 7 6 .


Question: What is Note:?

Answer: A n   E x t e r n a l N a m e   S e r v i c e   i s   a   s p e c i a l   c a s e   o f   S e r v i c e   t h a t   d o e s   n o t   h a v e   s e l e c t o r s   a n d   u s e s   D N S   n a m e s   i n s t e a d .   F o r   m o r e   i n f o r m a t i o n ,   s e e   t h e   E x t e r n a l N a m e   s e c t i o n .


Question: What is EndpointSlices?

Answer: E n d p o i n t S l i c e s   a r e   o b j e c t s   t h a t   r e p r e s e n t   a   s u b s e t   ( a   s l i c e )   o f   t h e   b a c k i n g   n e t w o r k   e n d p o i n t s   f o r   a   S e r v i c e .   Y o u r   K u b e r n e t e s   c l u s t e r   t r a c k s   h o w   m a n y   e n d p o i n t s   e a c h   E n d p o i n t S l i c e   r e p r e s e n t s .   I f   t h e r e   a r e   s o   m a n y   e n d p o i n t s   f o r   a   S e r v i c e   t h a t   a   t h r e s h o l d   i s   r e a c h e d ,   t h e n   K u b e r n e t e s   a d d s   a n o t h e r   e m p t y   E n d p o i n t S l i c e   a n d   s t o r e s   n e w   e n d p o i n t   i n f o r m a t i o n   t h e r e .   B y   d e f a u l t ,   K u b e r n e t e s   m a k e s   a   n e w   E n d p o i n t S l i c e   o n c e   t h e   e x i s t i n g   E n d p o i n t S l i c e s   a l l   c o n t a i n   a t   l e a s t   1 0 0   e n d p o i n t s .   K u b e r n e t e s   d o e s   n o t   m a k e   t h e   n e w   E n d p o i n t S l i c e   u n t i l   a n   e x t r a   e n d p o i n t   n e e d s   t o   b e   a d d e d .   S e e   E n d p o i n t S l i c e s   f o r   m o r e   i n f o r m a t i o n   a b o u t   t h i s   A P I .


Question: What is Endpoints (deprecated)?

Answer: T h e   E n d p o i n t S l i c e   A P I   i s   t h e   e v o l u t i o n   o f   t h e   o l d e r   E n d p o i n t s   A P I .   T h e   d e p r e c a t e d   E n d p o i n t s   A P I   h a s   s e v e r a l   p r o b l e m s   r e l a t i v e   t o   E n d p o i n t S l i c e :   I t   d o e s   n o t   s u p p o r t   d u a l - s t a c k   c l u s t e r s . I t   d o e s   n o t   c o n t a i n   i n f o r m a t i o n   n e e d e d   t o   s u p p o r t   n e w e r   f e a t u r e s ,   s u c h   a s   t r a f f i c D i s t r i b u t i o n . I t   w i l l   t r u n c a t e   t h e   l i s t   o f   e n d p o i n t s   i f   i t   i s   t o o   l o n g   t o   f i t   i n   a   s i n g l e   o b j e c t .   B e c a u s e   o f   t h i s ,   i t   i s   r e c o m m e n d e d   t h a t   a l l   c l i e n t s   u s e   t h e   E n d p o i n t S l i c e   A P I   r a t h e r   t h a n   E n d p o i n t s .


Question: What is Over-capacity endpoints?

Answer: K u b e r n e t e s   l i m i t s   t h e   n u m b e r   o f   e n d p o i n t s   t h a t   c a n   f i t   i n   a   s i n g l e   E n d p o i n t s   o b j e c t .   W h e n   t h e r e   a r e   o v e r   1 0 0 0   b a c k i n g   e n d p o i n t s   f o r   a   S e r v i c e ,   K u b e r n e t e s   t r u n c a t e s   t h e   d a t a   i n   t h e   E n d p o i n t s   o b j e c t .   B e c a u s e   a   S e r v i c e   c a n   b e   l i n k e d   w i t h   m o r e   t h a n   o n e   E n d p o i n t S l i c e ,   t h e   1 0 0 0   b a c k i n g   e n d p o i n t   l i m i t   o n l y   a f f e c t s   t h e   l e g a c y   E n d p o i n t s   A P I .   I n   t h a t   c a s e ,   K u b e r n e t e s   s e l e c t s   a t   m o s t   1 0 0 0   p o s s i b l e   b a c k e n d   e n d p o i n t s   t o   s t o r e   i n t o   t h e   E n d p o i n t s   o b j e c t ,   a n d   s e t s   a n   a n n o t a t i o n   o n   t h e   E n d p o i n t s :   e n d p o i n t s . k u b e r n e t e s . i o / o v e r - c a p a c i t y :   t r u n c a t e d .   T h e   c o n t r o l   p l a n e   a l s o   r e m o v e s   t h a t   a n n o t a t i o n   i f   t h e   n u m b e r   o f   b a c k e n d   P o d s   d r o p s   b e l o w   1 0 0 0 .   T r a f f i c   i s   s t i l l   s e n t   t o   b a c k e n d s ,   b u t   a n y   l o a d   b a l a n c i n g   m e c h a n i s m   t h a t   r e l i e s   o n   t h e   l e g a c y   E n d p o i n t s   A P I   o n l y   s e n d s   t r a f f i c   t o   a t   m o s t   1 0 0 0   o f   t h e   a v a i l a b l e   b a c k i n g   e n d p o i n t s .   T h e   s a m e   A P I   l i m i t   m e a n s   t h a t   y o u   c a n n o t   m a n u a l l y   u p d a t e   a n   E n d p o i n t s   t o   h a v e   m o r e   t h a n   1 0 0 0   e n d p o i n t s .