Question: What is Overview?

Answer: D e c l a r a t i v e   o b j e c t   c o n f i g u r a t i o n   r e q u i r e s   a   f i r m   u n d e r s t a n d i n g   o f   t h e   K u b e r n e t e s   o b j e c t   d e f i n i t i o n s   a n d   c o n f i g u r a t i o n .   R e a d   a n d   c o m p l e t e   t h e   f o l l o w i n g   d o c u m e n t s   i f   y o u   h a v e   n o t   a l r e a d y :   M a n a g i n g   K u b e r n e t e s   O b j e c t s   U s i n g   I m p e r a t i v e   C o m m a n d s I m p e r a t i v e   M a n a g e m e n t   o f   K u b e r n e t e s   O b j e c t s   U s i n g   C o n f i g u r a t i o n   F i l e s   F o l l o w i n g   a r e   d e f i n i t i o n s   f o r   t e r m s   u s e d   i n   t h i s   d o c u m e n t :   o b j e c t   c o n f i g u r a t i o n   f i l e   /   c o n f i g u r a t i o n   f i l e :   A   f i l e   t h a t   d e f i n e s   t h e   c o n f i g u r a t i o n   f o r   a   K u b e r n e t e s   o b j e c t .   T h i s   t o p i c   s h o w s   h o w   t o   p a s s   c o n f i g u r a t i o n   f i l e s   t o   k u b e c t l   a p p l y .   C o n f i g u r a t i o n   f i l e s   a r e   t y p i c a l l y   s t o r e d   i n   s o u r c e   c o n t r o l ,   s u c h   a s   G i t . l i v e   o b j e c t   c o n f i g u r a t i o n   /   l i v e   c o n f i g u r a t i o n :   T h e   l i v e   c o n f i g u r a t i o n   v a l u e s   o f   a n   o b j e c t ,   a s   o b s e r v e d   b y   t h e   K u b e r n e t e s   c l u s t e r .   T h e s e   a r e   k e p t   i n   t h e   K u b e r n e t e s   c l u s t e r   s t o r a g e ,   t y p i c a l l y   e t c d . d e c l a r a t i v e   c o n f i g u r a t i o n   w r i t e r   /   d e c l a r a t i v e   w r i t e r :   A   p e r s o n   o r   s o f t w a r e   c o m p o n e n t   t h a t   m a k e s   u p d a t e s   t o   a   l i v e   o b j e c t .   T h e   l i v e   w r i t e r s   r e f e r r e d   t o   i n   t h i s   t o p i c   m a k e   c h a n g e s   t o   o b j e


Question: What is How to create objects?

Answer: U s e   k u b e c t l   a p p l y   t o   c r e a t e   a l l   o b j e c t s ,   e x c e p t   t h o s e   t h a t   a l r e a d y   e x i s t ,   d e f i n e d   b y   c o n f i g u r a t i o n   f i l e s   i n   a   s p e c i f i e d   d i r e c t o r y :   k u b e c t l   a p p l y   - f   < d i r e c t o r y >   T h i s   s e t s   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n :   ' { . . . } '   a n n o t a t i o n   o n   e a c h   o b j e c t .   T h e   a n n o t a t i o n   c o n t a i n s   t h e   c o n t e n t s   o f   t h e   o b j e c t   c o n f i g u r a t i o n   f i l e   t h a t   w a s   u s e d   t o   c r e a t e   t h e   o b j e c t .


Question: What is Note:?

Answer: H e r e ' s   a n   e x a m p l e   o f   a n   o b j e c t   c o n f i g u r a t i o n   f i l e :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   m i n R e a d y S e c o n d s :   5   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 4 . 2   p o r t s :   -   c o n t a i n e r P o r t :   8 0   R u n   k u b e c t l   d i f f   t o   p r i n t   t h e   o b j e c t   t h a t   w i l l   b e   c r e a t e d :   k u b e c t l   d i f f   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l


Question: What is Note:?

Answer: d i f f   u s e s   s e r v e r - s i d e   d r y - r u n ,   w h i c h   n e e d s   t o   b e   e n a b l e d   o n   k u b e - a p i s e r v e r .   S i n c e   d i f f   p e r f o r m s   a   s e r v e r - s i d e   a p p l y   r e q u e s t   i n   d r y - r u n   m o d e ,   i t   r e q u i r e s   g r a n t i n g   P A T C H ,   C R E A T E ,   a n d   U P D A T E   p e r m i s s i o n s .   S e e   D r y - R u n   A u t h o r i z a t i o n   f o r   d e t a i l s .   C r e a t e   t h e   o b j e c t   u s i n g   k u b e c t l   a p p l y :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l   P r i n t   t h e   l i v e   c o n f i g u r a t i o n   u s i n g   k u b e c t l   g e t :   k u b e c t l   g e t   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l   - o   y a m l   T h e   o u t p u t   s h o w s   t h a t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   w a s   w r i t t e n   t o   t h e   l i v e   c o n f i g u r a t i o n ,   a n d   i t   m a t c h e s   t h e   c o n f i g u r a t i o n   f i l e :   k i n d :   D e p l o y m e n t   m e t a d a t a :   a n n o t a t i o n s :   #   . . .   #   T h i s   i s   t h e   j s o n   r e p r e s e n t a t i o n   o f   s i m p l e _ d e p l o y m e n t . y a m l   #   I t   w a s   w r i t t e n   b y   k u b e c t l   a p p l y   w h e n   t h e   o b j e c t   w a s   c r e a t e d   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n :   |   { " a p i V e r s i o n " : " a p p s / v 1 " , " k i n d " : " D e p l o y m e n t " ,   " m e t a d a t a " : { " a n n o t a t i o n s " : { } , " n a m e " : " n g i n x - d e p l o y m e n t " , " n a m e s p a c e " : " d e f a u l t " } ,   " s p e c " :


Question: What is How to update objects?

Answer: Y o u   c a n   a l s o   u s e   k u b e c t l   a p p l y   t o   u p d a t e   a l l   o b j e c t s   d e f i n e d   i n   a   d i r e c t o r y ,   e v e n   i f   t h o s e   o b j e c t s   a l r e a d y   e x i s t .   T h i s   a p p r o a c h   a c c o m p l i s h e s   t h e   f o l l o w i n g :   S e t s   f i e l d s   t h a t   a p p e a r   i n   t h e   c o n f i g u r a t i o n   f i l e   i n   t h e   l i v e   c o n f i g u r a t i o n . C l e a r s   f i e l d s   r e m o v e d   f r o m   t h e   c o n f i g u r a t i o n   f i l e   i n   t h e   l i v e   c o n f i g u r a t i o n .   k u b e c t l   d i f f   - f   < d i r e c t o r y >   k u b e c t l   a p p l y   - f   < d i r e c t o r y >


Question: What is Note:?

Answer: H e r e ' s   a n   e x a m p l e   c o n f i g u r a t i o n   f i l e :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   m i n R e a d y S e c o n d s :   5   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 4 . 2   p o r t s :   -   c o n t a i n e r P o r t :   8 0   C r e a t e   t h e   o b j e c t   u s i n g   k u b e c t l   a p p l y :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l


Question: What is Note:?

Answer: P r i n t   t h e   l i v e   c o n f i g u r a t i o n   u s i n g   k u b e c t l   g e t :   k u b e c t l   g e t   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l   - o   y a m l   T h e   o u t p u t   s h o w s   t h a t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   w a s   w r i t t e n   t o   t h e   l i v e   c o n f i g u r a t i o n ,   a n d   i t   m a t c h e s   t h e   c o n f i g u r a t i o n   f i l e :   k i n d :   D e p l o y m e n t   m e t a d a t a :   a n n o t a t i o n s :   #   . . .   #   T h i s   i s   t h e   j s o n   r e p r e s e n t a t i o n   o f   s i m p l e _ d e p l o y m e n t . y a m l   #   I t   w a s   w r i t t e n   b y   k u b e c t l   a p p l y   w h e n   t h e   o b j e c t   w a s   c r e a t e d   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n :   |   { " a p i V e r s i o n " : " a p p s / v 1 " , " k i n d " : " D e p l o y m e n t " ,   " m e t a d a t a " : { " a n n o t a t i o n s " : { } , " n a m e " : " n g i n x - d e p l o y m e n t " , " n a m e s p a c e " : " d e f a u l t " } ,   " s p e c " : { " m i n R e a d y S e c o n d s " : 5 , " s e l e c t o r " : { " m a t c h L a b e l s " : { " a p p " : n g i n x } } , " t e m p l a t e " : { " m e t a d a t a " : { " l a b e l s " : { " a p p " : " n g i n x " } } ,   " s p e c " : { " c o n t a i n e r s " : [ { " i m a g e " : " n g i n x : 1 . 1 4 . 2 " , " n a m e " : " n g i n x " ,   " p o r t s " : [ { " c o n t a i n e r P o r t " : 8 0 } ] } ] } } } }   #   . . .   s p e c :   #   . . .   m i n R e a d y S e c o n d s :   5   s e l e c t o r :   m a t c h L a b e l s :   #   . . .   a p p :   n g i n x   t e m p l a t e :   m e t a d a t a :   #   . . .   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   i


Question: What is How to delete objects?

Answer: T h e r e   a r e   t w o   a p p r o a c h e s   t o   d e l e t e   o b j e c t s   m a n a g e d   b y   k u b e c t l   a p p l y .


Question: What is Recommended: kubectl delete -f <filename>?

Answer: M a n u a l l y   d e l e t i n g   o b j e c t s   u s i n g   t h e   i m p e r a t i v e   c o m m a n d   i s   t h e   r e c o m m e n d e d   a p p r o a c h ,   a s   i t   i s   m o r e   e x p l i c i t   a b o u t   w h a t   i s   b e i n g   d e l e t e d ,   a n d   l e s s   l i k e l y   t o   r e s u l t   i n   t h e   u s e r   d e l e t i n g   s o m e t h i n g   u n i n t e n t i o n a l l y :   k u b e c t l   d e l e t e   - f   < f i l e n a m e >


Question: What is Alternative: kubectl apply -f <directory> --prune?

Answer: A s   a n   a l t e r n a t i v e   t o   k u b e c t l   d e l e t e ,   y o u   c a n   u s e   k u b e c t l   a p p l y   t o   i d e n t i f y   o b j e c t s   t o   b e   d e l e t e d   a f t e r   t h e i r   m a n i f e s t s   h a v e   b e e n   r e m o v e d   f r o m   a   d i r e c t o r y   i n   t h e   l o c a l   f i l e s y s t e m .   I n   K u b e r n e t e s   1 . 3 4 ,   t h e r e   a r e   t w o   p r u n i n g   m o d e s   a v a i l a b l e   i n   k u b e c t l   a p p l y :   A l l o w l i s t - b a s e d   p r u n i n g :   T h i s   m o d e   h a s   e x i s t e d   s i n c e   k u b e c t l   v 1 . 5   b u t   i s   s t i l l   i n   a l p h a   d u e   t o   u s a b i l i t y ,   c o r r e c t n e s s   a n d   p e r f o r m a n c e   i s s u e s   w i t h   i t s   d e s i g n .   T h e   A p p l y S e t - b a s e d   m o d e   i s   d e s i g n e d   t o   r e p l a c e   i t . A p p l y S e t - b a s e d   p r u n i n g :   A n   a p p l y   s e t   i s   a   s e r v e r - s i d e   o b j e c t   ( b y   d e f a u l t ,   a   S e c r e t )   t h a t   k u b e c t l   c a n   u s e   t o   a c c u r a t e l y   a n d   e f f i c i e n t l y   t r a c k   s e t   m e m b e r s h i p   a c r o s s   a p p l y   o p e r a t i o n s .   T h i s   m o d e   w a s   i n t r o d u c e d   i n   a l p h a   i n   k u b e c t l   v 1 . 2 7   a s   a   r e p l a c e m e n t   f o r   a l l o w l i s t - b a s e d   p r u n i n g .   F E A T U R E   S T A T E :   K u b e r n e t e s   v 1 . 5   [ a l p h a ] W a r n i n g : T a k e   c a r e   w h e n   u s i n g   - - p r u n e   w i t h   k u b e c t l   a p p l y   i n   a l l o w   l i s t   m o d e .   W h i c h   o b j e c t s   a r e   p r u n e d   d e p e n d s   o n   t h e   v a l u e s   o f   t h e   - - p r u n e - a l l o w l i s t ,   - - s e l e c t o r   a n d   - - n a m e s p a c e   f l a g s ,   a n d   r e l i e s   o n   d y n a m i c   d i s c o v e r y   o f   t h e


Question: What is Warning:?

Answer: T o   u s e   a l l o w l i s t - b a s e d   p r u n i n g ,   a d d   t h e   f o l l o w i n g   f l a g s   t o   y o u r   k u b e c t l   a p p l y   i n v o c a t i o n :   - - p r u n e :   D e l e t e   p r e v i o u s l y   a p p l i e d   o b j e c t s   t h a t   a r e   n o t   i n   t h e   s e t   p a s s e d   t o   t h e   c u r r e n t   i n v o c a t i o n . - - p r u n e - a l l o w l i s t :   A   l i s t   o f   g r o u p - v e r s i o n - k i n d s   ( G V K s )   t o   c o n s i d e r   f o r   p r u n i n g .   T h i s   f l a g   i s   o p t i o n a l   b u t   s t r o n g l y   e n c o u r a g e d ,   a s   i t s   d e f a u l t   v a l u e   i s   a   p a r t i a l   l i s t   o f   b o t h   n a m e s p a c e d   a n d   c l u s t e r - s c o p e d   t y p e s ,   w h i c h   c a n   l e a d   t o   s u r p r i s i n g   r e s u l t s . - - s e l e c t o r / - l :   U s e   a   l a b e l   s e l e c t o r   t o   c o n s t r a i n   t h e   s e t   o f   o b j e c t s   s e l e c t e d   f o r   p r u n i n g .   T h i s   f l a g   i s   o p t i o n a l   b u t   s t r o n g l y   e n c o u r a g e d . - - a l l :   u s e   i n s t e a d   o f   - - s e l e c t o r / - l   t o   e x p l i c i t l y   s e l e c t   a l l   p r e v i o u s l y   a p p l i e d   o b j e c t s   o f   t h e   a l l o w l i s t e d   t y p e s .   A l l o w l i s t - b a s e d   p r u n i n g   q u e r i e s   t h e   A P I   s e r v e r   f o r   a l l   o b j e c t s   o f   t h e   a l l o w l i s t e d   G V K s   t h a t   m a t c h   t h e   g i v e n   l a b e l s   ( i f   a n y ) ,   a n d   a t t e m p t s   t o   m a t c h   t h e   r e t u r n e d   l i v e   o b j e c t   c o n f i g u r a t i o n s   a g a i n s t   t h e   o b j e c t   m a n i f e s t   f i l e s .   I f   a n   o b j e c t   m a t c h e s   t h e   q u e r y ,   a n d   i t   d o e s   n o t   h a v e   a   m a n i f e s t   i n   t h e   d i r e c t o r y ,   a n d   i t


Question: What is Warning:?

Answer: F E A T U R E   S T A T E :   K u b e r n e t e s   v 1 . 2 7   [ a l p h a ] C a u t i o n : k u b e c t l   a p p l y   - - p r u n e   - - a p p l y s e t   i s   i n   a l p h a ,   a n d   b a c k w a r d s   i n c o m p a t i b l e   c h a n g e s   m i g h t   b e   i n t r o d u c e d   i n   s u b s e q u e n t   r e l e a s e s . T o   u s e   A p p l y S e t - b a s e d   p r u n i n g ,   s e t   t h e   K U B E C T L _ A P P L Y S E T = t r u e   e n v i r o n m e n t   v a r i a b l e ,   a n d   a d d   t h e   f o l l o w i n g   f l a g s   t o   y o u r   k u b e c t l   a p p l y   i n v o c a t i o n : - - p r u n e :   D e l e t e   p r e v i o u s l y   a p p l i e d   o b j e c t s   t h a t   a r e   n o t   i n   t h e   s e t   p a s s e d   t o   t h e   c u r r e n t   i n v o c a t i o n . - - a p p l y s e t :   T h e   n a m e   o f   a n   o b j e c t   t h a t   k u b e c t l   c a n   u s e   t o   a c c u r a t e l y   a n d   e f f i c i e n t l y   t r a c k   s e t   m e m b e r s h i p   a c r o s s   a p p l y   o p e r a t i o n s . K U B E C T L _ A P P L Y S E T = t r u e   k u b e c t l   a p p l y   - f   < d i r e c t o r y >   - - p r u n e   - - a p p l y s e t = < n a m e >   B y   d e f a u l t ,   t h e   t y p e   o f   t h e   A p p l y S e t   p a r e n t   o b j e c t   u s e d   i s   a   S e c r e t .   H o w e v e r ,   C o n f i g M a p s   c a n   a l s o   b e   u s e d   i n   t h e   f o r m a t :   - - a p p l y s e t = c o n f i g m a p s / < n a m e > .   W h e n   u s i n g   a   S e c r e t   o r   C o n f i g M a p ,   k u b e c t l   w i l l   c r e a t e   t h e   o b j e c t   i f   i t   d o e s   n o t   a l r e a d y   e x i s t . I t   i s   a l s o   p o s s i b l e   t o   u s e   c u s t o m   r e s o u r c e s   a s   A p p l y S e t   p a r e n t   o b j e c t s .   T o   e n a b l e   t h i s ,   l a b e l   t h e   C u s t o m   R e s o u r c e   D e f i n i t i o n   ( C R D )   t h


Question: What is Caution:?

Answer: T o   u s e   A p p l y S e t - b a s e d   p r u n i n g ,   s e t   t h e   K U B E C T L _ A P P L Y S E T = t r u e   e n v i r o n m e n t   v a r i a b l e ,   a n d   a d d   t h e   f o l l o w i n g   f l a g s   t o   y o u r   k u b e c t l   a p p l y   i n v o c a t i o n :   - - p r u n e :   D e l e t e   p r e v i o u s l y   a p p l i e d   o b j e c t s   t h a t   a r e   n o t   i n   t h e   s e t   p a s s e d   t o   t h e   c u r r e n t   i n v o c a t i o n . - - a p p l y s e t :   T h e   n a m e   o f   a n   o b j e c t   t h a t   k u b e c t l   c a n   u s e   t o   a c c u r a t e l y   a n d   e f f i c i e n t l y   t r a c k   s e t   m e m b e r s h i p   a c r o s s   a p p l y   o p e r a t i o n s .   K U B E C T L _ A P P L Y S E T = t r u e   k u b e c t l   a p p l y   - f   < d i r e c t o r y >   - - p r u n e   - - a p p l y s e t = < n a m e >   B y   d e f a u l t ,   t h e   t y p e   o f   t h e   A p p l y S e t   p a r e n t   o b j e c t   u s e d   i s   a   S e c r e t .   H o w e v e r ,   C o n f i g M a p s   c a n   a l s o   b e   u s e d   i n   t h e   f o r m a t :   - - a p p l y s e t = c o n f i g m a p s / < n a m e > .   W h e n   u s i n g   a   S e c r e t   o r   C o n f i g M a p ,   k u b e c t l   w i l l   c r e a t e   t h e   o b j e c t   i f   i t   d o e s   n o t   a l r e a d y   e x i s t .   I t   i s   a l s o   p o s s i b l e   t o   u s e   c u s t o m   r e s o u r c e s   a s   A p p l y S e t   p a r e n t   o b j e c t s .   T o   e n a b l e   t h i s ,   l a b e l   t h e   C u s t o m   R e s o u r c e   D e f i n i t i o n   ( C R D )   t h a t   d e f i n e s   t h e   r e s o u r c e   y o u   w a n t   t o   u s e   w i t h   t h e   f o l l o w i n g :   a p p l y s e t . k u b e r n e t e s . i o / i s - p a r e n t - t y p e :   t r u e .   T h e n ,   c r e a t e   t h e   o b j e c t   y o u   w a n t   t o   u s e   a s   a n   A p p l y S e t   p a r e n t   (


Question: What is How to view an object?

Answer: Y o u   c a n   u s e   k u b e c t l   g e t   w i t h   - o   y a m l   t o   v i e w   t h e   c o n f i g u r a t i o n   o f   a   l i v e   o b j e c t :   k u b e c t l   g e t   - f   < f i l e n a m e | u r l >   - o   y a m l


Question: What is Caution:?

Answer: W h e n   k u b e c t l   a p p l y   u p d a t e s   t h e   l i v e   c o n f i g u r a t i o n   f o r   a n   o b j e c t ,   i t   d o e s   s o   b y   s e n d i n g   a   p a t c h   r e q u e s t   t o   t h e   A P I   s e r v e r .   T h e   p a t c h   d e f i n e s   u p d a t e s   s c o p e d   t o   s p e c i f i c   f i e l d s   o f   t h e   l i v e   o b j e c t   c o n f i g u r a t i o n .   T h e   k u b e c t l   a p p l y   c o m m a n d   c a l c u l a t e s   t h i s   p a t c h   r e q u e s t   u s i n g   t h e   c o n f i g u r a t i o n   f i l e ,   t h e   l i v e   c o n f i g u r a t i o n ,   a n d   t h e   l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   s t o r e d   i n   t h e   l i v e   c o n f i g u r a t i o n .


Question: What is Merge patch calculation?

Answer: T h e   k u b e c t l   a p p l y   c o m m a n d   w r i t e s   t h e   c o n t e n t s   o f   t h e   c o n f i g u r a t i o n   f i l e   t o   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n .   T h i s   i s   u s e d   t o   i d e n t i f y   f i e l d s   t h a t   h a v e   b e e n   r e m o v e d   f r o m   t h e   c o n f i g u r a t i o n   f i l e   a n d   n e e d   t o   b e   c l e a r e d   f r o m   t h e   l i v e   c o n f i g u r a t i o n .   H e r e   a r e   t h e   s t e p s   u s e d   t o   c a l c u l a t e   w h i c h   f i e l d s   s h o u l d   b e   d e l e t e d   o r   s e t :   C a l c u l a t e   t h e   f i e l d s   t o   d e l e t e .   T h e s e   a r e   t h e   f i e l d s   p r e s e n t   i n   l a s t - a p p l i e d - c o n f i g u r a t i o n   a n d   m i s s i n g   f r o m   t h e   c o n f i g u r a t i o n   f i l e . C a l c u l a t e   t h e   f i e l d s   t o   a d d   o r   s e t .   T h e s e   a r e   t h e   f i e l d s   p r e s e n t   i n   t h e   c o n f i g u r a t i o n   f i l e   w h o s e   v a l u e s   d o n ' t   m a t c h   t h e   l i v e   c o n f i g u r a t i o n .   H e r e ' s   a n   e x a m p l e .   S u p p o s e   t h i s   i s   t h e   c o n f i g u r a t i o n   f i l e   f o r   a   D e p l o y m e n t   o b j e c t :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 6 . 1   #   u p d a t e   t h e   i m a g e   p o r t s :   -   c o n t a i n e r P o r t :   8 0   A l s o ,   s u p p o s e   t h i s   i s   t h e   l i v e   c o n f i g u r a t i o n   f o r


Question: What is How different types of fields are merged?

Answer: H o w   a   p a r t i c u l a r   f i e l d   i n   a   c o n f i g u r a t i o n   f i l e   i s   m e r g e d   w i t h   t h e   l i v e   c o n f i g u r a t i o n   d e p e n d s   o n   t h e   t y p e   o f   t h e   f i e l d .   T h e r e   a r e   s e v e r a l   t y p e s   o f   f i e l d s :   p r i m i t i v e :   A   f i e l d   o f   t y p e   s t r i n g ,   i n t e g e r ,   o r   b o o l e a n .   F o r   e x a m p l e ,   i m a g e   a n d   r e p l i c a s   a r e   p r i m i t i v e   f i e l d s .   A c t i o n :   R e p l a c e . m a p ,   a l s o   c a l l e d   o b j e c t :   A   f i e l d   o f   t y p e   m a p   o r   a   c o m p l e x   t y p e   t h a t   c o n t a i n s   s u b f i e l d s .   F o r   e x a m p l e ,   l a b e l s ,   a n n o t a t i o n s , s p e c   a n d   m e t a d a t a   a r e   a l l   m a p s .   A c t i o n :   M e r g e   e l e m e n t s   o r   s u b f i e l d s . l i s t :   A   f i e l d   c o n t a i n i n g   a   l i s t   o f   i t e m s   t h a t   c a n   b e   e i t h e r   p r i m i t i v e   t y p e s   o r   m a p s .   F o r   e x a m p l e ,   c o n t a i n e r s ,   p o r t s ,   a n d   a r g s   a r e   l i s t s .   A c t i o n :   V a r i e s .   p r i m i t i v e :   A   f i e l d   o f   t y p e   s t r i n g ,   i n t e g e r ,   o r   b o o l e a n .   F o r   e x a m p l e ,   i m a g e   a n d   r e p l i c a s   a r e   p r i m i t i v e   f i e l d s .   A c t i o n :   R e p l a c e .   m a p ,   a l s o   c a l l e d   o b j e c t :   A   f i e l d   o f   t y p e   m a p   o r   a   c o m p l e x   t y p e   t h a t   c o n t a i n s   s u b f i e l d s .   F o r   e x a m p l e ,   l a b e l s ,   a n n o t a t i o n s , s p e c   a n d   m e t a d a t a   a r e   a l l   m a p s .   A c t i o n :   M e r g e   e l e m e n t s   o r   s u b f i e l d s .   l i s t :   A   f i e l d   c o n t a i n i n g   a   l i s t   o f   i t e m s   t h a t   c a n   b e   e i t h e r   p


Question: What is Merging changes to primitive fields?

Answer: P r i m i t i v e   f i e l d s   a r e   r e p l a c e d   o r   c l e a r e d .


Question: What is Merging changes to map fields?

Answer: F i e l d s   t h a t   r e p r e s e n t   m a p s   a r e   m e r g e d   b y   c o m p a r i n g   e a c h   o f   t h e   s u b f i e l d s   o r   e l e m e n t s   o f   t h e   m a p :


Question: What is Merging changes for fields of type list?

Answer: M e r g i n g   c h a n g e s   t o   a   l i s t   u s e s   o n e   o f   t h r e e   s t r a t e g i e s :   R e p l a c e   t h e   l i s t   i f   a l l   i t s   e l e m e n t s   a r e   p r i m i t i v e s . M e r g e   i n d i v i d u a l   e l e m e n t s   i n   a   l i s t   o f   c o m p l e x   e l e m e n t s . M e r g e   a   l i s t   o f   p r i m i t i v e   e l e m e n t s .   T h e   c h o i c e   o f   s t r a t e g y   i s   m a d e   o n   a   p e r - f i e l d   b a s i s .


Question: What is Replace the list if all its elements are primitives?

Answer: T r e a t   t h e   l i s t   t h e   s a m e   a s   a   p r i m i t i v e   f i e l d .   R e p l a c e   o r   d e l e t e   t h e   e n t i r e   l i s t .   T h i s   p r e s e r v e s   o r d e r i n g .   E x a m p l e :   U s e   k u b e c t l   a p p l y   t o   u p d a t e   t h e   a r g s   f i e l d   o f   a   C o n t a i n e r   i n   a   P o d .   T h i s   s e t s   t h e   v a l u e   o f   a r g s   i n   t h e   l i v e   c o n f i g u r a t i o n   t o   t h e   v a l u e   i n   t h e   c o n f i g u r a t i o n   f i l e .   A n y   a r g s   e l e m e n t s   t h a t   h a d   p r e v i o u s l y   b e e n   a d d e d   t o   t h e   l i v e   c o n f i g u r a t i o n   a r e   l o s t .   T h e   o r d e r   o f   t h e   a r g s   e l e m e n t s   d e f i n e d   i n   t h e   c o n f i g u r a t i o n   f i l e   i s   r e t a i n e d   i n   t h e   l i v e   c o n f i g u r a t i o n .   #   l a s t - a p p l i e d - c o n f i g u r a t i o n   v a l u e   a r g s :   [ " a " ,   " b " ]   #   c o n f i g u r a t i o n   f i l e   v a l u e   a r g s :   [ " a " ,   " c " ]   #   l i v e   c o n f i g u r a t i o n   a r g s :   [ " a " ,   " b " ,   " d " ]   #   r e s u l t   a f t e r   m e r g e   a r g s :   [ " a " ,   " c " ]   E x p l a n a t i o n :   T h e   m e r g e   u s e d   t h e   c o n f i g u r a t i o n   f i l e   v a l u e   a s   t h e   n e w   l i s t   v a l u e .


Question: What is Merge individual elements of a list of complex elements:?

Answer: T r e a t   t h e   l i s t   a s   a   m a p ,   a n d   t r e a t   a   s p e c i f i c   f i e l d   o f   e a c h   e l e m e n t   a s   a   k e y .   A d d ,   d e l e t e ,   o r   u p d a t e   i n d i v i d u a l   e l e m e n t s .   T h i s   d o e s   n o t   p r e s e r v e   o r d e r i n g .   T h i s   m e r g e   s t r a t e g y   u s e s   a   s p e c i a l   t a g   o n   e a c h   f i e l d   c a l l e d   a   p a t c h M e r g e K e y .   T h e   p a t c h M e r g e K e y   i s   d e f i n e d   f o r   e a c h   f i e l d   i n   t h e   K u b e r n e t e s   s o u r c e   c o d e :   t y p e s . g o   W h e n   m e r g i n g   a   l i s t   o f   m a p s ,   t h e   f i e l d   s p e c i f i e d   a s   t h e   p a t c h M e r g e K e y   f o r   a   g i v e n   e l e m e n t   i s   u s e d   l i k e   a   m a p   k e y   f o r   t h a t   e l e m e n t .   E x a m p l e :   U s e   k u b e c t l   a p p l y   t o   u p d a t e   t h e   c o n t a i n e r s   f i e l d   o f   a   P o d S p e c .   T h i s   m e r g e s   t h e   l i s t   a s   t h o u g h   i t   w a s   a   m a p   w h e r e   e a c h   e l e m e n t   i s   k e y e d   b y   n a m e .   #   l a s t - a p p l i e d - c o n f i g u r a t i o n   v a l u e   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 6   -   n a m e :   n g i n x - h e l p e r - a   #   k e y :   n g i n x - h e l p e r - a ;   w i l l   b e   d e l e t e d   i n   r e s u l t   i m a g e :   h e l p e r : 1 . 3   -   n a m e :   n g i n x - h e l p e r - b   #   k e y :   n g i n x - h e l p e r - b ;   w i l l   b e   r e t a i n e d   i m a g e :   h e l p e r : 1 . 3   #   c o n f i g u r a t i o n   f i l e   v a l u e   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 6   -   n a m e :   n g i n x - h e l p e r - b   i m a g e :   h e l p e r : 1 . 3   -   n a m e :   n g i n x - h e l p e r - c   #   k e y :   n g i n x - h e


Question: What is Merge a list of primitive elements?

Answer: A s   o f   K u b e r n e t e s   1 . 5 ,   m e r g i n g   l i s t s   o f   p r i m i t i v e   e l e m e n t s   i s   n o t   s u p p o r t e d .


Question: What is Default field values?

Answer: T h e   A P I   s e r v e r   s e t s   c e r t a i n   f i e l d s   t o   d e f a u l t   v a l u e s   i n   t h e   l i v e   c o n f i g u r a t i o n   i f   t h e y   a r e   n o t   s p e c i f i e d   w h e n   t h e   o b j e c t   i s   c r e a t e d .   H e r e ' s   a   c o n f i g u r a t i o n   f i l e   f o r   a   D e p l o y m e n t .   T h e   f i l e   d o e s   n o t   s p e c i f y   s t r a t e g y :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   m i n R e a d y S e c o n d s :   5   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 4 . 2   p o r t s :   -   c o n t a i n e r P o r t :   8 0   C r e a t e   t h e   o b j e c t   u s i n g   k u b e c t l   a p p l y :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l   P r i n t   t h e   l i v e   c o n f i g u r a t i o n   u s i n g   k u b e c t l   g e t :   k u b e c t l   g e t   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s i m p l e _ d e p l o y m e n t . y a m l   - o   y a m l   T h e   o u t p u t   s h o w s   t h a t   t h e   A P I   s e r v e r   s e t   s e v e r a l   f i e l d s   t o   d e f a u l t   v a l u e s   i n   t h e   l i v e   c o n f i g u r a t i o n .   T h e s e   f i e l d s   w e r e   n o t   s p e c i f i e d   i n   t h e   c o n f i g u r a t i o n   f i l e .   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   #   . . .   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   m i n R e a d y S e c o n d s :   5   r e p l i c a s :   1   #   d e f a u l t e d   b y   a p i s


Question: What is How to clear server-defaulted fields or fields set by other writers?

Answer: F i e l d s   t h a t   d o   n o t   a p p e a r   i n   t h e   c o n f i g u r a t i o n   f i l e   c a n   b e   c l e a r e d   b y   s e t t i n g   t h e i r   v a l u e s   t o   n u l l   a n d   t h e n   a p p l y i n g   t h e   c o n f i g u r a t i o n   f i l e .   F o r   f i e l d s   d e f a u l t e d   b y   t h e   s e r v e r ,   t h i s   t r i g g e r s   r e - d e f a u l t i n g   t h e   v a l u e s .


Question: What is How to change ownership of a field between the configuration file and direct imperative writers?

Answer: T h e s e   a r e   t h e   o n l y   m e t h o d s   y o u   s h o u l d   u s e   t o   c h a n g e   a n   i n d i v i d u a l   o b j e c t   f i e l d :   U s e   k u b e c t l   a p p l y . W r i t e   d i r e c t l y   t o   t h e   l i v e   c o n f i g u r a t i o n   w i t h o u t   m o d i f y i n g   t h e   c o n f i g u r a t i o n   f i l e :   f o r   e x a m p l e ,   u s e   k u b e c t l   s c a l e .


Question: What is Changing the owner from a direct imperative writer to a configuration file?

Answer: A d d   t h e   f i e l d   t o   t h e   c o n f i g u r a t i o n   f i l e .   F o r   t h e   f i e l d ,   d i s c o n t i n u e   d i r e c t   u p d a t e s   t o   t h e   l i v e   c o n f i g u r a t i o n   t h a t   d o   n o t   g o   t h r o u g h   k u b e c t l   a p p l y .


Question: What is Changing the owner from a configuration file to a direct imperative writer?

Answer: A s   o f   K u b e r n e t e s   1 . 5 ,   c h a n g i n g   o w n e r s h i p   o f   a   f i e l d   f r o m   a   c o n f i g u r a t i o n   f i l e   t o   a n   i m p e r a t i v e   w r i t e r   r e q u i r e s   m a n u a l   s t e p s :   R e m o v e   t h e   f i e l d   f r o m   t h e   c o n f i g u r a t i o n   f i l e . R e m o v e   t h e   f i e l d   f r o m   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   o n   t h e   l i v e   o b j e c t .


Question: What is Changing management methods?

Answer: K u b e r n e t e s   o b j e c t s   s h o u l d   b e   m a n a g e d   u s i n g   o n l y   o n e   m e t h o d   a t   a   t i m e .   S w i t c h i n g   f r o m   o n e   m e t h o d   t o   a n o t h e r   i s   p o s s i b l e ,   b u t   i s   a   m a n u a l   p r o c e s s .


Question: What is Migrating from imperative command management to declarative object configuration?

Answer: M i g r a t i n g   f r o m   i m p e r a t i v e   c o m m a n d   m a n a g e m e n t   t o   d e c l a r a t i v e   o b j e c t   c o n f i g u r a t i o n   i n v o l v e s   s e v e r a l   m a n u a l   s t e p s :   E x p o r t   t h e   l i v e   o b j e c t   t o   a   l o c a l   c o n f i g u r a t i o n   f i l e : k u b e c t l   g e t   < k i n d > / < n a m e >   - o   y a m l   >   < k i n d > _ < n a m e > . y a m l   M a n u a l l y   r e m o v e   t h e   s t a t u s   f i e l d   f r o m   t h e   c o n f i g u r a t i o n   f i l e . N o t e : T h i s   s t e p   i s   o p t i o n a l ,   a s   k u b e c t l   a p p l y   d o e s   n o t   u p d a t e   t h e   s t a t u s   f i e l d   e v e n   i f   i t   i s   p r e s e n t   i n   t h e   c o n f i g u r a t i o n   f i l e . S e t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   o n   t h e   o b j e c t : k u b e c t l   r e p l a c e   - - s a v e - c o n f i g   - f   < k i n d > _ < n a m e > . y a m l   C h a n g e   p r o c e s s e s   t o   u s e   k u b e c t l   a p p l y   f o r   m a n a g i n g   t h e   o b j e c t   e x c l u s i v e l y .   E x p o r t   t h e   l i v e   o b j e c t   t o   a   l o c a l   c o n f i g u r a t i o n   f i l e :   k u b e c t l   g e t   < k i n d > / < n a m e >   - o   y a m l   >   < k i n d > _ < n a m e > . y a m l   M a n u a l l y   r e m o v e   t h e   s t a t u s   f i e l d   f r o m   t h e   c o n f i g u r a t i o n   f i l e .


Question: What is Note:?

Answer: S e t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   o n   t h e   o b j e c t :   k u b e c t l   r e p l a c e   - - s a v e - c o n f i g   - f   < k i n d > _ < n a m e > . y a m l   C h a n g e   p r o c e s s e s   t o   u s e   k u b e c t l   a p p l y   f o r   m a n a g i n g   t h e   o b j e c t   e x c l u s i v e l y .


Question: What is Migrating from imperative object configuration to declarative object configuration?

Answer: S e t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   o n   t h e   o b j e c t : k u b e c t l   r e p l a c e   - - s a v e - c o n f i g   - f   < k i n d > _ < n a m e > . y a m l   C h a n g e   p r o c e s s e s   t o   u s e   k u b e c t l   a p p l y   f o r   m a n a g i n g   t h e   o b j e c t   e x c l u s i v e l y .   S e t   t h e   k u b e c t l . k u b e r n e t e s . i o / l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   o n   t h e   o b j e c t :   k u b e c t l   r e p l a c e   - - s a v e - c o n f i g   - f   < k i n d > _ < n a m e > . y a m l   C h a n g e   p r o c e s s e s   t o   u s e   k u b e c t l   a p p l y   f o r   m a n a g i n g   t h e   o b j e c t   e x c l u s i v e l y .


Question: What is Warning:?

Answer: T h e   r e c o m m e n d e d   a p p r o a c h   i s   t o   d e f i n e   a   s i n g l e ,   i m m u t a b l e   P o d T e m p l a t e   l a b e l   u s e d   o n l y   b y   t h e   c o n t r o l l e r   s e l e c t o r   w i t h   n o   o t h e r   s e m a n t i c   m e a n i n g .   E x a m p l e :   s e l e c t o r :   m a t c h L a b e l s :   c o n t r o l l e r - s e l e c t o r :   " a p p s / v 1 / d e p l o y m e n t / n g i n x "   t e m p l a t e :   m e t a d a t a :   l a b e l s :   c o n t r o l l e r - s e l e c t o r :   " a p p s / v 1 / d e p l o y m e n t / n g i n x "


Question: What is What's next?

Answer: M a n a g i n g   K u b e r n e t e s   O b j e c t s   U s i n g   I m p e r a t i v e   C o m m a n d s I m p e r a t i v e   M a n a g e m e n t   o f   K u b e r n e t e s   O b j e c t s   U s i n g   C o n f i g u r a t i o n   F i l e s K u b e c t l   C o m m a n d   R e f e r e n c e K u b e r n e t e s   A P I   R e f e r e n c e


Question: What is DeleteOptions?

Answer: DeleteOptionsDeleteOptions may be provided when deleting an API object.import "k8s.io/apimachinery/pkg/apis/meta/v1"DeleteOptions may be provided when deleting an API object.apiVersion (string)APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resourcesdryRun ([]string)Atomic: will be replaced during a mergeWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processedgracePeriodSeconds (int64)The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.ignoreStoreReadErrorWithClusterBreakingPotential (boolean)if set to true, it will trigger an unsafe deletion of the resource in case the normal deletion flow fails with a corrupt object error. A resource is considered corrupt if it can not be retrieved from the underlying storage successfully because of a) its data can not be transformed e.g. decryption failure, or b) it fails to decode into an object. NOTE: unsafe deletion ignores finalizer constraints, skips precondition checks, and removes the object from the storage. WARNING: This may potentially break the cluster if the workload associated with the resource being unsafe-deleted relies on normal deletion flow. Use only if you REALLY know what you are doing. The default value is false, and the user must opt in to enable itkind (string)Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsorphanDependents (boolean)Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.preconditions (Preconditions)Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.preconditions.resourceVersion (string)Specifies the target ResourceVersionpreconditions.uid (string)Specifies the target UID.propagationPolicy (string)Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set


Question: How does DeleteOptions work?

Answer: DeleteOptionsDeleteOptions may be provided when deleting an API object.import "k8s.io/apimachinery/pkg/apis/meta/v1"DeleteOptions may be provided when deleting an API object.apiVersion (string)APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resourcesdryRun ([]string)Atomic: will be replaced during a mergeWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processedgracePeriodSeconds (int64)The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.ignoreStoreReadErrorWithClusterBreakingPotential (boolean)if set to true, it will trigger an unsafe deletion of the resource in case the normal deletion flow fails with a corrupt object error. A resource is considered corrupt if it can not be retrieved from the underlying storage successfully because of a) its data can not be transformed e.g. decryption failure, or b) it fails to decode into an object. NOTE: unsafe deletion ignores finalizer constraints, skips precondition checks, and removes the object from the storage. WARNING: This may potentially break the cluster if the workload associated with the resource being unsafe-deleted relies on normal deletion flow. Use only if you REALLY know what you are doing. The default value is false, and the user must opt in to enable itkind (string)Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsorphanDependents (boolean)Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.preconditions (Preconditions)Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.preconditions.resourceVersion (string)Specifies the target ResourceVersionpreconditions.uid (string)Specifies the target UID.propagationPolicy (string)Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set


Question: When would you use DeleteOptions?

Answer: DeleteOptionsDeleteOptions may be provided when deleting an API object.import "k8s.io/apimachinery/pkg/apis/meta/v1"DeleteOptions may be provided when deleting an API object.apiVersion (string)APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resourcesdryRun ([]string)Atomic: will be replaced during a mergeWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processedgracePeriodSeconds (int64)The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.ignoreStoreReadErrorWithClusterBreakingPotential (boolean)if set to true, it will trigger an unsafe deletion of the resource in case the normal deletion flow fails with a corrupt object error. A resource is considered corrupt if it can not be retrieved from the underlying storage successfully because of a) its data can not be transformed e.g. decryption failure, or b) it fails to decode into an object. NOTE: unsafe deletion ignores finalizer constraints, skips precondition checks, and removes the object from the storage. WARNING: This may potentially break the cluster if the workload associated with the resource being unsafe-deleted relies on normal deletion flow. Use only if you REALLY know what you are doing. The default value is false, and the user must opt in to enable itkind (string)Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsorphanDependents (boolean)Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.preconditions (Preconditions)Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.preconditions.resourceVersion (string)Specifies the target ResourceVersionpreconditions.uid (string)Specifies the target UID.propagationPolicy (string)Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set


Question: What are the benefits of DeleteOptions?

Answer: DeleteOptionsDeleteOptions may be provided when deleting an API object.import "k8s.io/apimachinery/pkg/apis/meta/v1"DeleteOptions may be provided when deleting an API object.apiVersion (string)APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resourcesdryRun ([]string)Atomic: will be replaced during a mergeWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processedgracePeriodSeconds (int64)The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.ignoreStoreReadErrorWithClusterBreakingPotential (boolean)if set to true, it will trigger an unsafe deletion of the resource in case the normal deletion flow fails with a corrupt object error. A resource is considered corrupt if it can not be retrieved from the underlying storage successfully because of a) its data can not be transformed e.g. decryption failure, or b) it fails to decode into an object. NOTE: unsafe deletion ignores finalizer constraints, skips precondition checks, and removes the object from the storage. WARNING: This may potentially break the cluster if the workload associated with the resource being unsafe-deleted relies on normal deletion flow. Use only if you REALLY know what you are doing. The default value is false, and the user must opt in to enable itkind (string)Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsorphanDependents (boolean)Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.preconditions (Preconditions)Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.preconditions.resourceVersion (string)Specifies the target ResourceVersionpreconditions.uid (string)Specifies the target UID.propagationPolicy (string)Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set


Question: What is DeleteOptions?

Answer: i m p o r t   " k 8 s . i o / a p i m a c h i n e r y / p k g / a p i s / m e t a / v 1 "   D e l e t e O p t i o n s   m a y   b e   p r o v i d e d   w h e n   d e l e t i n g   a n   A P I   o b j e c t .   a p i V e r s i o n   ( s t r i n g ) A P I V e r s i o n   d e f i n e s   t h e   v e r s i o n e d   s c h e m a   o f   t h i s   r e p r e s e n t a t i o n   o f   a n   o b j e c t .   S e r v e r s   s h o u l d   c o n v e r t   r e c o g n i z e d   s c h e m a s   t o   t h e   l a t e s t   i n t e r n a l   v a l u e ,   a n d   m a y   r e j e c t   u n r e c o g n i z e d   v a l u e s .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # r e s o u r c e s d r y R u n   ( [ ] s t r i n g ) A t o m i c :   w i l l   b e   r e p l a c e d   d u r i n g   a   m e r g e W h e n   p r e s e n t ,   i n d i c a t e s   t h a t   m o d i f i c a t i o n s   s h o u l d   n o t   b e   p e r s i s t e d .   A n   i n v a l i d   o r   u n r e c o g n i z e d   d r y R u n   d i r e c t i v e   w i l l   r e s u l t   i n   a n   e r r o r   r e s p o n s e   a n d   n o   f u r t h e r   p r o c e s s i n g   o f   t h e   r e q u e s t .   V a l i d   v a l u e s   a r e :   -   A l l :   a l l   d r y   r u n   s t a g e s   w i l l   b e   p r o c e s s e d g r a c e P e r i o d S e c o n d s   ( i n t 6 4 ) T h e   d u r a t i o n   i n   s e c o n d s   b e f o r e   t h e   o b j e c t   s h o u l d   b e   d e l e t e d .   V a l u e   m u s t   b e   n o n - n e g a t i v e   i n t e g e r .   T h e   v a l u e   z e r o   i n d i c a t e s   d e l e t e   i m m e d i a t e l y .   I f   t h i s   v a l u e   i s   n i l ,   t h e   d e f a u l t   g r a c e   p e r i o d   f o r   t h e   s p e c i f i e d   t y p e   w i l l   b e   u s e d .   D e f a u l t s   t o   a   p e r   o b j e c t   v a l u e


Question: What is PKI certificates and requirements?

Answer: PKI certificates and requirementsKubernetes requires PKI certificates for authentication over TLS. If you install Kubernetes with kubeadm, the certificates that your cluster requires are automatically generated. You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server. This page explains the certificates that your cluster requires.How certificates are used by your clusterKubernetes requires PKI for the following operations:Server certificatesServer certificate for the API server endpointServer certificate for the etcd serverServer certificates for each kubelet (every node runs a kubelet)Optional server certificate for the front-proxyClient certificatesClient certificates for each kubelet, used to authenticate to the API server as a client of the Kubernetes APIClient certificate for each API server, used to authenticate to etcdClient certificate for the controller manager to securely communicate with the API serverClient certificate for the scheduler to securely communicate with the API serverClient certificates, one for each node, for kube-proxy to authenticate to the API serverOptional client certificates for administrators of the cluster to authenticate to the API serverOptional client certificate for the front-proxyKubelet's server and client certificatesTo establish a secure connection and authenticate itself to the kubelet, the API Server requires a client certificate and key pair.In this scenario, there are two approaches for certificate usage:Shared Certificates: The kube-apiserver can utilize the same certificate and key pair it uses to authenticate its clients. This means that the existing certificates, such as apiserver.crt and apiserver.key, can be used for communicating with the kubelet servers.Separate Certificates: Alternatively, the kube-apiserver can generate a new client certificate and key pair to authenticate its communication with the kubelet servers. In this case, a distinct certificate named kubelet-client.crt and its corresponding private key, kubelet-client.key are created.Note:front-proxy certificates are required only if you run kube-proxy to support an extension API server.etcd also implements mutual TLS to authenticate clients and peers.Where certificates are storedIf you install Kubernetes with kubeadm, most certificates are stored in /etc/kubernetes/pki. All paths in this documentation are relative to that directory, with the exception of user account certificates which kubeadm places in /etc/kubernetes.Configure certificates manuallyIf you don't want kubeadm to generate the required certificates, you can create them using a single root CA or by providing all certificates. See Certificates for details on creating your own certificate authority. See Certificate Management with kubeadm for more on managing certificates.Single root CAYou can create a single root CA, controlled by an administrator. This root CA can then create multiple interme


Question: How does PKI certificates and requirements work?

Answer: PKI certificates and requirementsKubernetes requires PKI certificates for authentication over TLS. If you install Kubernetes with kubeadm, the certificates that your cluster requires are automatically generated. You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server. This page explains the certificates that your cluster requires.How certificates are used by your clusterKubernetes requires PKI for the following operations:Server certificatesServer certificate for the API server endpointServer certificate for the etcd serverServer certificates for each kubelet (every node runs a kubelet)Optional server certificate for the front-proxyClient certificatesClient certificates for each kubelet, used to authenticate to the API server as a client of the Kubernetes APIClient certificate for each API server, used to authenticate to etcdClient certificate for the controller manager to securely communicate with the API serverClient certificate for the scheduler to securely communicate with the API serverClient certificates, one for each node, for kube-proxy to authenticate to the API serverOptional client certificates for administrators of the cluster to authenticate to the API serverOptional client certificate for the front-proxyKubelet's server and client certificatesTo establish a secure connection and authenticate itself to the kubelet, the API Server requires a client certificate and key pair.In this scenario, there are two approaches for certificate usage:Shared Certificates: The kube-apiserver can utilize the same certificate and key pair it uses to authenticate its clients. This means that the existing certificates, such as apiserver.crt and apiserver.key, can be used for communicating with the kubelet servers.Separate Certificates: Alternatively, the kube-apiserver can generate a new client certificate and key pair to authenticate its communication with the kubelet servers. In this case, a distinct certificate named kubelet-client.crt and its corresponding private key, kubelet-client.key are created.Note:front-proxy certificates are required only if you run kube-proxy to support an extension API server.etcd also implements mutual TLS to authenticate clients and peers.Where certificates are storedIf you install Kubernetes with kubeadm, most certificates are stored in /etc/kubernetes/pki. All paths in this documentation are relative to that directory, with the exception of user account certificates which kubeadm places in /etc/kubernetes.Configure certificates manuallyIf you don't want kubeadm to generate the required certificates, you can create them using a single root CA or by providing all certificates. See Certificates for details on creating your own certificate authority. See Certificate Management with kubeadm for more on managing certificates.Single root CAYou can create a single root CA, controlled by an administrator. This root CA can then create multiple interme


Question: When would you use PKI certificates and requirements?

Answer: PKI certificates and requirementsKubernetes requires PKI certificates for authentication over TLS. If you install Kubernetes with kubeadm, the certificates that your cluster requires are automatically generated. You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server. This page explains the certificates that your cluster requires.How certificates are used by your clusterKubernetes requires PKI for the following operations:Server certificatesServer certificate for the API server endpointServer certificate for the etcd serverServer certificates for each kubelet (every node runs a kubelet)Optional server certificate for the front-proxyClient certificatesClient certificates for each kubelet, used to authenticate to the API server as a client of the Kubernetes APIClient certificate for each API server, used to authenticate to etcdClient certificate for the controller manager to securely communicate with the API serverClient certificate for the scheduler to securely communicate with the API serverClient certificates, one for each node, for kube-proxy to authenticate to the API serverOptional client certificates for administrators of the cluster to authenticate to the API serverOptional client certificate for the front-proxyKubelet's server and client certificatesTo establish a secure connection and authenticate itself to the kubelet, the API Server requires a client certificate and key pair.In this scenario, there are two approaches for certificate usage:Shared Certificates: The kube-apiserver can utilize the same certificate and key pair it uses to authenticate its clients. This means that the existing certificates, such as apiserver.crt and apiserver.key, can be used for communicating with the kubelet servers.Separate Certificates: Alternatively, the kube-apiserver can generate a new client certificate and key pair to authenticate its communication with the kubelet servers. In this case, a distinct certificate named kubelet-client.crt and its corresponding private key, kubelet-client.key are created.Note:front-proxy certificates are required only if you run kube-proxy to support an extension API server.etcd also implements mutual TLS to authenticate clients and peers.Where certificates are storedIf you install Kubernetes with kubeadm, most certificates are stored in /etc/kubernetes/pki. All paths in this documentation are relative to that directory, with the exception of user account certificates which kubeadm places in /etc/kubernetes.Configure certificates manuallyIf you don't want kubeadm to generate the required certificates, you can create them using a single root CA or by providing all certificates. See Certificates for details on creating your own certificate authority. See Certificate Management with kubeadm for more on managing certificates.Single root CAYou can create a single root CA, controlled by an administrator. This root CA can then create multiple interme


Question: What are the benefits of PKI certificates and requirements?

Answer: PKI certificates and requirementsKubernetes requires PKI certificates for authentication over TLS. If you install Kubernetes with kubeadm, the certificates that your cluster requires are automatically generated. You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server. This page explains the certificates that your cluster requires.How certificates are used by your clusterKubernetes requires PKI for the following operations:Server certificatesServer certificate for the API server endpointServer certificate for the etcd serverServer certificates for each kubelet (every node runs a kubelet)Optional server certificate for the front-proxyClient certificatesClient certificates for each kubelet, used to authenticate to the API server as a client of the Kubernetes APIClient certificate for each API server, used to authenticate to etcdClient certificate for the controller manager to securely communicate with the API serverClient certificate for the scheduler to securely communicate with the API serverClient certificates, one for each node, for kube-proxy to authenticate to the API serverOptional client certificates for administrators of the cluster to authenticate to the API serverOptional client certificate for the front-proxyKubelet's server and client certificatesTo establish a secure connection and authenticate itself to the kubelet, the API Server requires a client certificate and key pair.In this scenario, there are two approaches for certificate usage:Shared Certificates: The kube-apiserver can utilize the same certificate and key pair it uses to authenticate its clients. This means that the existing certificates, such as apiserver.crt and apiserver.key, can be used for communicating with the kubelet servers.Separate Certificates: Alternatively, the kube-apiserver can generate a new client certificate and key pair to authenticate its communication with the kubelet servers. In this case, a distinct certificate named kubelet-client.crt and its corresponding private key, kubelet-client.key are created.Note:front-proxy certificates are required only if you run kube-proxy to support an extension API server.etcd also implements mutual TLS to authenticate clients and peers.Where certificates are storedIf you install Kubernetes with kubeadm, most certificates are stored in /etc/kubernetes/pki. All paths in this documentation are relative to that directory, with the exception of user account certificates which kubeadm places in /etc/kubernetes.Configure certificates manuallyIf you don't want kubeadm to generate the required certificates, you can create them using a single root CA or by providing all certificates. See Certificates for details on creating your own certificate authority. See Certificate Management with kubeadm for more on managing certificates.Single root CAYou can create a single root CA, controlled by an administrator. This root CA can then create multiple interme


Question: What is PKI certificates and requirements?

Answer: K u b e r n e t e s   r e q u i r e s   P K I   c e r t i f i c a t e s   f o r   a u t h e n t i c a t i o n   o v e r   T L S .   I f   y o u   i n s t a l l   K u b e r n e t e s   w i t h   k u b e a d m ,   t h e   c e r t i f i c a t e s   t h a t   y o u r   c l u s t e r   r e q u i r e s   a r e   a u t o m a t i c a l l y   g e n e r a t e d .   Y o u   c a n   a l s o   g e n e r a t e   y o u r   o w n   c e r t i f i c a t e s   - -   f o r   e x a m p l e ,   t o   k e e p   y o u r   p r i v a t e   k e y s   m o r e   s e c u r e   b y   n o t   s t o r i n g   t h e m   o n   t h e   A P I   s e r v e r .   T h i s   p a g e   e x p l a i n s   t h e   c e r t i f i c a t e s   t h a t   y o u r   c l u s t e r   r e q u i r e s .


Question: What is How certificates are used by your cluster?

Answer: K u b e r n e t e s   r e q u i r e s   P K I   f o r   t h e   f o l l o w i n g   o p e r a t i o n s :


Question: What is Server certificates?

Answer: S e r v e r   c e r t i f i c a t e   f o r   t h e   A P I   s e r v e r   e n d p o i n t S e r v e r   c e r t i f i c a t e   f o r   t h e   e t c d   s e r v e r S e r v e r   c e r t i f i c a t e s   f o r   e a c h   k u b e l e t   ( e v e r y   n o d e   r u n s   a   k u b e l e t ) O p t i o n a l   s e r v e r   c e r t i f i c a t e   f o r   t h e   f r o n t - p r o x y


Question: What is Client certificates?

Answer: C l i e n t   c e r t i f i c a t e s   f o r   e a c h   k u b e l e t ,   u s e d   t o   a u t h e n t i c a t e   t o   t h e   A P I   s e r v e r   a s   a   c l i e n t   o f   t h e   K u b e r n e t e s   A P I C l i e n t   c e r t i f i c a t e   f o r   e a c h   A P I   s e r v e r ,   u s e d   t o   a u t h e n t i c a t e   t o   e t c d C l i e n t   c e r t i f i c a t e   f o r   t h e   c o n t r o l l e r   m a n a g e r   t o   s e c u r e l y   c o m m u n i c a t e   w i t h   t h e   A P I   s e r v e r C l i e n t   c e r t i f i c a t e   f o r   t h e   s c h e d u l e r   t o   s e c u r e l y   c o m m u n i c a t e   w i t h   t h e   A P I   s e r v e r C l i e n t   c e r t i f i c a t e s ,   o n e   f o r   e a c h   n o d e ,   f o r   k u b e - p r o x y   t o   a u t h e n t i c a t e   t o   t h e   A P I   s e r v e r O p t i o n a l   c l i e n t   c e r t i f i c a t e s   f o r   a d m i n i s t r a t o r s   o f   t h e   c l u s t e r   t o   a u t h e n t i c a t e   t o   t h e   A P I   s e r v e r O p t i o n a l   c l i e n t   c e r t i f i c a t e   f o r   t h e   f r o n t - p r o x y


Question: What is Kubelet's server and client certificates?

Answer: T o   e s t a b l i s h   a   s e c u r e   c o n n e c t i o n   a n d   a u t h e n t i c a t e   i t s e l f   t o   t h e   k u b e l e t ,   t h e   A P I   S e r v e r   r e q u i r e s   a   c l i e n t   c e r t i f i c a t e   a n d   k e y   p a i r .   I n   t h i s   s c e n a r i o ,   t h e r e   a r e   t w o   a p p r o a c h e s   f o r   c e r t i f i c a t e   u s a g e :   S h a r e d   C e r t i f i c a t e s :   T h e   k u b e - a p i s e r v e r   c a n   u t i l i z e   t h e   s a m e   c e r t i f i c a t e   a n d   k e y   p a i r   i t   u s e s   t o   a u t h e n t i c a t e   i t s   c l i e n t s .   T h i s   m e a n s   t h a t   t h e   e x i s t i n g   c e r t i f i c a t e s ,   s u c h   a s   a p i s e r v e r . c r t   a n d   a p i s e r v e r . k e y ,   c a n   b e   u s e d   f o r   c o m m u n i c a t i n g   w i t h   t h e   k u b e l e t   s e r v e r s . S e p a r a t e   C e r t i f i c a t e s :   A l t e r n a t i v e l y ,   t h e   k u b e - a p i s e r v e r   c a n   g e n e r a t e   a   n e w   c l i e n t   c e r t i f i c a t e   a n d   k e y   p a i r   t o   a u t h e n t i c a t e   i t s   c o m m u n i c a t i o n   w i t h   t h e   k u b e l e t   s e r v e r s .   I n   t h i s   c a s e ,   a   d i s t i n c t   c e r t i f i c a t e   n a m e d   k u b e l e t - c l i e n t . c r t   a n d   i t s   c o r r e s p o n d i n g   p r i v a t e   k e y ,   k u b e l e t - c l i e n t . k e y   a r e   c r e a t e d .   S h a r e d   C e r t i f i c a t e s :   T h e   k u b e - a p i s e r v e r   c a n   u t i l i z e   t h e   s a m e   c e r t i f i c a t e   a n d   k e y   p a i r   i t   u s e s   t o   a u t h e n t i c a t e   i t s   c l i e n t s .   T h i s   m e a n s   t h a t   t h e   e x i s t i n g   c e r t i f i c a t e s ,   s u c h   a s   a p i s e r v e r . c r t   a n d   a p i s e r v e r . k e y ,   c a n   b e   u s e d   f o r   c o m m u n i c a t i n g   w i t h   t


Question: What is Note:?

Answer: e t c d   a l s o   i m p l e m e n t s   m u t u a l   T L S   t o   a u t h e n t i c a t e   c l i e n t s   a n d   p e e r s .


Question: What is Where certificates are stored?

Answer: I f   y o u   i n s t a l l   K u b e r n e t e s   w i t h   k u b e a d m ,   m o s t   c e r t i f i c a t e s   a r e   s t o r e d   i n   / e t c / k u b e r n e t e s / p k i .   A l l   p a t h s   i n   t h i s   d o c u m e n t a t i o n   a r e   r e l a t i v e   t o   t h a t   d i r e c t o r y ,   w i t h   t h e   e x c e p t i o n   o f   u s e r   a c c o u n t   c e r t i f i c a t e s   w h i c h   k u b e a d m   p l a c e s   i n   / e t c / k u b e r n e t e s .


Question: What is Configure certificates manually?

Answer: I f   y o u   d o n ' t   w a n t   k u b e a d m   t o   g e n e r a t e   t h e   r e q u i r e d   c e r t i f i c a t e s ,   y o u   c a n   c r e a t e   t h e m   u s i n g   a   s i n g l e   r o o t   C A   o r   b y   p r o v i d i n g   a l l   c e r t i f i c a t e s .   S e e   C e r t i f i c a t e s   f o r   d e t a i l s   o n   c r e a t i n g   y o u r   o w n   c e r t i f i c a t e   a u t h o r i t y .   S e e   C e r t i f i c a t e   M a n a g e m e n t   w i t h   k u b e a d m   f o r   m o r e   o n   m a n a g i n g   c e r t i f i c a t e s .


Question: What is Single root CA?

Answer: Y o u   c a n   c r e a t e   a   s i n g l e   r o o t   C A ,   c o n t r o l l e d   b y   a n   a d m i n i s t r a t o r .   T h i s   r o o t   C A   c a n   t h e n   c r e a t e   m u l t i p l e   i n t e r m e d i a t e   C A s ,   a n d   d e l e g a t e   a l l   f u r t h e r   c r e a t i o n   t o   K u b e r n e t e s   i t s e l f .   R e q u i r e d   C A s :   O n   t o p   o f   t h e   a b o v e   C A s ,   i t   i s   a l s o   n e c e s s a r y   t o   g e t   a   p u b l i c / p r i v a t e   k e y   p a i r   f o r   s e r v i c e   a c c o u n t   m a n a g e m e n t ,   s a . k e y   a n d   s a . p u b .   T h e   f o l l o w i n g   e x a m p l e   i l l u s t r a t e s   t h e   C A   k e y   a n d   c e r t i f i c a t e   f i l e s   s h o w n   i n   t h e   p r e v i o u s   t a b l e :   / e t c / k u b e r n e t e s / p k i / c a . c r t   / e t c / k u b e r n e t e s / p k i / c a . k e y   / e t c / k u b e r n e t e s / p k i / e t c d / c a . c r t   / e t c / k u b e r n e t e s / p k i / e t c d / c a . k e y   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c a . c r t   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c a . k e y


Question: What is All certificates?

Answer: I f   y o u   d o n ' t   w i s h   t o   c o p y   t h e   C A   p r i v a t e   k e y s   t o   y o u r   c l u s t e r ,   y o u   c a n   g e n e r a t e   a l l   c e r t i f i c a t e s   y o u r s e l f .   R e q u i r e d   c e r t i f i c a t e s :


Question: What is Note:?

Answer: w h e r e   k i n d   m a p s   t o   o n e   o r   m o r e   o f   t h e   x 5 0 9   k e y   u s a g e ,   w h i c h   i s   a l s o   d o c u m e n t e d   i n   t h e   . s p e c . u s a g e s   o f   a   C e r t i f i c a t e S i g n i n g R e q u e s t   t y p e :


Question: What is Note:?

Answer: F o r   k u b e a d m   u s e r s   o n l y :   T h e   s c e n a r i o   w h e r e   y o u   a r e   c o p y i n g   t o   y o u r   c l u s t e r   C A   c e r t i f i c a t e s   w i t h o u t   p r i v a t e   k e y s   i s   r e f e r r e d   a s   e x t e r n a l   C A   i n   t h e   k u b e a d m   d o c u m e n t a t i o n . I f   y o u   a r e   c o m p a r i n g   t h e   a b o v e   l i s t   w i t h   a   k u b e a d m   g e n e r a t e d   P K I ,   p l e a s e   b e   a w a r e   t h a t   k u b e - e t c d ,   k u b e - e t c d - p e e r   a n d   k u b e - e t c d - h e a l t h c h e c k - c l i e n t   c e r t i f i c a t e s   a r e   n o t   g e n e r a t e d   i n   c a s e   o f   e x t e r n a l   e t c d .


Question: What is Certificate paths?

Answer: C e r t i f i c a t e s   s h o u l d   b e   p l a c e d   i n   a   r e c o m m e n d e d   p a t h   ( a s   u s e d   b y   k u b e a d m ) .   P a t h s   s h o u l d   b e   s p e c i f i e d   u s i n g   t h e   g i v e n   a r g u m e n t   r e g a r d l e s s   o f   l o c a t i o n .   S a m e   c o n s i d e r a t i o n s   a p p l y   f o r   t h e   s e r v i c e   a c c o u n t   k e y   p a i r :   T h e   f o l l o w i n g   e x a m p l e   i l l u s t r a t e s   t h e   f i l e   p a t h s   f r o m   t h e   p r e v i o u s   t a b l e s   y o u   n e e d   t o   p r o v i d e   i f   y o u   a r e   g e n e r a t i n g   a l l   o f   y o u r   o w n   k e y s   a n d   c e r t i f i c a t e s :   / e t c / k u b e r n e t e s / p k i / e t c d / c a . k e y   / e t c / k u b e r n e t e s / p k i / e t c d / c a . c r t   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r - e t c d - c l i e n t . k e y   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r - e t c d - c l i e n t . c r t   / e t c / k u b e r n e t e s / p k i / c a . k e y   / e t c / k u b e r n e t e s / p k i / c a . c r t   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r . k e y   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r . c r t   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r - k u b e l e t - c l i e n t . k e y   / e t c / k u b e r n e t e s / p k i / a p i s e r v e r - k u b e l e t - c l i e n t . c r t   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c a . k e y   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c a . c r t   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c l i e n t . k e y   / e t c / k u b e r n e t e s / p k i / f r o n t - p r o x y - c l i e n t . c r t   / e t c / k u b e r n e t e s / p k i / e t c d / s e r v e r . k e y   / e t c / k u b e r n e t e s / p k i / e t c d / s e r v e r . c r t   / e t c / k u b e r n e t e s / p k i / e t c d


Question: What is Configure certificates for user accounts?

Answer: Y o u   m u s t   m a n u a l l y   c o n f i g u r e   t h e s e   a d m i n i s t r a t o r   a c c o u n t s   a n d   s e r v i c e   a c c o u n t s :


Question: What is Note:?

Answer: I n   t h e   a b o v e   e x a m p l e   < a d m i n - g r o u p >   i s   i m p l e m e n t a t i o n   s p e c i f i c .   S o m e   t o o l s   s i g n   t h e   c e r t i f i c a t e   i n   t h e   d e f a u l t   a d m i n . c o n f   t o   b e   p a r t   o f   t h e   s y s t e m : m a s t e r s   g r o u p .   s y s t e m : m a s t e r s   i s   a   b r e a k - g l a s s ,   s u p e r   u s e r   g r o u p   c a n   b y p a s s   t h e   a u t h o r i z a t i o n   l a y e r   o f   K u b e r n e t e s ,   s u c h   a s   R B A C .   A l s o   s o m e   t o o l s   d o   n o t   g e n e r a t e   a   s e p a r a t e   s u p e r - a d m i n . c o n f   w i t h   a   c e r t i f i c a t e   b o u n d   t o   t h i s   s u p e r   u s e r   g r o u p .   k u b e a d m   g e n e r a t e s   t w o   s e p a r a t e   a d m i n i s t r a t o r   c e r t i f i c a t e s   i n   k u b e c o n f i g   f i l e s .   O n e   i s   i n   a d m i n . c o n f   a n d   h a s   S u b j e c t :   O   =   k u b e a d m : c l u s t e r - a d m i n s ,   C N   =   k u b e r n e t e s - a d m i n .   k u b e a d m : c l u s t e r - a d m i n s   i s   a   c u s t o m   g r o u p   b o u n d   t o   t h e   c l u s t e r - a d m i n   C l u s t e r R o l e .   T h i s   f i l e   i s   g e n e r a t e d   o n   a l l   k u b e a d m   m a n a g e d   c o n t r o l   p l a n e   m a c h i n e s .   A n o t h e r   i s   i n   s u p e r - a d m i n . c o n f   t h a t   h a s   S u b j e c t :   O   =   s y s t e m : m a s t e r s ,   C N   =   k u b e r n e t e s - s u p e r - a d m i n .   T h i s   f i l e   i s   g e n e r a t e d   o n l y   o n   t h e   n o d e   w h e r e   k u b e a d m   i n i t   w a s   c a l l e d .   F o r   e a c h   c o n f i g u r a t i o n ,   g e n e r a t e   a n   x 5 0 9   c e r t i f i c a t e / k e y   p a i r   w i t h   t h e   g i v e n   C o m m o n   N a m e   ( C N )   a n d   O r g a n i z a t i o n   ( O ) . R u n   k u b e c t l


Question: What is Running Kubelet in Standalone Mode?

Answer: Running Kubelet in Standalone ModeThis tutorial shows you how to run a standalone kubelet instance.You may have different motivations for running a standalone kubelet. This tutorial is aimed at introducing you to Kubernetes, even if you don't have much experience with it. You can follow this tutorial and learn about node setup, basic (static) Pods, and how Kubernetes manages containers.Once you have followed this tutorial, you could try using a cluster that has a control plane to manage pods and nodes, and other types of objects. For example, Hello, minikube.You can also run the kubelet in standalone mode to suit production use cases, such as to run the control plane for a highly available, resiliently deployed cluster. This tutorial does not cover the details you need for running a resilient control plane.ObjectivesInstall cri-o, and kubelet on a Linux system and run them as systemd services.Launch a Pod running nginx that listens to requests on TCP port 80 on the Pod's IP address.Learn how the different components of the solution interact among themselves.Caution:The kubelet configuration used for this tutorial is insecure by design and should not be used in a production environment.Before you beginAdmin (root) access to a Linux system that uses systemd and iptables (or nftables with iptables emulation).Access to the Internet to download the components needed for the tutorial, such as:A container runtime that implements the Kubernetes (CRI).Network plugins (these are often known as Container Networking Interface (CNI))Required CLI tools: curl, tar, jq.Prepare the systemSwap configurationBy default, kubelet fails to start if swap memory is detected on a node. This means that swap should either be disabled or tolerated by kubelet.Note:If you configure the kubelet to tolerate swap, the kubelet still configures Pods (and the containers in those Pods) not to use swap space. To find out how Pods can actually use the available swap, you can read more about swap memory management on Linux nodes.If you have swap memory enabled, either disable it or add failSwapOn: false to the kubelet configuration file.To check if swap is enabled:sudo swapon --show If there is no output from the command, then swap memory is already disabled.To disable swap temporarily:sudo swapoff -a To make this change persistent across reboots:Make sure swap is disabled in either /etc/fstab or systemd.swap, depending on how it was configured on your system.Enable IPv4 packet forwardingTo check if IPv4 packet forwarding is enabled:cat /proc/sys/net/ipv4/ip_forward If the output is 1, it is already enabled. If the output is 0, then follow next steps.To enable IPv4 packet forwarding, create a configuration file that sets the net.ipv4.ip_forward parameter to 1:sudo tee /etc/sysctl.d/k8s.conf <<EOF net.ipv4.ip_forward = 1 EOF Apply the changes to the system:sudo sysctl --system The output is similar to:... * Applying /etc/sysctl.d/k8s.conf ... net.ipv4.ip_forward = 1 * Applying /etc/sysct


Question: How does Running Kubelet in Standalone Mode work?

Answer: Running Kubelet in Standalone ModeThis tutorial shows you how to run a standalone kubelet instance.You may have different motivations for running a standalone kubelet. This tutorial is aimed at introducing you to Kubernetes, even if you don't have much experience with it. You can follow this tutorial and learn about node setup, basic (static) Pods, and how Kubernetes manages containers.Once you have followed this tutorial, you could try using a cluster that has a control plane to manage pods and nodes, and other types of objects. For example, Hello, minikube.You can also run the kubelet in standalone mode to suit production use cases, such as to run the control plane for a highly available, resiliently deployed cluster. This tutorial does not cover the details you need for running a resilient control plane.ObjectivesInstall cri-o, and kubelet on a Linux system and run them as systemd services.Launch a Pod running nginx that listens to requests on TCP port 80 on the Pod's IP address.Learn how the different components of the solution interact among themselves.Caution:The kubelet configuration used for this tutorial is insecure by design and should not be used in a production environment.Before you beginAdmin (root) access to a Linux system that uses systemd and iptables (or nftables with iptables emulation).Access to the Internet to download the components needed for the tutorial, such as:A container runtime that implements the Kubernetes (CRI).Network plugins (these are often known as Container Networking Interface (CNI))Required CLI tools: curl, tar, jq.Prepare the systemSwap configurationBy default, kubelet fails to start if swap memory is detected on a node. This means that swap should either be disabled or tolerated by kubelet.Note:If you configure the kubelet to tolerate swap, the kubelet still configures Pods (and the containers in those Pods) not to use swap space. To find out how Pods can actually use the available swap, you can read more about swap memory management on Linux nodes.If you have swap memory enabled, either disable it or add failSwapOn: false to the kubelet configuration file.To check if swap is enabled:sudo swapon --show If there is no output from the command, then swap memory is already disabled.To disable swap temporarily:sudo swapoff -a To make this change persistent across reboots:Make sure swap is disabled in either /etc/fstab or systemd.swap, depending on how it was configured on your system.Enable IPv4 packet forwardingTo check if IPv4 packet forwarding is enabled:cat /proc/sys/net/ipv4/ip_forward If the output is 1, it is already enabled. If the output is 0, then follow next steps.To enable IPv4 packet forwarding, create a configuration file that sets the net.ipv4.ip_forward parameter to 1:sudo tee /etc/sysctl.d/k8s.conf <<EOF net.ipv4.ip_forward = 1 EOF Apply the changes to the system:sudo sysctl --system The output is similar to:... * Applying /etc/sysctl.d/k8s.conf ... net.ipv4.ip_forward = 1 * Applying /etc/sysct


Question: When would you use Running Kubelet in Standalone Mode?

Answer: Running Kubelet in Standalone ModeThis tutorial shows you how to run a standalone kubelet instance.You may have different motivations for running a standalone kubelet. This tutorial is aimed at introducing you to Kubernetes, even if you don't have much experience with it. You can follow this tutorial and learn about node setup, basic (static) Pods, and how Kubernetes manages containers.Once you have followed this tutorial, you could try using a cluster that has a control plane to manage pods and nodes, and other types of objects. For example, Hello, minikube.You can also run the kubelet in standalone mode to suit production use cases, such as to run the control plane for a highly available, resiliently deployed cluster. This tutorial does not cover the details you need for running a resilient control plane.ObjectivesInstall cri-o, and kubelet on a Linux system and run them as systemd services.Launch a Pod running nginx that listens to requests on TCP port 80 on the Pod's IP address.Learn how the different components of the solution interact among themselves.Caution:The kubelet configuration used for this tutorial is insecure by design and should not be used in a production environment.Before you beginAdmin (root) access to a Linux system that uses systemd and iptables (or nftables with iptables emulation).Access to the Internet to download the components needed for the tutorial, such as:A container runtime that implements the Kubernetes (CRI).Network plugins (these are often known as Container Networking Interface (CNI))Required CLI tools: curl, tar, jq.Prepare the systemSwap configurationBy default, kubelet fails to start if swap memory is detected on a node. This means that swap should either be disabled or tolerated by kubelet.Note:If you configure the kubelet to tolerate swap, the kubelet still configures Pods (and the containers in those Pods) not to use swap space. To find out how Pods can actually use the available swap, you can read more about swap memory management on Linux nodes.If you have swap memory enabled, either disable it or add failSwapOn: false to the kubelet configuration file.To check if swap is enabled:sudo swapon --show If there is no output from the command, then swap memory is already disabled.To disable swap temporarily:sudo swapoff -a To make this change persistent across reboots:Make sure swap is disabled in either /etc/fstab or systemd.swap, depending on how it was configured on your system.Enable IPv4 packet forwardingTo check if IPv4 packet forwarding is enabled:cat /proc/sys/net/ipv4/ip_forward If the output is 1, it is already enabled. If the output is 0, then follow next steps.To enable IPv4 packet forwarding, create a configuration file that sets the net.ipv4.ip_forward parameter to 1:sudo tee /etc/sysctl.d/k8s.conf <<EOF net.ipv4.ip_forward = 1 EOF Apply the changes to the system:sudo sysctl --system The output is similar to:... * Applying /etc/sysctl.d/k8s.conf ... net.ipv4.ip_forward = 1 * Applying /etc/sysct


Question: What are the benefits of Running Kubelet in Standalone Mode?

Answer: Running Kubelet in Standalone ModeThis tutorial shows you how to run a standalone kubelet instance.You may have different motivations for running a standalone kubelet. This tutorial is aimed at introducing you to Kubernetes, even if you don't have much experience with it. You can follow this tutorial and learn about node setup, basic (static) Pods, and how Kubernetes manages containers.Once you have followed this tutorial, you could try using a cluster that has a control plane to manage pods and nodes, and other types of objects. For example, Hello, minikube.You can also run the kubelet in standalone mode to suit production use cases, such as to run the control plane for a highly available, resiliently deployed cluster. This tutorial does not cover the details you need for running a resilient control plane.ObjectivesInstall cri-o, and kubelet on a Linux system and run them as systemd services.Launch a Pod running nginx that listens to requests on TCP port 80 on the Pod's IP address.Learn how the different components of the solution interact among themselves.Caution:The kubelet configuration used for this tutorial is insecure by design and should not be used in a production environment.Before you beginAdmin (root) access to a Linux system that uses systemd and iptables (or nftables with iptables emulation).Access to the Internet to download the components needed for the tutorial, such as:A container runtime that implements the Kubernetes (CRI).Network plugins (these are often known as Container Networking Interface (CNI))Required CLI tools: curl, tar, jq.Prepare the systemSwap configurationBy default, kubelet fails to start if swap memory is detected on a node. This means that swap should either be disabled or tolerated by kubelet.Note:If you configure the kubelet to tolerate swap, the kubelet still configures Pods (and the containers in those Pods) not to use swap space. To find out how Pods can actually use the available swap, you can read more about swap memory management on Linux nodes.If you have swap memory enabled, either disable it or add failSwapOn: false to the kubelet configuration file.To check if swap is enabled:sudo swapon --show If there is no output from the command, then swap memory is already disabled.To disable swap temporarily:sudo swapoff -a To make this change persistent across reboots:Make sure swap is disabled in either /etc/fstab or systemd.swap, depending on how it was configured on your system.Enable IPv4 packet forwardingTo check if IPv4 packet forwarding is enabled:cat /proc/sys/net/ipv4/ip_forward If the output is 1, it is already enabled. If the output is 0, then follow next steps.To enable IPv4 packet forwarding, create a configuration file that sets the net.ipv4.ip_forward parameter to 1:sudo tee /etc/sysctl.d/k8s.conf <<EOF net.ipv4.ip_forward = 1 EOF Apply the changes to the system:sudo sysctl --system The output is similar to:... * Applying /etc/sysctl.d/k8s.conf ... net.ipv4.ip_forward = 1 * Applying /etc/sysct


Question: What is Running Kubelet in Standalone Mode?

Answer: T h i s   t u t o r i a l   s h o w s   y o u   h o w   t o   r u n   a   s t a n d a l o n e   k u b e l e t   i n s t a n c e .   Y o u   m a y   h a v e   d i f f e r e n t   m o t i v a t i o n s   f o r   r u n n i n g   a   s t a n d a l o n e   k u b e l e t .   T h i s   t u t o r i a l   i s   a i m e d   a t   i n t r o d u c i n g   y o u   t o   K u b e r n e t e s ,   e v e n   i f   y o u   d o n ' t   h a v e   m u c h   e x p e r i e n c e   w i t h   i t .   Y o u   c a n   f o l l o w   t h i s   t u t o r i a l   a n d   l e a r n   a b o u t   n o d e   s e t u p ,   b a s i c   ( s t a t i c )   P o d s ,   a n d   h o w   K u b e r n e t e s   m a n a g e s   c o n t a i n e r s .   O n c e   y o u   h a v e   f o l l o w e d   t h i s   t u t o r i a l ,   y o u   c o u l d   t r y   u s i n g   a   c l u s t e r   t h a t   h a s   a   c o n t r o l   p l a n e   t o   m a n a g e   p o d s   a n d   n o d e s ,   a n d   o t h e r   t y p e s   o f   o b j e c t s .   F o r   e x a m p l e ,   H e l l o ,   m i n i k u b e .   Y o u   c a n   a l s o   r u n   t h e   k u b e l e t   i n   s t a n d a l o n e   m o d e   t o   s u i t   p r o d u c t i o n   u s e   c a s e s ,   s u c h   a s   t o   r u n   t h e   c o n t r o l   p l a n e   f o r   a   h i g h l y   a v a i l a b l e ,   r e s i l i e n t l y   d e p l o y e d   c l u s t e r .   T h i s   t u t o r i a l   d o e s   n o t   c o v e r   t h e   d e t a i l s   y o u   n e e d   f o r   r u n n i n g   a   r e s i l i e n t   c o n t r o l   p l a n e .


Question: What is Objectives?

Answer: I n s t a l l   c r i - o ,   a n d   k u b e l e t   o n   a   L i n u x   s y s t e m   a n d   r u n   t h e m   a s   s y s t e m d   s e r v i c e s . L a u n c h   a   P o d   r u n n i n g   n g i n x   t h a t   l i s t e n s   t o   r e q u e s t s   o n   T C P   p o r t   8 0   o n   t h e   P o d ' s   I P   a d d r e s s . L e a r n   h o w   t h e   d i f f e r e n t   c o m p o n e n t s   o f   t h e   s o l u t i o n   i n t e r a c t   a m o n g   t h e m s e l v e s .


Question: What is Before you begin?

Answer: A d m i n   ( r o o t )   a c c e s s   t o   a   L i n u x   s y s t e m   t h a t   u s e s   s y s t e m d   a n d   i p t a b l e s   ( o r   n f t a b l e s   w i t h   i p t a b l e s   e m u l a t i o n ) . A c c e s s   t o   t h e   I n t e r n e t   t o   d o w n l o a d   t h e   c o m p o n e n t s   n e e d e d   f o r   t h e   t u t o r i a l ,   s u c h   a s : A   c o n t a i n e r   r u n t i m e   t h a t   i m p l e m e n t s   t h e   K u b e r n e t e s   ( C R I ) . N e t w o r k   p l u g i n s   ( t h e s e   a r e   o f t e n   k n o w n   a s   C o n t a i n e r   N e t w o r k i n g   I n t e r f a c e   ( C N I ) ) R e q u i r e d   C L I   t o o l s :   c u r l ,   t a r ,   j q .   A   c o n t a i n e r   r u n t i m e   t h a t   i m p l e m e n t s   t h e   K u b e r n e t e s   ( C R I ) . N e t w o r k   p l u g i n s   ( t h e s e   a r e   o f t e n   k n o w n   a s   C o n t a i n e r   N e t w o r k i n g   I n t e r f a c e   ( C N I ) ) R e q u i r e d   C L I   t o o l s :   c u r l ,   t a r ,   j q .


Question: What is Swap configuration?

Answer: B y   d e f a u l t ,   k u b e l e t   f a i l s   t o   s t a r t   i f   s w a p   m e m o r y   i s   d e t e c t e d   o n   a   n o d e .   T h i s   m e a n s   t h a t   s w a p   s h o u l d   e i t h e r   b e   d i s a b l e d   o r   t o l e r a t e d   b y   k u b e l e t .


Question: What is Note:?

Answer: I f   y o u   h a v e   s w a p   m e m o r y   e n a b l e d ,   e i t h e r   d i s a b l e   i t   o r   a d d   f a i l S w a p O n :   f a l s e   t o   t h e   k u b e l e t   c o n f i g u r a t i o n   f i l e .   T o   c h e c k   i f   s w a p   i s   e n a b l e d :   s u d o   s w a p o n   - - s h o w   I f   t h e r e   i s   n o   o u t p u t   f r o m   t h e   c o m m a n d ,   t h e n   s w a p   m e m o r y   i s   a l r e a d y   d i s a b l e d .   T o   d i s a b l e   s w a p   t e m p o r a r i l y :   s u d o   s w a p o f f   - a   T o   m a k e   t h i s   c h a n g e   p e r s i s t e n t   a c r o s s   r e b o o t s :   M a k e   s u r e   s w a p   i s   d i s a b l e d   i n   e i t h e r   / e t c / f s t a b   o r   s y s t e m d . s w a p ,   d e p e n d i n g   o n   h o w   i t   w a s   c o n f i g u r e d   o n   y o u r   s y s t e m .


Question: What is Enable IPv4 packet forwarding?

Answer: T o   c h e c k   i f   I P v 4   p a c k e t   f o r w a r d i n g   i s   e n a b l e d :   c a t   / p r o c / s y s / n e t / i p v 4 / i p _ f o r w a r d   I f   t h e   o u t p u t   i s   1 ,   i t   i s   a l r e a d y   e n a b l e d .   I f   t h e   o u t p u t   i s   0 ,   t h e n   f o l l o w   n e x t   s t e p s .   T o   e n a b l e   I P v 4   p a c k e t   f o r w a r d i n g ,   c r e a t e   a   c o n f i g u r a t i o n   f i l e   t h a t   s e t s   t h e   n e t . i p v 4 . i p _ f o r w a r d   p a r a m e t e r   t o   1 :   s u d o   t e e   / e t c / s y s c t l . d / k 8 s . c o n f   < < E O F   n e t . i p v 4 . i p _ f o r w a r d   =   1   E O F   A p p l y   t h e   c h a n g e s   t o   t h e   s y s t e m :   s u d o   s y s c t l   - - s y s t e m   T h e   o u t p u t   i s   s i m i l a r   t o :   . . .   *   A p p l y i n g   / e t c / s y s c t l . d / k 8 s . c o n f   . . .   n e t . i p v 4 . i p _ f o r w a r d   =   1   *   A p p l y i n g   / e t c / s y s c t l . c o n f   . . .


Question: What is Install a container runtime?

Answer: D o w n l o a d   t h e   l a t e s t   a v a i l a b l e   v e r s i o n s   o f   t h e   r e q u i r e d   p a c k a g e s   ( r e c o m m e n d e d ) .   T h i s   t u t o r i a l   s u g g e s t s   i n s t a l l i n g   t h e   C R I - O   c o n t a i n e r   r u n t i m e   ( e x t e r n a l   l i n k ) .   T h e r e   a r e   s e v e r a l   w a y s   t o   i n s t a l l   t h e   C R I - O   c o n t a i n e r   r u n t i m e ,   d e p e n d i n g   o n   y o u r   p a r t i c u l a r   L i n u x   d i s t r i b u t i o n .   A l t h o u g h   C R I - O   r e c o m m e n d s   u s i n g   e i t h e r   d e b   o r   r p m   p a c k a g e s ,   t h i s   t u t o r i a l   u s e s   t h e   s t a t i c   b i n a r y   b u n d l e   s c r i p t   o f   t h e   C R I - O   P a c k a g i n g   p r o j e c t ,   b o t h   t o   s t r e a m l i n e   t h e   o v e r a l l   p r o c e s s ,   a n d   t o   r e m a i n   d i s t r i b u t i o n   a g n o s t i c .   T h e   s c r i p t   i n s t a l l s   a n d   c o n f i g u r e s   a d d i t i o n a l   r e q u i r e d   s o f t w a r e ,   s u c h   a s   c n i - p l u g i n s ,   f o r   c o n t a i n e r   n e t w o r k i n g ,   a n d   c r u n   a n d   r u n c ,   f o r   r u n n i n g   c o n t a i n e r s .   T h e   s c r i p t   w i l l   a u t o m a t i c a l l y   d e t e c t   y o u r   s y s t e m ' s   p r o c e s s o r   a r c h i t e c t u r e   ( a m d 6 4   o r   a r m 6 4 )   a n d   s e l e c t   a n d   i n s t a l l   t h e   l a t e s t   v e r s i o n s   o f   t h e   s o f t w a r e   p a c k a g e s .


Question: What is Set up CRI-O?

Answer: V i s i t   t h e   r e l e a s e s   p a g e   ( e x t e r n a l   l i n k ) .   D o w n l o a d   t h e   s t a t i c   b i n a r y   b u n d l e   s c r i p t :   c u r l   h t t p s : / / r a w . g i t h u b u s e r c o n t e n t . c o m / c r i - o / p a c k a g i n g / m a i n / g e t   >   c r i o - i n s t a l l   R u n   t h e   i n s t a l l e r   s c r i p t :   s u d o   b a s h   c r i o - i n s t a l l   E n a b l e   a n d   s t a r t   t h e   c r i o   s e r v i c e :   s u d o   s y s t e m c t l   d a e m o n - r e l o a d   s u d o   s y s t e m c t l   e n a b l e   - - n o w   c r i o . s e r v i c e   Q u i c k   t e s t :   s u d o   s y s t e m c t l   i s - a c t i v e   c r i o . s e r v i c e   T h e   o u t p u t   i s   s i m i l a r   t o :   a c t i v e   D e t a i l e d   s e r v i c e   c h e c k :   s u d o   j o u r n a l c t l   - f   - u   c r i o . s e r v i c e


Question: What is Install network plugins?

Answer: T h e   c r i - o   i n s t a l l e r   i n s t a l l s   a n d   c o n f i g u r e s   t h e   c n i - p l u g i n s   p a c k a g e .   Y o u   c a n   v e r i f y   t h e   i n s t a l l a t i o n   r u n n i n g   t h e   f o l l o w i n g   c o m m a n d :   / o p t / c n i / b i n / b r i d g e   - - v e r s i o n   T h e   o u t p u t   i s   s i m i l a r   t o :   C N I   b r i d g e   p l u g i n   v 1 . 5 . 1   C N I   p r o t o c o l   v e r s i o n s   s u p p o r t e d :   0 . 1 . 0 ,   0 . 2 . 0 ,   0 . 3 . 0 ,   0 . 3 . 1 ,   0 . 4 . 0 ,   1 . 0 . 0   T o   c h e c k   t h e   d e f a u l t   c o n f i g u r a t i o n :   c a t   / e t c / c n i / n e t . d / 1 1 - c r i o - i p v 4 - b r i d g e . c o n f l i s t   T h e   o u t p u t   i s   s i m i l a r   t o :   {   " c n i V e r s i o n " :   " 1 . 0 . 0 " ,   " n a m e " :   " c r i o " ,   " p l u g i n s " :   [   {   " t y p e " :   " b r i d g e " ,   " b r i d g e " :   " c n i 0 " ,   " i s G a t e w a y " :   t r u e ,   " i p M a s q " :   t r u e ,   " h a i r p i n M o d e " :   t r u e ,   " i p a m " :   {   " t y p e " :   " h o s t - l o c a l " ,   " r o u t e s " :   [   {   " d s t " :   " 0 . 0 . 0 . 0 / 0 "   }   ] ,   " r a n g e s " :   [   [ {   " s u b n e t " :   " 1 0 . 8 5 . 0 . 0 / 1 6 "   } ]   ]   }   }   ]   }