Question: What is Create a Pod that gets assigned a QoS class of BestEffort?

Answer: F o r   a   P o d   t o   b e   g i v e n   a   Q o S   c l a s s   o f   B e s t E f f o r t ,   t h e   C o n t a i n e r s   i n   t h e   P o d   m u s t   n o t   h a v e   a n y   m e m o r y   o r   C P U   l i m i t s   o r   r e q u e s t s .   H e r e   i s   a   m a n i f e s t   f o r   a   P o d   t h a t   h a s   o n e   C o n t a i n e r .   T h e   C o n t a i n e r   h a s   n o   m e m o r y   o r   C P U   l i m i t s   o r   r e q u e s t s :   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   q o s - d e m o - 3   n a m e s p a c e :   q o s - e x a m p l e   s p e c :   c o n t a i n e r s :   -   n a m e :   q o s - d e m o - 3 - c t r   i m a g e :   n g i n x   C r e a t e   t h e   P o d :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / p o d s / q o s / q o s - p o d - 3 . y a m l   - - n a m e s p a c e = q o s - e x a m p l e   V i e w   d e t a i l e d   i n f o r m a t i o n   a b o u t   t h e   P o d :   k u b e c t l   g e t   p o d   q o s - d e m o - 3   - - n a m e s p a c e = q o s - e x a m p l e   - - o u t p u t = y a m l   T h e   o u t p u t   s h o w s   t h a t   K u b e r n e t e s   g a v e   t h e   P o d   a   Q o S   c l a s s   o f   B e s t E f f o r t :   s p e c :   c o n t a i n e r s :   . . .   r e s o u r c e s :   { }   . . .   s t a t u s :   q o s C l a s s :   B e s t E f f o r t


Question: What is Clean up?

Answer: D e l e t e   y o u r   P o d :   k u b e c t l   d e l e t e   p o d   q o s - d e m o - 3   - - n a m e s p a c e = q o s - e x a m p l e


Question: What is Create a Pod that has two Containers?

Answer: H e r e   i s   a   m a n i f e s t   f o r   a   P o d   t h a t   h a s   t w o   C o n t a i n e r s .   O n e   c o n t a i n e r   s p e c i f i e s   a   m e m o r y   r e q u e s t   o f   2 0 0   M i B .   T h e   o t h e r   C o n t a i n e r   d o e s   n o t   s p e c i f y   a n y   r e q u e s t s   o r   l i m i t s .   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   q o s - d e m o - 4   n a m e s p a c e :   q o s - e x a m p l e   s p e c :   c o n t a i n e r s :   -   n a m e :   q o s - d e m o - 4 - c t r - 1   i m a g e :   n g i n x   r e s o u r c e s :   r e q u e s t s :   m e m o r y :   " 2 0 0 M i "   -   n a m e :   q o s - d e m o - 4 - c t r - 2   i m a g e :   r e d i s   N o t i c e   t h a t   t h i s   P o d   m e e t s   t h e   c r i t e r i a   f o r   Q o S   c l a s s   B u r s t a b l e .   T h a t   i s ,   i t   d o e s   n o t   m e e t   t h e   c r i t e r i a   f o r   Q o S   c l a s s   G u a r a n t e e d ,   a n d   o n e   o f   i t s   C o n t a i n e r s   h a s   a   m e m o r y   r e q u e s t .   C r e a t e   t h e   P o d :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / p o d s / q o s / q o s - p o d - 4 . y a m l   - - n a m e s p a c e = q o s - e x a m p l e   V i e w   d e t a i l e d   i n f o r m a t i o n   a b o u t   t h e   P o d :   k u b e c t l   g e t   p o d   q o s - d e m o - 4   - - n a m e s p a c e = q o s - e x a m p l e   - - o u t p u t = y a m l   T h e   o u t p u t   s h o w s   t h a t   K u b e r n e t e s   g a v e   t h e   P o d   a   Q o S   c l a s s   o f   B u r s t a b l e :   s p e c :   c o n t a i n e r s :   . . .   n a m e :   q o s - d e m o - 4 - c t r - 1   r e s o u r c e s :   r e q u e s t s :   m e m o r y :   2 0 0 M i   . . .   n a m e :   q o s - d e m o - 4 - c t r - 2   r e s o u r c e s :   { }   . . .   s t a t u s :   q o s C l a s s :   B u r s t a b l e


Question: What is Retrieve the QoS class for a Pod?

Answer: R a t h e r   t h a n   s e e   a l l   t h e   f i e l d s ,   y o u   c a n   v i e w   j u s t   t h e   f i e l d   y o u   n e e d :   k u b e c t l   - - n a m e s p a c e = q o s - e x a m p l e   g e t   p o d   q o s - d e m o - 4   - o   j s o n p a t h = ' {   . s t a t u s . q o s C l a s s } { " \ n " } '   B u r s t a b l e


Question: What is Clean up?

Answer: D e l e t e   y o u r   n a m e s p a c e :   k u b e c t l   d e l e t e   n a m e s p a c e   q o s - e x a m p l e


Question: What is For app developers?

Answer: A s s i g n   M e m o r y   R e s o u r c e s   t o   C o n t a i n e r s   a n d   P o d s A s s i g n   C P U   R e s o u r c e s   t o   C o n t a i n e r s   a n d   P o d s   A s s i g n   M e m o r y   R e s o u r c e s   t o   C o n t a i n e r s   a n d   P o d s   A s s i g n   C P U   R e s o u r c e s   t o   C o n t a i n e r s   a n d   P o d s


Question: What is For cluster administrators?

Answer: C o n f i g u r e   D e f a u l t   M e m o r y   R e q u e s t s   a n d   L i m i t s   f o r   a   N a m e s p a c e C o n f i g u r e   D e f a u l t   C P U   R e q u e s t s   a n d   L i m i t s   f o r   a   N a m e s p a c e C o n f i g u r e   M i n i m u m   a n d   M a x i m u m   M e m o r y   C o n s t r a i n t s   f o r   a   N a m e s p a c e C o n f i g u r e   M i n i m u m   a n d   M a x i m u m   C P U   C o n s t r a i n t s   f o r   a   N a m e s p a c e C o n f i g u r e   M e m o r y   a n d   C P U   Q u o t a s   f o r   a   N a m e s p a c e C o n f i g u r e   a   P o d   Q u o t a   f o r   a   N a m e s p a c e C o n f i g u r e   Q u o t a s   f o r   A P I   O b j e c t s C o n t r o l   T o p o l o g y   M a n a g e m e n t   p o l i c i e s   o n   a   n o d e   C o n f i g u r e   D e f a u l t   M e m o r y   R e q u e s t s   a n d   L i m i t s   f o r   a   N a m e s p a c e   C o n f i g u r e   D e f a u l t   C P U   R e q u e s t s   a n d   L i m i t s   f o r   a   N a m e s p a c e   C o n f i g u r e   M i n i m u m   a n d   M a x i m u m   M e m o r y   C o n s t r a i n t s   f o r   a   N a m e s p a c e   C o n f i g u r e   M i n i m u m   a n d   M a x i m u m   C P U   C o n s t r a i n t s   f o r   a   N a m e s p a c e   C o n f i g u r e   M e m o r y   a n d   C P U   Q u o t a s   f o r   a   N a m e s p a c e   C o n f i g u r e   a   P o d   Q u o t a   f o r   a   N a m e s p a c e   C o n f i g u r e   Q u o t a s   f o r   A P I   O b j e c t s   C o n t r o l   T o p o l o g y   M a n a g e m e n t   p o l i c i e s   o n   a   n o d e


Question: What is Deploy and Access the Kubernetes Dashboard?

Answer: Deploy and Access the Kubernetes DashboardDeploy the web UI (Kubernetes Dashboard) and access it.Dashboard is a web-based Kubernetes user interface. You can use Dashboard to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.Dashboard also provides information on the state of Kubernetes resources in your cluster and on any errors that may have occurred.Deploying the Dashboard UINote:Kubernetes Dashboard supports only Helm-based installation currently as it is faster and gives us better control over all dependencies required by Dashboard to run.The Dashboard UI is not deployed by default. To deploy it, run the following command:# Add kubernetes-dashboard repository helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/ # Deploy a Helm Release named "kubernetes-dashboard" using the kubernetes-dashboard chart helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard Accessing the Dashboard UITo protect your cluster data, Dashboard deploys with a minimal RBAC configuration by default. Currently, Dashboard only supports logging in with a Bearer Token. To create a token for this demo, you can follow our guide on creating a sample user.Warning:The sample user created in the tutorial will have administrative privileges and is for educational purposes only.Command line proxyYou can enable access to the Dashboard using the kubectl command-line tool, by running the following command:kubectl -n kubernetes-dashboard port-forward svc/kubernetes-dashboard-kong-proxy 8443:443 Kubectl will make Dashboard available at https://localhost:8443.The UI can only be accessed from the machine where the command is executed. See kubectl port-forward --help for more options.Note:The kubeconfig authentication method does not support external identity providers or X.509 certificate-based authentication.Welcome viewWhen you access Dashboard on an empty cluster, you'll see the welcome page. This page contains a link to this document as well as a button to deploy your first application. In addition, you can view which system applications are running by default in the kube-system namespace of your cluster, for example the Dashboard itself.Deploying containerized applicationsDashboard lets you create and deploy a containerized application as a Deployment and optional Service with a simple wizard. You can either manually specify application details, or upload a YAML or JSON manifest file containing application configuration.Click the CREATE button in the upper right corner of a


Question: How does Deploy and Access the Kubernetes Dashboard work?

Answer: Deploy and Access the Kubernetes DashboardDeploy the web UI (Kubernetes Dashboard) and access it.Dashboard is a web-based Kubernetes user interface. You can use Dashboard to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.Dashboard also provides information on the state of Kubernetes resources in your cluster and on any errors that may have occurred.Deploying the Dashboard UINote:Kubernetes Dashboard supports only Helm-based installation currently as it is faster and gives us better control over all dependencies required by Dashboard to run.The Dashboard UI is not deployed by default. To deploy it, run the following command:# Add kubernetes-dashboard repository helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/ # Deploy a Helm Release named "kubernetes-dashboard" using the kubernetes-dashboard chart helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard Accessing the Dashboard UITo protect your cluster data, Dashboard deploys with a minimal RBAC configuration by default. Currently, Dashboard only supports logging in with a Bearer Token. To create a token for this demo, you can follow our guide on creating a sample user.Warning:The sample user created in the tutorial will have administrative privileges and is for educational purposes only.Command line proxyYou can enable access to the Dashboard using the kubectl command-line tool, by running the following command:kubectl -n kubernetes-dashboard port-forward svc/kubernetes-dashboard-kong-proxy 8443:443 Kubectl will make Dashboard available at https://localhost:8443.The UI can only be accessed from the machine where the command is executed. See kubectl port-forward --help for more options.Note:The kubeconfig authentication method does not support external identity providers or X.509 certificate-based authentication.Welcome viewWhen you access Dashboard on an empty cluster, you'll see the welcome page. This page contains a link to this document as well as a button to deploy your first application. In addition, you can view which system applications are running by default in the kube-system namespace of your cluster, for example the Dashboard itself.Deploying containerized applicationsDashboard lets you create and deploy a containerized application as a Deployment and optional Service with a simple wizard. You can either manually specify application details, or upload a YAML or JSON manifest file containing application configuration.Click the CREATE button in the upper right corner of a


Question: When would you use Deploy and Access the Kubernetes Dashboard?

Answer: Deploy and Access the Kubernetes DashboardDeploy the web UI (Kubernetes Dashboard) and access it.Dashboard is a web-based Kubernetes user interface. You can use Dashboard to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.Dashboard also provides information on the state of Kubernetes resources in your cluster and on any errors that may have occurred.Deploying the Dashboard UINote:Kubernetes Dashboard supports only Helm-based installation currently as it is faster and gives us better control over all dependencies required by Dashboard to run.The Dashboard UI is not deployed by default. To deploy it, run the following command:# Add kubernetes-dashboard repository helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/ # Deploy a Helm Release named "kubernetes-dashboard" using the kubernetes-dashboard chart helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard Accessing the Dashboard UITo protect your cluster data, Dashboard deploys with a minimal RBAC configuration by default. Currently, Dashboard only supports logging in with a Bearer Token. To create a token for this demo, you can follow our guide on creating a sample user.Warning:The sample user created in the tutorial will have administrative privileges and is for educational purposes only.Command line proxyYou can enable access to the Dashboard using the kubectl command-line tool, by running the following command:kubectl -n kubernetes-dashboard port-forward svc/kubernetes-dashboard-kong-proxy 8443:443 Kubectl will make Dashboard available at https://localhost:8443.The UI can only be accessed from the machine where the command is executed. See kubectl port-forward --help for more options.Note:The kubeconfig authentication method does not support external identity providers or X.509 certificate-based authentication.Welcome viewWhen you access Dashboard on an empty cluster, you'll see the welcome page. This page contains a link to this document as well as a button to deploy your first application. In addition, you can view which system applications are running by default in the kube-system namespace of your cluster, for example the Dashboard itself.Deploying containerized applicationsDashboard lets you create and deploy a containerized application as a Deployment and optional Service with a simple wizard. You can either manually specify application details, or upload a YAML or JSON manifest file containing application configuration.Click the CREATE button in the upper right corner of a


Question: What are the benefits of Deploy and Access the Kubernetes Dashboard?

Answer: Deploy and Access the Kubernetes DashboardDeploy the web UI (Kubernetes Dashboard) and access it.Dashboard is a web-based Kubernetes user interface. You can use Dashboard to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.Dashboard also provides information on the state of Kubernetes resources in your cluster and on any errors that may have occurred.Deploying the Dashboard UINote:Kubernetes Dashboard supports only Helm-based installation currently as it is faster and gives us better control over all dependencies required by Dashboard to run.The Dashboard UI is not deployed by default. To deploy it, run the following command:# Add kubernetes-dashboard repository helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/ # Deploy a Helm Release named "kubernetes-dashboard" using the kubernetes-dashboard chart helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard Accessing the Dashboard UITo protect your cluster data, Dashboard deploys with a minimal RBAC configuration by default. Currently, Dashboard only supports logging in with a Bearer Token. To create a token for this demo, you can follow our guide on creating a sample user.Warning:The sample user created in the tutorial will have administrative privileges and is for educational purposes only.Command line proxyYou can enable access to the Dashboard using the kubectl command-line tool, by running the following command:kubectl -n kubernetes-dashboard port-forward svc/kubernetes-dashboard-kong-proxy 8443:443 Kubectl will make Dashboard available at https://localhost:8443.The UI can only be accessed from the machine where the command is executed. See kubectl port-forward --help for more options.Note:The kubeconfig authentication method does not support external identity providers or X.509 certificate-based authentication.Welcome viewWhen you access Dashboard on an empty cluster, you'll see the welcome page. This page contains a link to this document as well as a button to deploy your first application. In addition, you can view which system applications are running by default in the kube-system namespace of your cluster, for example the Dashboard itself.Deploying containerized applicationsDashboard lets you create and deploy a containerized application as a Deployment and optional Service with a simple wizard. You can either manually specify application details, or upload a YAML or JSON manifest file containing application configuration.Click the CREATE button in the upper right corner of a


Question: What is Deploy and Access the Kubernetes Dashboard?

Answer: D a s h b o a r d   i s   a   w e b - b a s e d   K u b e r n e t e s   u s e r   i n t e r f a c e .   Y o u   c a n   u s e   D a s h b o a r d   t o   d e p l o y   c o n t a i n e r i z e d   a p p l i c a t i o n s   t o   a   K u b e r n e t e s   c l u s t e r ,   t r o u b l e s h o o t   y o u r   c o n t a i n e r i z e d   a p p l i c a t i o n ,   a n d   m a n a g e   t h e   c l u s t e r   r e s o u r c e s .   Y o u   c a n   u s e   D a s h b o a r d   t o   g e t   a n   o v e r v i e w   o f   a p p l i c a t i o n s   r u n n i n g   o n   y o u r   c l u s t e r ,   a s   w e l l   a s   f o r   c r e a t i n g   o r   m o d i f y i n g   i n d i v i d u a l   K u b e r n e t e s   r e s o u r c e s   ( s u c h   a s   D e p l o y m e n t s ,   J o b s ,   D a e m o n S e t s ,   e t c ) .   F o r   e x a m p l e ,   y o u   c a n   s c a l e   a   D e p l o y m e n t ,   i n i t i a t e   a   r o l l i n g   u p d a t e ,   r e s t a r t   a   p o d   o r   d e p l o y   n e w   a p p l i c a t i o n s   u s i n g   a   d e p l o y   w i z a r d .   D a s h b o a r d   a l s o   p r o v i d e s   i n f o r m a t i o n   o n   t h e   s t a t e   o f   K u b e r n e t e s   r e s o u r c e s   i n   y o u r   c l u s t e r   a n d   o n   a n y   e r r o r s   t h a t   m a y   h a v e   o c c u r r e d .


Question: What is Note:?

Answer: T h e   D a s h b o a r d   U I   i s   n o t   d e p l o y e d   b y   d e f a u l t .   T o   d e p l o y   i t ,   r u n   t h e   f o l l o w i n g   c o m m a n d :   #   A d d   k u b e r n e t e s - d a s h b o a r d   r e p o s i t o r y   h e l m   r e p o   a d d   k u b e r n e t e s - d a s h b o a r d   h t t p s : / / k u b e r n e t e s . g i t h u b . i o / d a s h b o a r d /   #   D e p l o y   a   H e l m   R e l e a s e   n a m e d   " k u b e r n e t e s - d a s h b o a r d "   u s i n g   t h e   k u b e r n e t e s - d a s h b o a r d   c h a r t   h e l m   u p g r a d e   - - i n s t a l l   k u b e r n e t e s - d a s h b o a r d   k u b e r n e t e s - d a s h b o a r d / k u b e r n e t e s - d a s h b o a r d   - - c r e a t e - n a m e s p a c e   - - n a m e s p a c e   k u b e r n e t e s - d a s h b o a r d


Question: What is Accessing the Dashboard UI?

Answer: T o   p r o t e c t   y o u r   c l u s t e r   d a t a ,   D a s h b o a r d   d e p l o y s   w i t h   a   m i n i m a l   R B A C   c o n f i g u r a t i o n   b y   d e f a u l t .   C u r r e n t l y ,   D a s h b o a r d   o n l y   s u p p o r t s   l o g g i n g   i n   w i t h   a   B e a r e r   T o k e n .   T o   c r e a t e   a   t o k e n   f o r   t h i s   d e m o ,   y o u   c a n   f o l l o w   o u r   g u i d e   o n   c r e a t i n g   a   s a m p l e   u s e r .


Question: What is Command line proxy?

Answer: Y o u   c a n   e n a b l e   a c c e s s   t o   t h e   D a s h b o a r d   u s i n g   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l ,   b y   r u n n i n g   t h e   f o l l o w i n g   c o m m a n d :   k u b e c t l   - n   k u b e r n e t e s - d a s h b o a r d   p o r t - f o r w a r d   s v c / k u b e r n e t e s - d a s h b o a r d - k o n g - p r o x y   8 4 4 3 : 4 4 3   K u b e c t l   w i l l   m a k e   D a s h b o a r d   a v a i l a b l e   a t   h t t p s : / / l o c a l h o s t : 8 4 4 3 .   T h e   U I   c a n   o n l y   b e   a c c e s s e d   f r o m   t h e   m a c h i n e   w h e r e   t h e   c o m m a n d   i s   e x e c u t e d .   S e e   k u b e c t l   p o r t - f o r w a r d   - - h e l p   f o r   m o r e   o p t i o n s .


Question: What is Welcome view?

Answer: W h e n   y o u   a c c e s s   D a s h b o a r d   o n   a n   e m p t y   c l u s t e r ,   y o u ' l l   s e e   t h e   w e l c o m e   p a g e .   T h i s   p a g e   c o n t a i n s   a   l i n k   t o   t h i s   d o c u m e n t   a s   w e l l   a s   a   b u t t o n   t o   d e p l o y   y o u r   f i r s t   a p p l i c a t i o n .   I n   a d d i t i o n ,   y o u   c a n   v i e w   w h i c h   s y s t e m   a p p l i c a t i o n s   a r e   r u n n i n g   b y   d e f a u l t   i n   t h e   k u b e - s y s t e m   n a m e s p a c e   o f   y o u r   c l u s t e r ,   f o r   e x a m p l e   t h e   D a s h b o a r d   i t s e l f .


Question: What is Deploying containerized applications?

Answer: D a s h b o a r d   l e t s   y o u   c r e a t e   a n d   d e p l o y   a   c o n t a i n e r i z e d   a p p l i c a t i o n   a s   a   D e p l o y m e n t   a n d   o p t i o n a l   S e r v i c e   w i t h   a   s i m p l e   w i z a r d .   Y o u   c a n   e i t h e r   m a n u a l l y   s p e c i f y   a p p l i c a t i o n   d e t a i l s ,   o r   u p l o a d   a   Y A M L   o r   J S O N   m a n i f e s t   f i l e   c o n t a i n i n g   a p p l i c a t i o n   c o n f i g u r a t i o n .   C l i c k   t h e   C R E A T E   b u t t o n   i n   t h e   u p p e r   r i g h t   c o r n e r   o f   a n y   p a g e   t o   b e g i n .


Question: What is Specifying application details?

Answer: T h e   d e p l o y   w i z a r d   e x p e c t s   t h a t   y o u   p r o v i d e   t h e   f o l l o w i n g   i n f o r m a t i o n :   A p p   n a m e   ( m a n d a t o r y ) :   N a m e   f o r   y o u r   a p p l i c a t i o n .   A   l a b e l   w i t h   t h e   n a m e   w i l l   b e   a d d e d   t o   t h e   D e p l o y m e n t   a n d   S e r v i c e ,   i f   a n y ,   t h a t   w i l l   b e   d e p l o y e d . T h e   a p p l i c a t i o n   n a m e   m u s t   b e   u n i q u e   w i t h i n   t h e   s e l e c t e d   K u b e r n e t e s   n a m e s p a c e .   I t   m u s t   s t a r t   w i t h   a   l o w e r c a s e   c h a r a c t e r ,   a n d   e n d   w i t h   a   l o w e r c a s e   c h a r a c t e r   o r   a   n u m b e r ,   a n d   c o n t a i n   o n l y   l o w e r c a s e   l e t t e r s ,   n u m b e r s   a n d   d a s h e s   ( - ) .   I t   i s   l i m i t e d   t o   2 4   c h a r a c t e r s .   L e a d i n g   a n d   t r a i l i n g   s p a c e s   a r e   i g n o r e d . C o n t a i n e r   i m a g e   ( m a n d a t o r y ) :   T h e   U R L   o f   a   p u b l i c   D o c k e r   c o n t a i n e r   i m a g e   o n   a n y   r e g i s t r y ,   o r   a   p r i v a t e   i m a g e   ( c o m m o n l y   h o s t e d   o n   t h e   G o o g l e   C o n t a i n e r   R e g i s t r y   o r   D o c k e r   H u b ) .   T h e   c o n t a i n e r   i m a g e   s p e c i f i c a t i o n   m u s t   e n d   w i t h   a   c o l o n . N u m b e r   o f   p o d s   ( m a n d a t o r y ) :   T h e   t a r g e t   n u m b e r   o f   P o d s   y o u   w a n t   y o u r   a p p l i c a t i o n   t o   b e   d e p l o y e d   i n .   T h e   v a l u e   m u s t   b e   a   p o s i t i v e   i n t e g e r . A   D e p l o y m e n t   w i l l   b e   c r e a t e d   t o   m a i n t a i n   t h e   d e s i r e d   n u m b e r   o f   P o d s   a c r o s s   y o u r   c l u s t e r . S e r v i c e   ( o p t i o n a l ) :   F o r   s o m e   p


Question: What is Note:?

Answer: O t h e r   S e r v i c e s   t h a t   a r e   o n l y   v i s i b l e   f r o m   i n s i d e   t h e   c l u s t e r   a r e   c a l l e d   i n t e r n a l   S e r v i c e s .   I r r e s p e c t i v e   o f   t h e   S e r v i c e   t y p e ,   i f   y o u   c h o o s e   t o   c r e a t e   a   S e r v i c e   a n d   y o u r   c o n t a i n e r   l i s t e n s   o n   a   p o r t   ( i n c o m i n g ) ,   y o u   n e e d   t o   s p e c i f y   t w o   p o r t s .   T h e   S e r v i c e   w i l l   b e   c r e a t e d   m a p p i n g   t h e   p o r t   ( i n c o m i n g )   t o   t h e   t a r g e t   p o r t   s e e n   b y   t h e   c o n t a i n e r .   T h i s   S e r v i c e   w i l l   r o u t e   t o   y o u r   d e p l o y e d   P o d s .   S u p p o r t e d   p r o t o c o l s   a r e   T C P   a n d   U D P .   T h e   i n t e r n a l   D N S   n a m e   f o r   t h i s   S e r v i c e   w i l l   b e   t h e   v a l u e   y o u   s p e c i f i e d   a s   a p p l i c a t i o n   n a m e   a b o v e .   I f   n e e d e d ,   y o u   c a n   e x p a n d   t h e   A d v a n c e d   o p t i o n s   s e c t i o n   w h e r e   y o u   c a n   s p e c i f y   m o r e   s e t t i n g s :   D e s c r i p t i o n :   T h e   t e x t   y o u   e n t e r   h e r e   w i l l   b e   a d d e d   a s   a n   a n n o t a t i o n   t o   t h e   D e p l o y m e n t   a n d   d i s p l a y e d   i n   t h e   a p p l i c a t i o n ' s   d e t a i l s . L a b e l s :   D e f a u l t   l a b e l s   t o   b e   u s e d   f o r   y o u r   a p p l i c a t i o n   a r e   a p p l i c a t i o n   n a m e   a n d   v e r s i o n .   Y o u   c a n   s p e c i f y   a d d i t i o n a l   l a b e l s   t o   b e   a p p l i e d   t o   t h e   D e p l o y m e n t ,   S e r v i c e   ( i f   a n y ) ,   a n d   P o d s ,   s u c h   a s   r e l e a s e ,   e n v i r o n m e n t ,   t i e r ,   p a r t i t i o n ,   a n d   r e l e a s e   t r a c k . E x a m p l e : r e l


Question: What is Uploading a YAML or JSON file?

Answer: K u b e r n e t e s   s u p p o r t s   d e c l a r a t i v e   c o n f i g u r a t i o n .   I n   t h i s   s t y l e ,   a l l   c o n f i g u r a t i o n   i s   s t o r e d   i n   m a n i f e s t s   ( Y A M L   o r   J S O N   c o n f i g u r a t i o n   f i l e s ) .   T h e   m a n i f e s t s   u s e   K u b e r n e t e s   A P I   r e s o u r c e   s c h e m a s .   A s   a n   a l t e r n a t i v e   t o   s p e c i f y i n g   a p p l i c a t i o n   d e t a i l s   i n   t h e   d e p l o y   w i z a r d ,   y o u   c a n   d e f i n e   y o u r   a p p l i c a t i o n   i n   o n e   o r   m o r e   m a n i f e s t s ,   a n d   u p l o a d   t h e   f i l e s   u s i n g   D a s h b o a r d .


Question: What is Using Dashboard?

Answer: F o l l o w i n g   s e c t i o n s   d e s c r i b e   v i e w s   o f   t h e   K u b e r n e t e s   D a s h b o a r d   U I ;   w h a t   t h e y   p r o v i d e   a n d   h o w   c a n   t h e y   b e   u s e d .


Question: What is Navigation?

Answer: W h e n   t h e r e   a r e   K u b e r n e t e s   o b j e c t s   d e f i n e d   i n   t h e   c l u s t e r ,   D a s h b o a r d   s h o w s   t h e m   i n   t h e   i n i t i a l   v i e w .   B y   d e f a u l t   o n l y   o b j e c t s   f r o m   t h e   d e f a u l t   n a m e s p a c e   a r e   s h o w n   a n d   t h i s   c a n   b e   c h a n g e d   u s i n g   t h e   n a m e s p a c e   s e l e c t o r   l o c a t e d   i n   t h e   n a v i g a t i o n   m e n u .   D a s h b o a r d   s h o w s   m o s t   K u b e r n e t e s   o b j e c t   k i n d s   a n d   g r o u p s   t h e m   i n   a   f e w   m e n u   c a t e g o r i e s .


Question: What is Admin overview?

Answer: F o r   c l u s t e r   a n d   n a m e s p a c e   a d m i n i s t r a t o r s ,   D a s h b o a r d   l i s t s   N o d e s ,   N a m e s p a c e s   a n d   P e r s i s t e n t V o l u m e s   a n d   h a s   d e t a i l   v i e w s   f o r   t h e m .   N o d e   l i s t   v i e w   c o n t a i n s   C P U   a n d   m e m o r y   u s a g e   m e t r i c s   a g g r e g a t e d   a c r o s s   a l l   N o d e s .   T h e   d e t a i l s   v i e w   s h o w s   t h e   m e t r i c s   f o r   a   N o d e ,   i t s   s p e c i f i c a t i o n ,   s t a t u s ,   a l l o c a t e d   r e s o u r c e s ,   e v e n t s   a n d   p o d s   r u n n i n g   o n   t h e   n o d e .


Question: What is Workloads?

Answer: S h o w s   a l l   a p p l i c a t i o n s   r u n n i n g   i n   t h e   s e l e c t e d   n a m e s p a c e .   T h e   v i e w   l i s t s   a p p l i c a t i o n s   b y   w o r k l o a d   k i n d   ( f o r   e x a m p l e :   D e p l o y m e n t s ,   R e p l i c a S e t s ,   S t a t e f u l S e t s ) .   E a c h   w o r k l o a d   k i n d   c a n   b e   v i e w e d   s e p a r a t e l y .   T h e   l i s t s   s u m m a r i z e   a c t i o n a b l e   i n f o r m a t i o n   a b o u t   t h e   w o r k l o a d s ,   s u c h   a s   t h e   n u m b e r   o f   r e a d y   p o d s   f o r   a   R e p l i c a S e t   o r   c u r r e n t   m e m o r y   u s a g e   f o r   a   P o d .   D e t a i l   v i e w s   f o r   w o r k l o a d s   s h o w   s t a t u s   a n d   s p e c i f i c a t i o n   i n f o r m a t i o n   a n d   s u r f a c e   r e l a t i o n s h i p s   b e t w e e n   o b j e c t s .   F o r   e x a m p l e ,   P o d s   t h a t   R e p l i c a S e t   i s   c o n t r o l l i n g   o r   n e w   R e p l i c a S e t s   a n d   H o r i z o n t a l P o d A u t o s c a l e r s   f o r   D e p l o y m e n t s .


Question: What is Services?

Answer: S h o w s   K u b e r n e t e s   r e s o u r c e s   t h a t   a l l o w   f o r   e x p o s i n g   s e r v i c e s   t o   e x t e r n a l   w o r l d   a n d   d i s c o v e r i n g   t h e m   w i t h i n   a   c l u s t e r .   F o r   t h a t   r e a s o n ,   S e r v i c e   a n d   I n g r e s s   v i e w s   s h o w   P o d s   t a r g e t e d   b y   t h e m ,   i n t e r n a l   e n d p o i n t s   f o r   c l u s t e r   c o n n e c t i o n s   a n d   e x t e r n a l   e n d p o i n t s   f o r   e x t e r n a l   u s e r s .


Question: What is Storage?

Answer: S t o r a g e   v i e w   s h o w s   P e r s i s t e n t V o l u m e C l a i m   r e s o u r c e s   w h i c h   a r e   u s e d   b y   a p p l i c a t i o n s   f o r   s t o r i n g   d a t a .


Question: What is ConfigMaps and Secrets?

Answer: S h o w s   a l l   K u b e r n e t e s   r e s o u r c e s   t h a t   a r e   u s e d   f o r   l i v e   c o n f i g u r a t i o n   o f   a p p l i c a t i o n s   r u n n i n g   i n   c l u s t e r s .   T h e   v i e w   a l l o w s   f o r   e d i t i n g   a n d   m a n a g i n g   c o n f i g   o b j e c t s   a n d   d i s p l a y s   s e c r e t s   h i d d e n   b y   d e f a u l t .


Question: What is Logs viewer?

Answer: P o d   l i s t s   a n d   d e t a i l   p a g e s   l i n k   t o   a   l o g s   v i e w e r   t h a t   i s   b u i l t   i n t o   D a s h b o a r d .   T h e   v i e w e r   a l l o w s   f o r   d r i l l i n g   d o w n   l o g s   f r o m   c o n t a i n e r s   b e l o n g i n g   t o   a   s i n g l e   P o d .


Question: What is What's next?

Answer: F o r   m o r e   i n f o r m a t i o n ,   s e e   t h e   K u b e r n e t e s   D a s h b o a r d   p r o j e c t   p a g e .


Question: What is DNS for Services and Pods?

Answer: DNS for Services and PodsYour workload can discover Services within your cluster using DNS; this page explains how that works.Kubernetes creates DNS records for Services and Pods. You can contact Services with consistent DNS names instead of IP addresses.Kubernetes publishes information about Pods and Services which is used to program DNS. kubelet configures Pods' DNS so that running containers can look up Services by name rather than IP.Services defined in the cluster are assigned DNS names. By default, a client Pod's DNS search list includes the Pod's own namespace and the cluster's default domain.Namespaces of ServicesA DNS query may return different results based on the namespace of the Pod making it. DNS queries that don't specify a namespace are limited to the Pod's namespace. Access Services in other namespaces by specifying it in the DNS query.For example, consider a Pod in a test namespace. A data Service is in the prod namespace.A query for data returns no results, because it uses the Pod's test namespace.A query for data.prod returns the intended result, because it specifies the namespace.DNS queries may be expanded using the Pod's /etc/resolv.conf. kubelet configures this file for each Pod. For example, a query for just data may be expanded to data.test.svc.cluster.local. The values of the search option are used to expand queries. To learn more about DNS queries, see the resolv.conf manual page.nameserver 10.32.0.10 search <namespace>.svc.cluster.local svc.cluster.local cluster.local options ndots:5 In summary, a Pod in the test namespace can successfully resolve either data.prod or data.prod.svc.cluster.local.DNS RecordsWhat objects get DNS records?ServicesPodsThe following sections detail the supported DNS record types and layout that is supported. Any other layout or names or queries that happen to work are considered implementation details and are subject to change without warning. For more up-to-date specification, see Kubernetes DNS-Based Service Discovery.ServicesA/AAAA records"Normal" (not headless) Services are assigned DNS A and/or AAAA records, depending on the IP family or families of the Service, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. This resolves to the cluster IP of the Service.Headless Services (without a cluster IP) are also assigned DNS A and/or AAAA records, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. Unlike normal Services, this resolves to the set of IPs of all of the Pods selected by the Service. Clients are expected to consume the set or else use standard round-robin selection from the set.SRV recordsSRV Records are created for named ports that are part of normal or headless services.For each named port, the SRV record has the form _port-name._port-protocol.my-svc.my-namespace.svc.cluster-domain.example.For a regular Service, this resolves to the port number and the domain name: my-svc.my-namespace.svc.cluster-domain.example.For a headless Service, th


Question: How does DNS for Services and Pods work?

Answer: DNS for Services and PodsYour workload can discover Services within your cluster using DNS; this page explains how that works.Kubernetes creates DNS records for Services and Pods. You can contact Services with consistent DNS names instead of IP addresses.Kubernetes publishes information about Pods and Services which is used to program DNS. kubelet configures Pods' DNS so that running containers can look up Services by name rather than IP.Services defined in the cluster are assigned DNS names. By default, a client Pod's DNS search list includes the Pod's own namespace and the cluster's default domain.Namespaces of ServicesA DNS query may return different results based on the namespace of the Pod making it. DNS queries that don't specify a namespace are limited to the Pod's namespace. Access Services in other namespaces by specifying it in the DNS query.For example, consider a Pod in a test namespace. A data Service is in the prod namespace.A query for data returns no results, because it uses the Pod's test namespace.A query for data.prod returns the intended result, because it specifies the namespace.DNS queries may be expanded using the Pod's /etc/resolv.conf. kubelet configures this file for each Pod. For example, a query for just data may be expanded to data.test.svc.cluster.local. The values of the search option are used to expand queries. To learn more about DNS queries, see the resolv.conf manual page.nameserver 10.32.0.10 search <namespace>.svc.cluster.local svc.cluster.local cluster.local options ndots:5 In summary, a Pod in the test namespace can successfully resolve either data.prod or data.prod.svc.cluster.local.DNS RecordsWhat objects get DNS records?ServicesPodsThe following sections detail the supported DNS record types and layout that is supported. Any other layout or names or queries that happen to work are considered implementation details and are subject to change without warning. For more up-to-date specification, see Kubernetes DNS-Based Service Discovery.ServicesA/AAAA records"Normal" (not headless) Services are assigned DNS A and/or AAAA records, depending on the IP family or families of the Service, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. This resolves to the cluster IP of the Service.Headless Services (without a cluster IP) are also assigned DNS A and/or AAAA records, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. Unlike normal Services, this resolves to the set of IPs of all of the Pods selected by the Service. Clients are expected to consume the set or else use standard round-robin selection from the set.SRV recordsSRV Records are created for named ports that are part of normal or headless services.For each named port, the SRV record has the form _port-name._port-protocol.my-svc.my-namespace.svc.cluster-domain.example.For a regular Service, this resolves to the port number and the domain name: my-svc.my-namespace.svc.cluster-domain.example.For a headless Service, th


Question: When would you use DNS for Services and Pods?

Answer: DNS for Services and PodsYour workload can discover Services within your cluster using DNS; this page explains how that works.Kubernetes creates DNS records for Services and Pods. You can contact Services with consistent DNS names instead of IP addresses.Kubernetes publishes information about Pods and Services which is used to program DNS. kubelet configures Pods' DNS so that running containers can look up Services by name rather than IP.Services defined in the cluster are assigned DNS names. By default, a client Pod's DNS search list includes the Pod's own namespace and the cluster's default domain.Namespaces of ServicesA DNS query may return different results based on the namespace of the Pod making it. DNS queries that don't specify a namespace are limited to the Pod's namespace. Access Services in other namespaces by specifying it in the DNS query.For example, consider a Pod in a test namespace. A data Service is in the prod namespace.A query for data returns no results, because it uses the Pod's test namespace.A query for data.prod returns the intended result, because it specifies the namespace.DNS queries may be expanded using the Pod's /etc/resolv.conf. kubelet configures this file for each Pod. For example, a query for just data may be expanded to data.test.svc.cluster.local. The values of the search option are used to expand queries. To learn more about DNS queries, see the resolv.conf manual page.nameserver 10.32.0.10 search <namespace>.svc.cluster.local svc.cluster.local cluster.local options ndots:5 In summary, a Pod in the test namespace can successfully resolve either data.prod or data.prod.svc.cluster.local.DNS RecordsWhat objects get DNS records?ServicesPodsThe following sections detail the supported DNS record types and layout that is supported. Any other layout or names or queries that happen to work are considered implementation details and are subject to change without warning. For more up-to-date specification, see Kubernetes DNS-Based Service Discovery.ServicesA/AAAA records"Normal" (not headless) Services are assigned DNS A and/or AAAA records, depending on the IP family or families of the Service, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. This resolves to the cluster IP of the Service.Headless Services (without a cluster IP) are also assigned DNS A and/or AAAA records, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. Unlike normal Services, this resolves to the set of IPs of all of the Pods selected by the Service. Clients are expected to consume the set or else use standard round-robin selection from the set.SRV recordsSRV Records are created for named ports that are part of normal or headless services.For each named port, the SRV record has the form _port-name._port-protocol.my-svc.my-namespace.svc.cluster-domain.example.For a regular Service, this resolves to the port number and the domain name: my-svc.my-namespace.svc.cluster-domain.example.For a headless Service, th


Question: What are the benefits of DNS for Services and Pods?

Answer: DNS for Services and PodsYour workload can discover Services within your cluster using DNS; this page explains how that works.Kubernetes creates DNS records for Services and Pods. You can contact Services with consistent DNS names instead of IP addresses.Kubernetes publishes information about Pods and Services which is used to program DNS. kubelet configures Pods' DNS so that running containers can look up Services by name rather than IP.Services defined in the cluster are assigned DNS names. By default, a client Pod's DNS search list includes the Pod's own namespace and the cluster's default domain.Namespaces of ServicesA DNS query may return different results based on the namespace of the Pod making it. DNS queries that don't specify a namespace are limited to the Pod's namespace. Access Services in other namespaces by specifying it in the DNS query.For example, consider a Pod in a test namespace. A data Service is in the prod namespace.A query for data returns no results, because it uses the Pod's test namespace.A query for data.prod returns the intended result, because it specifies the namespace.DNS queries may be expanded using the Pod's /etc/resolv.conf. kubelet configures this file for each Pod. For example, a query for just data may be expanded to data.test.svc.cluster.local. The values of the search option are used to expand queries. To learn more about DNS queries, see the resolv.conf manual page.nameserver 10.32.0.10 search <namespace>.svc.cluster.local svc.cluster.local cluster.local options ndots:5 In summary, a Pod in the test namespace can successfully resolve either data.prod or data.prod.svc.cluster.local.DNS RecordsWhat objects get DNS records?ServicesPodsThe following sections detail the supported DNS record types and layout that is supported. Any other layout or names or queries that happen to work are considered implementation details and are subject to change without warning. For more up-to-date specification, see Kubernetes DNS-Based Service Discovery.ServicesA/AAAA records"Normal" (not headless) Services are assigned DNS A and/or AAAA records, depending on the IP family or families of the Service, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. This resolves to the cluster IP of the Service.Headless Services (without a cluster IP) are also assigned DNS A and/or AAAA records, with a name of the form my-svc.my-namespace.svc.cluster-domain.example. Unlike normal Services, this resolves to the set of IPs of all of the Pods selected by the Service. Clients are expected to consume the set or else use standard round-robin selection from the set.SRV recordsSRV Records are created for named ports that are part of normal or headless services.For each named port, the SRV record has the form _port-name._port-protocol.my-svc.my-namespace.svc.cluster-domain.example.For a regular Service, this resolves to the port number and the domain name: my-svc.my-namespace.svc.cluster-domain.example.For a headless Service, th


Question: What is DNS for Services and Pods?

Answer: K u b e r n e t e s   c r e a t e s   D N S   r e c o r d s   f o r   S e r v i c e s   a n d   P o d s .   Y o u   c a n   c o n t a c t   S e r v i c e s   w i t h   c o n s i s t e n t   D N S   n a m e s   i n s t e a d   o f   I P   a d d r e s s e s .   K u b e r n e t e s   p u b l i s h e s   i n f o r m a t i o n   a b o u t   P o d s   a n d   S e r v i c e s   w h i c h   i s   u s e d   t o   p r o g r a m   D N S .   k u b e l e t   c o n f i g u r e s   P o d s '   D N S   s o   t h a t   r u n n i n g   c o n t a i n e r s   c a n   l o o k   u p   S e r v i c e s   b y   n a m e   r a t h e r   t h a n   I P .   S e r v i c e s   d e f i n e d   i n   t h e   c l u s t e r   a r e   a s s i g n e d   D N S   n a m e s .   B y   d e f a u l t ,   a   c l i e n t   P o d ' s   D N S   s e a r c h   l i s t   i n c l u d e s   t h e   P o d ' s   o w n   n a m e s p a c e   a n d   t h e   c l u s t e r ' s   d e f a u l t   d o m a i n .


Question: What is Namespaces of Services?

Answer: A   D N S   q u e r y   m a y   r e t u r n   d i f f e r e n t   r e s u l t s   b a s e d   o n   t h e   n a m e s p a c e   o f   t h e   P o d   m a k i n g   i t .   D N S   q u e r i e s   t h a t   d o n ' t   s p e c i f y   a   n a m e s p a c e   a r e   l i m i t e d   t o   t h e   P o d ' s   n a m e s p a c e .   A c c e s s   S e r v i c e s   i n   o t h e r   n a m e s p a c e s   b y   s p e c i f y i n g   i t   i n   t h e   D N S   q u e r y .   F o r   e x a m p l e ,   c o n s i d e r   a   P o d   i n   a   t e s t   n a m e s p a c e .   A   d a t a   S e r v i c e   i s   i n   t h e   p r o d   n a m e s p a c e .   A   q u e r y   f o r   d a t a   r e t u r n s   n o   r e s u l t s ,   b e c a u s e   i t   u s e s   t h e   P o d ' s   t e s t   n a m e s p a c e .   A   q u e r y   f o r   d a t a . p r o d   r e t u r n s   t h e   i n t e n d e d   r e s u l t ,   b e c a u s e   i t   s p e c i f i e s   t h e   n a m e s p a c e .   D N S   q u e r i e s   m a y   b e   e x p a n d e d   u s i n g   t h e   P o d ' s   / e t c / r e s o l v . c o n f .   k u b e l e t   c o n f i g u r e s   t h i s   f i l e   f o r   e a c h   P o d .   F o r   e x a m p l e ,   a   q u e r y   f o r   j u s t   d a t a   m a y   b e   e x p a n d e d   t o   d a t a . t e s t . s v c . c l u s t e r . l o c a l .   T h e   v a l u e s   o f   t h e   s e a r c h   o p t i o n   a r e   u s e d   t o   e x p a n d   q u e r i e s .   T o   l e a r n   m o r e   a b o u t   D N S   q u e r i e s ,   s e e   t h e   r e s o l v . c o n f   m a n u a l   p a g e .   n a m e s e r v e r   1 0 . 3 2 . 0 . 1 0   s e a r c h   < n a m e s p a c e > . s v c . c l u s t e r . l o c a l   s v c . c l u s t e r . l o c a l   c l u s t e r . l o c a l   o p t i o n s   n d o t s : 5   I n   s u m m a r y ,   a   P o d   i n   t h e   t e s t   n a m e s p a c e   c a n   s u c c e s s f u l l y   r e s o l v e   e i t h e r   d a t a . p r o d   o r   d a


Question: What is DNS Records?

Answer: W h a t   o b j e c t s   g e t   D N S   r e c o r d s ?   S e r v i c e s P o d s   T h e   f o l l o w i n g   s e c t i o n s   d e t a i l   t h e   s u p p o r t e d   D N S   r e c o r d   t y p e s   a n d   l a y o u t   t h a t   i s   s u p p o r t e d .   A n y   o t h e r   l a y o u t   o r   n a m e s   o r   q u e r i e s   t h a t   h a p p e n   t o   w o r k   a r e   c o n s i d e r e d   i m p l e m e n t a t i o n   d e t a i l s   a n d   a r e   s u b j e c t   t o   c h a n g e   w i t h o u t   w a r n i n g .   F o r   m o r e   u p - t o - d a t e   s p e c i f i c a t i o n ,   s e e   K u b e r n e t e s   D N S - B a s e d   S e r v i c e   D i s c o v e r y .


Question: What is A/AAAA records?

Answer: " N o r m a l "   ( n o t   h e a d l e s s )   S e r v i c e s   a r e   a s s i g n e d   D N S   A   a n d / o r   A A A A   r e c o r d s ,   d e p e n d i n g   o n   t h e   I P   f a m i l y   o r   f a m i l i e s   o f   t h e   S e r v i c e ,   w i t h   a   n a m e   o f   t h e   f o r m   m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e .   T h i s   r e s o l v e s   t o   t h e   c l u s t e r   I P   o f   t h e   S e r v i c e .   H e a d l e s s   S e r v i c e s   ( w i t h o u t   a   c l u s t e r   I P )   a r e   a l s o   a s s i g n e d   D N S   A   a n d / o r   A A A A   r e c o r d s ,   w i t h   a   n a m e   o f   t h e   f o r m   m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e .   U n l i k e   n o r m a l   S e r v i c e s ,   t h i s   r e s o l v e s   t o   t h e   s e t   o f   I P s   o f   a l l   o f   t h e   P o d s   s e l e c t e d   b y   t h e   S e r v i c e .   C l i e n t s   a r e   e x p e c t e d   t o   c o n s u m e   t h e   s e t   o r   e l s e   u s e   s t a n d a r d   r o u n d - r o b i n   s e l e c t i o n   f r o m   t h e   s e t .


Question: What is SRV records?

Answer: S R V   R e c o r d s   a r e   c r e a t e d   f o r   n a m e d   p o r t s   t h a t   a r e   p a r t   o f   n o r m a l   o r   h e a d l e s s   s e r v i c e s .   F o r   e a c h   n a m e d   p o r t ,   t h e   S R V   r e c o r d   h a s   t h e   f o r m   _ p o r t - n a m e . _ p o r t - p r o t o c o l . m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e . F o r   a   r e g u l a r   S e r v i c e ,   t h i s   r e s o l v e s   t o   t h e   p o r t   n u m b e r   a n d   t h e   d o m a i n   n a m e :   m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e . F o r   a   h e a d l e s s   S e r v i c e ,   t h i s   r e s o l v e s   t o   m u l t i p l e   a n s w e r s ,   o n e   f o r   e a c h   P o d   t h a t   i s   b a c k i n g   t h e   S e r v i c e ,   a n d   c o n t a i n s   t h e   p o r t   n u m b e r   a n d   t h e   d o m a i n   n a m e   o f   t h e   P o d   o f   t h e   f o r m   h o s t n a m e . m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e .


Question: What is A/AAAA records?

Answer: K u b e - D N S   v e r s i o n s ,   p r i o r   t o   t h e   i m p l e m e n t a t i o n   o f   t h e   D N S   s p e c i f i c a t i o n ,   h a d   t h e   f o l l o w i n g   D N S   r e s o l u t i o n :   < p o d - I P v 4 - a d d r e s s > . < n a m e s p a c e > . p o d . < c l u s t e r - d o m a i n >   F o r   e x a m p l e ,   i f   a   P o d   i n   t h e   d e f a u l t   n a m e s p a c e   h a s   t h e   I P   a d d r e s s   1 7 2 . 1 7 . 0 . 3 ,   a n d   t h e   d o m a i n   n a m e   f o r   y o u r   c l u s t e r   i s   c l u s t e r . l o c a l ,   t h e n   t h e   P o d   h a s   a   D N S   n a m e :   1 7 2 - 1 7 - 0 - 3 . d e f a u l t . p o d . c l u s t e r . l o c a l   S o m e   c l u s t e r   D N S   m e c h a n i s m s ,   l i k e   C o r e D N S ,   a l s o   p r o v i d e   A   r e c o r d s   f o r :   < p o d - i p v 4 - a d d r e s s > . < s e r v i c e - n a m e > . < m y - n a m e s p a c e > . s v c . < c l u s t e r - d o m a i n . e x a m p l e >   F o r   e x a m p l e ,   i f   a   P o d   i n   t h e   c a f e   n a m e s p a c e   h a s   t h e   I P   a d d r e s s   1 7 2 . 1 7 . 0 . 3 ,   i s   a n   e n d p o i n t   o f   a   S e r v i c e   n a m e d   b a r i s t a ,   a n d   t h e   d o m a i n   n a m e   f o r   y o u r   c l u s t e r   i s   c l u s t e r . l o c a l ,   t h e n   t h e   P o d   w o u l d   h a v e   t h i s   s e r v i c e - s c o p e d   D N S   A   r e c o r d .   1 7 2 - 1 7 - 0 - 3 . b a r i s t a . c a f e . s v c . c l u s t e r . l o c a l


Question: What is Pod's hostname and subdomain fields?

Answer: C u r r e n t l y   w h e n   a   P o d   i s   c r e a t e d ,   i t s   h o s t n a m e   ( a s   o b s e r v e d   f r o m   w i t h i n   t h e   P o d )   i s   t h e   P o d ' s   m e t a d a t a . n a m e   v a l u e .   T h e   P o d   s p e c   h a s   a n   o p t i o n a l   h o s t n a m e   f i e l d ,   w h i c h   c a n   b e   u s e d   t o   s p e c i f y   a   d i f f e r e n t   h o s t n a m e .   W h e n   s p e c i f i e d ,   i t   t a k e s   p r e c e d e n c e   o v e r   t h e   P o d ' s   n a m e   t o   b e   t h e   h o s t n a m e   o f   t h e   P o d   ( a g a i n ,   a s   o b s e r v e d   f r o m   w i t h i n   t h e   P o d ) .   F o r   e x a m p l e ,   g i v e n   a   P o d   w i t h   s p e c . h o s t n a m e   s e t   t o   " m y - h o s t " ,   t h e   P o d   w i l l   h a v e   i t s   h o s t n a m e   s e t   t o   " m y - h o s t " .   T h e   P o d   s p e c   a l s o   h a s   a n   o p t i o n a l   s u b d o m a i n   f i e l d   w h i c h   c a n   b e   u s e d   t o   i n d i c a t e   t h a t   t h e   p o d   i s   p a r t   o f   s u b - g r o u p   o f   t h e   n a m e s p a c e .   F o r   e x a m p l e ,   a   P o d   w i t h   s p e c . h o s t n a m e   s e t   t o   " f o o " ,   a n d   s p e c . s u b d o m a i n   s e t   t o   " b a r " ,   i n   n a m e s p a c e   " m y - n a m e s p a c e " ,   w i l l   h a v e   i t s   h o s t n a m e   s e t   t o   " f o o "   a n d   i t s   f u l l y   q u a l i f i e d   d o m a i n   n a m e   ( F Q D N )   s e t   t o   " f o o . b a r . m y - n a m e s p a c e . s v c . c l u s t e r . l o c a l "   ( o n c e   m o r e ,   a s   o b s e r v e d   f r o m   w i t h i n   t h e   P o d ) .   I f   t h e r e   e x i s t s   a   h e a d l e s s   S e r v i c e   i n   t h e   s a m e   n a m e s p a c e   a s   t h e   P o d ,   w i t h   t h e   s a m e   n a m e   a s   t h e   s u b d o m a i n ,   t h e   c l u s t e r ' s   D N S   S e r v e r   a


Question: What is Pod's setHostnameAsFQDN field?

Answer: W h e n   a   P o d   i s   c o n f i g u r e d   t o   h a v e   f u l l y   q u a l i f i e d   d o m a i n   n a m e   ( F Q D N ) ,   i t s   h o s t n a m e   i s   t h e   s h o r t   h o s t n a m e .   F o r   e x a m p l e ,   i f   y o u   h a v e   a   P o d   w i t h   t h e   f u l l y   q u a l i f i e d   d o m a i n   n a m e   b u s y b o x - 1 . b u s y b o x - s u b d o m a i n . m y - n a m e s p a c e . s v c . c l u s t e r - d o m a i n . e x a m p l e ,   t h e n   b y   d e f a u l t   t h e   h o s t n a m e   c o m m a n d   i n s i d e   t h a t   P o d   r e t u r n s   b u s y b o x - 1   a n d   t h e   h o s t n a m e   - - f q d n   c o m m a n d   r e t u r n s   t h e   F Q D N .   W h e n   y o u   s e t   s e t H o s t n a m e A s F Q D N :   t r u e   i n   t h e   P o d   s p e c ,   t h e   k u b e l e t   w r i t e s   t h e   P o d ' s   F Q D N   i n t o   t h e   h o s t n a m e   f o r   t h a t   P o d ' s   n a m e s p a c e .   I n   t h i s   c a s e ,   b o t h   h o s t n a m e   a n d   h o s t n a m e   - - f q d n   r e t u r n   t h e   P o d ' s   F Q D N .


Question: What is Note:?

Answer: I n   L i n u x ,   t h e   h o s t n a m e   f i e l d   o f   t h e   k e r n e l   ( t h e   n o d e n a m e   f i e l d   o f   s t r u c t   u t s n a m e )   i s   l i m i t e d   t o   6 4   c h a r a c t e r s .   I f   a   P o d   e n a b l e s   t h i s   f e a t u r e   a n d   i t s   F Q D N   i s   l o n g e r   t h a n   6 4   c h a r a c t e r ,   i t   w i l l   f a i l   t o   s t a r t .   T h e   P o d   w i l l   r e m a i n   i n   P e n d i n g   s t a t u s   ( C o n t a i n e r C r e a t i n g   a s   s e e n   b y   k u b e c t l )   g e n e r a t i n g   e r r o r   e v e n t s ,   s u c h   a s   F a i l e d   t o   c o n s t r u c t   F Q D N   f r o m   P o d   h o s t n a m e   a n d   c l u s t e r   d o m a i n ,   F Q D N   l o n g - F Q D N   i s   t o o   l o n g   ( 6 4   c h a r a c t e r s   i s   t h e   m a x ,   7 0   c h a r a c t e r s   r e q u e s t e d ) .   O n e   w a y   o f   i m p r o v i n g   u s e r   e x p e r i e n c e   f o r   t h i s   s c e n a r i o   i s   t o   c r e a t e   a n   a d m i s s i o n   w e b h o o k   c o n t r o l l e r   t o   c o n t r o l   F Q D N   s i z e   w h e n   u s e r s   c r e a t e   t o p   l e v e l   o b j e c t s ,   f o r   e x a m p l e ,   D e p l o y m e n t .


Question: What is Pod's DNS Policy?

Answer: D N S   p o l i c i e s   c a n   b e   s e t   o n   a   p e r - P o d   b a s i s .   C u r r e n t l y   K u b e r n e t e s   s u p p o r t s   t h e   f o l l o w i n g   P o d - s p e c i f i c   D N S   p o l i c i e s .   T h e s e   p o l i c i e s   a r e   s p e c i f i e d   i n   t h e   d n s P o l i c y   f i e l d   o f   a   P o d   S p e c .   " D e f a u l t " :   T h e   P o d   i n h e r i t s   t h e   n a m e   r e s o l u t i o n   c o n f i g u r a t i o n   f r o m   t h e   n o d e   t h a t   t h e   P o d s   r u n   o n .   S e e   r e l a t e d   d i s c u s s i o n   f o r   m o r e   d e t a i l s . " C l u s t e r F i r s t " :   A n y   D N S   q u e r y   t h a t   d o e s   n o t   m a t c h   t h e   c o n f i g u r e d   c l u s t e r   d o m a i n   s u f f i x ,   s u c h   a s   " w w w . k u b e r n e t e s . i o " ,   i s   f o r w a r d e d   t o   a n   u p s t r e a m   n a m e s e r v e r   b y   t h e   D N S   s e r v e r .   C l u s t e r   a d m i n i s t r a t o r s   m a y   h a v e   e x t r a   s t u b - d o m a i n   a n d   u p s t r e a m   D N S   s e r v e r s   c o n f i g u r e d .   S e e   r e l a t e d   d i s c u s s i o n   f o r   d e t a i l s   o n   h o w   D N S   q u e r i e s   a r e   h a n d l e d   i n   t h o s e   c a s e s . " C l u s t e r F i r s t W i t h H o s t N e t " :   F o r   P o d s   r u n n i n g   w i t h   h o s t N e t w o r k ,   y o u   s h o u l d   e x p l i c i t l y   s e t   i t s   D N S   p o l i c y   t o   " C l u s t e r F i r s t W i t h H o s t N e t " .   O t h e r w i s e ,   P o d s   r u n n i n g   w i t h   h o s t N e t w o r k   a n d   " C l u s t e r F i r s t "   w i l l   f a l l b a c k   t o   t h e   b e h a v i o r   o f   t h e   " D e f a u l t "   p o l i c y . N o t e : T h i s   i s   n o t   s u p p o r t e d   o n   W i n d o w s .   S e e   b e l o w   f o r   d e t a i l s . " N o n e " :   I t   a l l o w s   a   P o d   t o   i g


Question: What is Note:?

Answer: " N o n e " :   I t   a l l o w s   a   P o d   t o   i g n o r e   D N S   s e t t i n g s   f r o m   t h e   K u b e r n e t e s   e n v i r o n m e n t .   A l l   D N S   s e t t i n g s   a r e   s u p p o s e d   t o   b e   p r o v i d e d   u s i n g   t h e   d n s C o n f i g   f i e l d   i n   t h e   P o d   S p e c .   S e e   P o d ' s   D N S   c o n f i g   s u b s e c t i o n   b e l o w .


Question: What is Note:?

Answer: T h e   e x a m p l e   b e l o w   s h o w s   a   P o d   w i t h   i t s   D N S   p o l i c y   s e t   t o   " C l u s t e r F i r s t W i t h H o s t N e t "   b e c a u s e   i t   h a s   h o s t N e t w o r k   s e t   t o   t r u e .   a p i V e r s i o n :   v 1   k i n d :   P o d   m e t a d a t a :   n a m e :   b u s y b o x   n a m e s p a c e :   d e f a u l t   s p e c :   c o n t a i n e r s :   -   i m a g e :   b u s y b o x : 1 . 2 8   c o m m a n d :   -   s l e e p   -   " 3 6 0 0 "   i m a g e P u l l P o l i c y :   I f N o t P r e s e n t   n a m e :   b u s y b o x   r e s t a r t P o l i c y :   A l w a y s   h o s t N e t w o r k :   t r u e   d n s P o l i c y :   C l u s t e r F i r s t W i t h H o s t N e t


Question: What is Pod's DNS Config?

Answer: P o d ' s   D N S   C o n f i g   a l l o w s   u s e r s   m o r e   c o n t r o l   o n   t h e   D N S   s e t t i n g s   f o r   a   P o d .   T h e   d n s C o n f i g   f i e l d   i s   o p t i o n a l   a n d   i t   c a n   w o r k   w i t h   a n y   d n s P o l i c y   s e t t i n g s .   H o w e v e r ,   w h e n   a   P o d ' s   d n s P o l i c y   i s   s e t   t o   " N o n e " ,   t h e   d n s C o n f i g   f i e l d   h a s   t o   b e   s p e c i f i e d .   B e l o w   a r e   t h e   p r o p e r t i e s   a   u s e r   c a n   s p e c i f y   i n   t h e   d n s C o n f i g   f i e l d :   n a m e s e r v e r s :   a   l i s t   o f   I P   a d d r e s s e s   t h a t   w i l l   b e   u s e d   a s   D N S   s e r v e r s   f o r   t h e   P o d .   T h e r e   c a n   b e   a t   m o s t   3   I P   a d d r e s s e s   s p e c i f i e d .   W h e n   t h e   P o d ' s   d n s P o l i c y   i s   s e t   t o   " N o n e " ,   t h e   l i s t   m u s t   c o n t a i n   a t   l e a s t   o n e   I P   a d d r e s s ,   o t h e r w i s e   t h i s   p r o p e r t y   i s   o p t i o n a l .   T h e   s e r v e r s   l i s t e d   w i l l   b e   c o m b i n e d   t o   t h e   b a s e   n a m e s e r v e r s   g e n e r a t e d   f r o m   t h e   s p e c i f i e d   D N S   p o l i c y   w i t h   d u p l i c a t e   a d d r e s s e s   r e m o v e d . s e a r c h e s :   a   l i s t   o f   D N S   s e a r c h   d o m a i n s   f o r   h o s t n a m e   l o o k u p   i n   t h e   P o d .   T h i s   p r o p e r t y   i s   o p t i o n a l .   W h e n   s p e c i f i e d ,   t h e   p r o v i d e d   l i s t   w i l l   b e   m e r g e d   i n t o   t h e   b a s e   s e a r c h   d o m a i n   n a m e s   g e n e r a t e d   f r o m   t h e   c h o s e n   D N S   p o l i c y .   D u p l i c a t e   d o m a i n   n a m e s   a r e   r e m o v e d .   K u b e r n e t e s   a l l o w s   u p   t o   3 2   s e a r c h   d o m a i n s . o p t i


Question: What is DNS search domain list limits?

Answer: K u b e r n e t e s   i t s e l f   d o e s   n o t   l i m i t   t h e   D N S   C o n f i g   u n t i l   t h e   l e n g t h   o f   t h e   s e a r c h   d o m a i n   l i s t   e x c e e d s   3 2   o r   t h e   t o t a l   l e n g t h   o f   a l l   s e a r c h   d o m a i n s   e x c e e d s   2 0 4 8 .   T h i s   l i m i t   a p p l i e s   t o   t h e   n o d e ' s   r e s o l v e r   c o n f i g u r a t i o n   f i l e ,   t h e   P o d ' s   D N S   C o n f i g ,   a n d   t h e   m e r g e d   D N S   C o n f i g   r e s p e c t i v e l y .


Question: What is Note:?

Answer: S o m e   c o n t a i n e r   r u n t i m e s   o f   e a r l i e r   v e r s i o n s   m a y   h a v e   t h e i r   o w n   r e s t r i c t i o n s   o n   t h e   n u m b e r   o f   D N S   s e a r c h   d o m a i n s .   D e p e n d i n g   o n   t h e   c o n t a i n e r   r u n t i m e   e n v i r o n m e n t ,   t h e   p o d s   w i t h   a   l a r g e   n u m b e r   o f   D N S   s e a r c h   d o m a i n s   m a y   g e t   s t u c k   i n   t h e   p e n d i n g   s t a t e .   I t   i s   k n o w n   t h a t   c o n t a i n e r d   v 1 . 5 . 5   o r   e a r l i e r   a n d   C R I - O   v 1 . 2 1   o r   e a r l i e r   h a v e   t h i s   p r o b l e m .


Question: What is DNS resolution on Windows nodes?

Answer: C l u s t e r F i r s t W i t h H o s t N e t   i s   n o t   s u p p o r t e d   f o r   P o d s   t h a t   r u n   o n   W i n d o w s   n o d e s .   W i n d o w s   t r e a t s   a l l   n a m e s   w i t h   a   .   a s   a   F Q D N   a n d   s k i p s   F Q D N   r e s o l u t i o n . O n   W i n d o w s ,   t h e r e   a r e   m u l t i p l e   D N S   r e s o l v e r s   t h a t   c a n   b e   u s e d .   A s   t h e s e   c o m e   w i t h   s l i g h t l y   d i f f e r e n t   b e h a v i o r s ,   u s i n g   t h e   R e s o l v e - D N S N a m e   p o w e r s h e l l   c m d l e t   f o r   n a m e   q u e r y   r e s o l u t i o n s   i s   r e c o m m e n d e d . O n   L i n u x ,   y o u   h a v e   a   D N S   s u f f i x   l i s t ,   w h i c h   i s   u s e d   a f t e r   r e s o l u t i o n   o f   a   n a m e   a s   f u l l y   q u a l i f i e d   h a s   f a i l e d .   O n   W i n d o w s ,   y o u   c a n   o n l y   h a v e   1   D N S   s u f f i x ,   w h i c h   i s   t h e   D N S   s u f f i x   a s s o c i a t e d   w i t h   t h a t   P o d ' s   n a m e s p a c e   ( e x a m p l e :   m y d n s . s v c . c l u s t e r . l o c a l ) .   W i n d o w s   c a n   r e s o l v e   F Q D N s ,   S e r v i c e s ,   o r   n e t w o r k   n a m e   w h i c h   c a n   b e   r e s o l v e d   w i t h   t h i s   s i n g l e   s u f f i x .   F o r   e x a m p l e ,   a   P o d   s p a w n e d   i n   t h e   d e f a u l t   n a m e s p a c e ,   w i l l   h a v e   t h e   D N S   s u f f i x   d e f a u l t . s v c . c l u s t e r . l o c a l .   I n s i d e   a   W i n d o w s   P o d ,   y o u   c a n   r e s o l v e   b o t h   k u b e r n e t e s . d e f a u l t . s v c . c l u s t e r . l o c a l   a n d   k u b e r n e t e s ,   b u t   n o t   t h e   p a r t i a l l y   q u a l i f i e d   n a m e s   ( k u b e r n e t e s . d e f a u l t   o r   k u b e r n e t e s . d e f a u l t . s v c ) .


Question: What is What's next?

Answer: F o r   g u i d a n c e   o n   a d m i n i s t e r i n g   D N S   c o n f i g u r a t i o n s ,   c h e c k   C o n f i g u r e   D N S   S e r v i c e .


Question: What is Adopting Sidecar Containers?

Answer: Adopting Sidecar ContainersThis section is relevant for people adopting a new built-in sidecar containers feature for their workloads.Sidecar container is not a new concept as posted in the blog post. Kubernetes allows running multiple containers in a Pod to implement this concept. However, running a sidecar container as a regular container has a lot of limitations being fixed with the new built-in sidecar containers support.FEATURE STATE: Kubernetes v1.33 [stable] (enabled by default: true)ObjectivesUnderstand the need for sidecar containersBe able to troubleshoot issues with the sidecar containersUnderstand options to universally "inject" sidecar containers to any workloadBefore you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYour Kubernetes server must be at or later than version 1.29.To check the version, enter kubectl version.Sidecar containers overviewSidecar containers are secondary containers that run along with the main application container within the same Pod. These containers are used to enhance or to extend the functionality of the primary app container by providing additional services, or functionalities such as logging, monitoring, security, or data synchronization, without directly altering the primary application code. You can read more in the Sidecar containers concept page.The concept of sidecar containers is not new and there are multiple implementations of this concept. As well as sidecar containers that you, the person defining the Pod, want to run, you can also find that some addons modify Pods - before the Pods start running - so that there are extra sidecar containers. The mechanisms to inject those extra sidecars are often mutating webhooks. For example, a service mesh addon might inject a sidecar that configures mutual TLS and encryption in transit between different Pods.While the concept of sidecar containers is not new, the native implementation of this feature in Kubernetes, however, is new. And as with every new feature, adopting this feature may present certain challenges.This tutorial explores challenges and solutions that can be experienced by end users as well as by authors of sidecar containers.Benefits of a built-in sidecar containerUsing Kubernetes' native support for sidecar containers provides several benefits:You can configure a native sidecar container to start ahead of init containers.The built-in sidecar containers can be authored to guarantee that they are terminated last. Sidecar containers are terminated with a SIGTERM signal once all the regular containers are completed and terminated. If the sidecar container isn’t gracef


Question: How does Adopting Sidecar Containers work?

Answer: Adopting Sidecar ContainersThis section is relevant for people adopting a new built-in sidecar containers feature for their workloads.Sidecar container is not a new concept as posted in the blog post. Kubernetes allows running multiple containers in a Pod to implement this concept. However, running a sidecar container as a regular container has a lot of limitations being fixed with the new built-in sidecar containers support.FEATURE STATE: Kubernetes v1.33 [stable] (enabled by default: true)ObjectivesUnderstand the need for sidecar containersBe able to troubleshoot issues with the sidecar containersUnderstand options to universally "inject" sidecar containers to any workloadBefore you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYour Kubernetes server must be at or later than version 1.29.To check the version, enter kubectl version.Sidecar containers overviewSidecar containers are secondary containers that run along with the main application container within the same Pod. These containers are used to enhance or to extend the functionality of the primary app container by providing additional services, or functionalities such as logging, monitoring, security, or data synchronization, without directly altering the primary application code. You can read more in the Sidecar containers concept page.The concept of sidecar containers is not new and there are multiple implementations of this concept. As well as sidecar containers that you, the person defining the Pod, want to run, you can also find that some addons modify Pods - before the Pods start running - so that there are extra sidecar containers. The mechanisms to inject those extra sidecars are often mutating webhooks. For example, a service mesh addon might inject a sidecar that configures mutual TLS and encryption in transit between different Pods.While the concept of sidecar containers is not new, the native implementation of this feature in Kubernetes, however, is new. And as with every new feature, adopting this feature may present certain challenges.This tutorial explores challenges and solutions that can be experienced by end users as well as by authors of sidecar containers.Benefits of a built-in sidecar containerUsing Kubernetes' native support for sidecar containers provides several benefits:You can configure a native sidecar container to start ahead of init containers.The built-in sidecar containers can be authored to guarantee that they are terminated last. Sidecar containers are terminated with a SIGTERM signal once all the regular containers are completed and terminated. If the sidecar container isn’t gracef


Question: When would you use Adopting Sidecar Containers?

Answer: Adopting Sidecar ContainersThis section is relevant for people adopting a new built-in sidecar containers feature for their workloads.Sidecar container is not a new concept as posted in the blog post. Kubernetes allows running multiple containers in a Pod to implement this concept. However, running a sidecar container as a regular container has a lot of limitations being fixed with the new built-in sidecar containers support.FEATURE STATE: Kubernetes v1.33 [stable] (enabled by default: true)ObjectivesUnderstand the need for sidecar containersBe able to troubleshoot issues with the sidecar containersUnderstand options to universally "inject" sidecar containers to any workloadBefore you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYour Kubernetes server must be at or later than version 1.29.To check the version, enter kubectl version.Sidecar containers overviewSidecar containers are secondary containers that run along with the main application container within the same Pod. These containers are used to enhance or to extend the functionality of the primary app container by providing additional services, or functionalities such as logging, monitoring, security, or data synchronization, without directly altering the primary application code. You can read more in the Sidecar containers concept page.The concept of sidecar containers is not new and there are multiple implementations of this concept. As well as sidecar containers that you, the person defining the Pod, want to run, you can also find that some addons modify Pods - before the Pods start running - so that there are extra sidecar containers. The mechanisms to inject those extra sidecars are often mutating webhooks. For example, a service mesh addon might inject a sidecar that configures mutual TLS and encryption in transit between different Pods.While the concept of sidecar containers is not new, the native implementation of this feature in Kubernetes, however, is new. And as with every new feature, adopting this feature may present certain challenges.This tutorial explores challenges and solutions that can be experienced by end users as well as by authors of sidecar containers.Benefits of a built-in sidecar containerUsing Kubernetes' native support for sidecar containers provides several benefits:You can configure a native sidecar container to start ahead of init containers.The built-in sidecar containers can be authored to guarantee that they are terminated last. Sidecar containers are terminated with a SIGTERM signal once all the regular containers are completed and terminated. If the sidecar container isn’t gracef


Question: What are the benefits of Adopting Sidecar Containers?

Answer: Adopting Sidecar ContainersThis section is relevant for people adopting a new built-in sidecar containers feature for their workloads.Sidecar container is not a new concept as posted in the blog post. Kubernetes allows running multiple containers in a Pod to implement this concept. However, running a sidecar container as a regular container has a lot of limitations being fixed with the new built-in sidecar containers support.FEATURE STATE: Kubernetes v1.33 [stable] (enabled by default: true)ObjectivesUnderstand the need for sidecar containersBe able to troubleshoot issues with the sidecar containersUnderstand options to universally "inject" sidecar containers to any workloadBefore you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYour Kubernetes server must be at or later than version 1.29.To check the version, enter kubectl version.Sidecar containers overviewSidecar containers are secondary containers that run along with the main application container within the same Pod. These containers are used to enhance or to extend the functionality of the primary app container by providing additional services, or functionalities such as logging, monitoring, security, or data synchronization, without directly altering the primary application code. You can read more in the Sidecar containers concept page.The concept of sidecar containers is not new and there are multiple implementations of this concept. As well as sidecar containers that you, the person defining the Pod, want to run, you can also find that some addons modify Pods - before the Pods start running - so that there are extra sidecar containers. The mechanisms to inject those extra sidecars are often mutating webhooks. For example, a service mesh addon might inject a sidecar that configures mutual TLS and encryption in transit between different Pods.While the concept of sidecar containers is not new, the native implementation of this feature in Kubernetes, however, is new. And as with every new feature, adopting this feature may present certain challenges.This tutorial explores challenges and solutions that can be experienced by end users as well as by authors of sidecar containers.Benefits of a built-in sidecar containerUsing Kubernetes' native support for sidecar containers provides several benefits:You can configure a native sidecar container to start ahead of init containers.The built-in sidecar containers can be authored to guarantee that they are terminated last. Sidecar containers are terminated with a SIGTERM signal once all the regular containers are completed and terminated. If the sidecar container isn’t gracef


Question: What is Adopting Sidecar Containers?

Answer: T h i s   s e c t i o n   i s   r e l e v a n t   f o r   p e o p l e   a d o p t i n g   a   n e w   b u i l t - i n   s i d e c a r   c o n t a i n e r s   f e a t u r e   f o r   t h e i r   w o r k l o a d s .   S i d e c a r   c o n t a i n e r   i s   n o t   a   n e w   c o n c e p t   a s   p o s t e d   i n   t h e   b l o g   p o s t .   K u b e r n e t e s   a l l o w s   r u n n i n g   m u l t i p l e   c o n t a i n e r s   i n   a   P o d   t o   i m p l e m e n t   t h i s   c o n c e p t .   H o w e v e r ,   r u n n i n g   a   s i d e c a r   c o n t a i n e r   a s   a   r e g u l a r   c o n t a i n e r   h a s   a   l o t   o f   l i m i t a t i o n s   b e i n g   f i x e d   w i t h   t h e   n e w   b u i l t - i n   s i d e c a r   c o n t a i n e r s   s u p p o r t .


Question: What is Objectives?

Answer: U n d e r s t a n d   t h e   n e e d   f o r   s i d e c a r   c o n t a i n e r s B e   a b l e   t o   t r o u b l e s h o o t   i s s u e s   w i t h   t h e   s i d e c a r   c o n t a i n e r s U n d e r s t a n d   o p t i o n s   t o   u n i v e r s a l l y   " i n j e c t "   s i d e c a r   c o n t a i n e r s   t o   a n y   w o r k l o a d


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s : i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s Y o u r   K u b e r n e t e s   s e r v e r   m u s t   b e   a t   o r   l a t e r   t h a n   v e r s i o n   1 . 2 9 . T o   c h e c k   t h e   v e r s i o n ,   e n t e r   k u b e c t l   v e r s i o n .   Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s :   i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s   T o   c h e c k   t h e   v e r s i o n ,   e n t e r   k u b e c t l   v e r s i o n .


Question: What is Sidecar containers overview?

Answer: S i d e c a r   c o n t a i n e r s   a r e   s e c o n d a r y   c o n t a i n e r s   t h a t   r u n   a l o n g   w i t h   t h e   m a i n   a p p l i c a t i o n   c o n t a i n e r   w i t h i n   t h e   s a m e   P o d .   T h e s e   c o n t a i n e r s   a r e   u s e d   t o   e n h a n c e   o r   t o   e x t e n d   t h e   f u n c t i o n a l i t y   o f   t h e   p r i m a r y   a p p   c o n t a i n e r   b y   p r o v i d i n g   a d d i t i o n a l   s e r v i c e s ,   o r   f u n c t i o n a l i t i e s   s u c h   a s   l o g g i n g ,   m o n i t o r i n g ,   s e c u r i t y ,   o r   d a t a   s y n c h r o n i z a t i o n ,   w i t h o u t   d i r e c t l y   a l t e r i n g   t h e   p r i m a r y   a p p l i c a t i o n   c o d e .   Y o u   c a n   r e a d   m o r e   i n   t h e   S i d e c a r   c o n t a i n e r s   c o n c e p t   p a g e .   T h e   c o n c e p t   o f   s i d e c a r   c o n t a i n e r s   i s   n o t   n e w   a n d   t h e r e   a r e   m u l t i p l e   i m p l e m e n t a t i o n s   o f   t h i s   c o n c e p t .   A s   w e l l   a s   s i d e c a r   c o n t a i n e r s   t h a t   y o u ,   t h e   p e r s o n   d e f i n i n g   t h e   P o d ,   w a n t   t o   r u n ,   y o u   c a n   a l s o   f i n d   t h a t   s o m e   a d d o n s   m o d i f y   P o d s   -   b e f o r e   t h e   P o d s   s t a r t   r u n n i n g   -   s o   t h a t   t h e r e   a r e   e x t r a   s i d e c a r   c o n t a i n e r s .   T h e   m e c h a n i s m s   t o   i n j e c t   t h o s e   e x t r a   s i d e c a r s   a r e   o f t e n   m u t a t i n g   w e b h o o k s .   F o r   e x a m p l e ,   a   s e r v i c e   m e s h   a d d o n   m i g h t   i n j e c t   a   s i d e c a r   t h a t   c o n f i g u r e s   m u t u a l   T L S   a n d   e n c r y p t i o n   i n   t r a n s i t   b e t w e e n   d i f f e r e n t   P o d s .   W h i l e   t h e   c o n c e p t   o f   s i d e c a r   c o n t a i n e r s


Question: What is Benefits of a built-in sidecar container?

Answer: U s i n g   K u b e r n e t e s '   n a t i v e   s u p p o r t   f o r   s i d e c a r   c o n t a i n e r s   p r o v i d e s   s e v e r a l   b e n e f i t s :   Y o u   c a n   c o n f i g u r e   a   n a t i v e   s i d e c a r   c o n t a i n e r   t o   s t a r t   a h e a d   o f   i n i t   c o n t a i n e r s . T h e   b u i l t - i n   s i d e c a r   c o n t a i n e r s   c a n   b e   a u t h o r e d   t o   g u a r a n t e e   t h a t   t h e y   a r e   t e r m i n a t e d   l a s t .   S i d e c a r   c o n t a i n e r s   a r e   t e r m i n a t e d   w i t h   a   S I G T E R M   s i g n a l   o n c e   a l l   t h e   r e g u l a r   c o n t a i n e r s   a r e   c o m p l e t e d   a n d   t e r m i n a t e d .   I f   t h e   s i d e c a r   c o n t a i n e r   i s n ’ t   g r a c e f u l l y   s h u t   d o w n ,   a   S I G K I L L   s i g n a l   w i l l   b e   u s e d   t o   t e r m i n a t e   i t . W i t h   J o b s ,   w h e n   P o d ' s   r e s t a r t P o l i c y :   O n F a i l u r e   o r   r e s t a r t P o l i c y :   N e v e r ,   n a t i v e   s i d e c a r   c o n t a i n e r s   d o   n o t   b l o c k   P o d   c o m p l e t i o n .   W i t h   l e g a c y   s i d e c a r   c o n t a i n e r s ,   s p e c i a l   c a r e   i s   n e e d e d   t o   h a n d l e   t h i s   s i t u a t i o n . A l s o ,   w i t h   J o b s ,   b u i l t - i n   s i d e c a r   c o n t a i n e r s   w o u l d   k e e p   b e i n g   r e s t a r t e d   o n c e   t h e y   a r e   d o n e ,   e v e n   i f   r e g u l a r   c o n t a i n e r s   w o u l d   n o t   w i t h   P o d ' s   r e s t a r t P o l i c y :   N e v e r .   S e e   d i f f e r e n c e s   f r o m   i n i t   c o n t a i n e r s   t o   l e a r n   m o r e   a b o u t   i t .


Question: What is Adopting built-in sidecar containers?

Answer: T h e   S i d e c a r C o n t a i n e r s   f e a t u r e   g a t e   i s   i n   b e t a   s t a t e   s t a r t i n g   f r o m   K u b e r n e t e s   v e r s i o n   1 . 2 9   a n d   i s   e n a b l e d   b y   d e f a u l t .   S o m e   c l u s t e r s   m a y   h a v e   t h i s   f e a t u r e   d i s a b l e d   o r   h a v e   s o f t w a r e   i n s t a l l e d   t h a t   i s   i n c o m p a t i b l e   w i t h   t h e   f e a t u r e .   W h e n   t h i s   h a p p e n s ,   t h e   P o d   m a y   b e   r e j e c t e d   o r   t h e   s i d e c a r   c o n t a i n e r s   m a y   b l o c k   P o d   s t a r t u p ,   r e n d e r i n g   t h e   P o d   u s e l e s s .   T h i s   c o n d i t i o n   i s   e a s y   t o   d e t e c t   a s   t h e   P o d   s i m p l y   g e t s   s t u c k   o n   i n i t i a l i z a t i o n .   H o w e v e r ,   i t   i s   o f t e n   u n c l e a r   w h a t   c a u s e d   t h e   p r o b l e m .   H e r e   a r e   t h e   c o n s i d e r a t i o n s   a n d   t r o u b l e s h o o t i n g   s t e p s   t h a t   o n e   c a n   t a k e   w h i l e   a d o p t i n g   s i d e c a r   c o n t a i n e r s   f o r   t h e i r   w o r k l o a d .


Question: What is Ensure the feature gate is enabled?

Answer: A s   a   v e r y   f i r s t   s t e p ,   m a k e   s u r e   t h a t   b o t h   A P I   s e r v e r   a n d   N o d e s   a r e   a t   K u b e r n e t e s   v e r s i o n   v 1 . 2 9   o r   l a t e r .   T h e   f e a t u r e   w i l l   b r e a k   o n   c l u s t e r s   w h e r e   N o d e s   a r e   r u n n i n g   e a r l i e r   v e r s i o n s   w h e r e   i t   i s   n o t   e n a b l e d .


Question: What is Note?

Answer: Y o u   s h o u l d   e n s u r e   t h a t   t h e   f e a t u r e   g a t e   i s   e n a b l e d   f o r   t h e   A P I   s e r v e r ( s )   w i t h i n   t h e   c o n t r o l   p l a n e   a n d   f o r   a l l   n o d e s .   O n e   o f   t h e   w a y s   t o   c h e c k   t h e   f e a t u r e   g a t e   e n a b l e m e n t   i s   t o   r u n   a   c o m m a n d   l i k e   t h i s :   F o r   A P I   S e r v e r : k u b e c t l   g e t   - - r a w   / m e t r i c s   |   g r e p   k u b e r n e t e s _ f e a t u r e _ e n a b l e d   |   g r e p   S i d e c a r C o n t a i n e r s   F o r   t h e   i n d i v i d u a l   n o d e : k u b e c t l   g e t   - - r a w   / a p i / v 1 / n o d e s / < n o d e - n a m e > / p r o x y / m e t r i c s   |   g r e p   k u b e r n e t e s _ f e a t u r e _ e n a b l e d   |   g r e p   S i d e c a r C o n t a i n e r s   F o r   A P I   S e r v e r :   k u b e c t l   g e t   - - r a w   / m e t r i c s   |   g r e p   k u b e r n e t e s _ f e a t u r e _ e n a b l e d   |   g r e p   S i d e c a r C o n t a i n e r s   F o r   t h e   i n d i v i d u a l   n o d e :   k u b e c t l   g e t   - - r a w   / a p i / v 1 / n o d e s / < n o d e - n a m e > / p r o x y / m e t r i c s   |   g r e p   k u b e r n e t e s _ f e a t u r e _ e n a b l e d   |   g r e p   S i d e c a r C o n t a i n e r s   I f   y o u   s e e   s o m e t h i n g   l i k e   t h i s :   k u b e r n e t e s _ f e a t u r e _ e n a b l e d { n a m e = " S i d e c a r C o n t a i n e r s " , s t a g e = " B E T A " }   1   i t   m e a n s   t h a t   t h e   f e a t u r e   i s   e n a b l e d .


Question: What is Check for 3rd party tooling and mutating webhooks?

Answer: I f   y o u   e x p e r i e n c e   i s s u e s   w h e n   v a l i d a t i n g   t h e   f e a t u r e ,   i t   m a y   b e   a n   i n d i c a t i o n   t h a t   o n e   o f   t h e   3 r d   p a r t y   t o o l s   o r   m u t a t i n g   w e b h o o k s   a r e   b r o k e n .   W h e n   t h e   S i d e c a r C o n t a i n e r s   f e a t u r e   g a t e   i s   e n a b l e d ,   P o d s   g a i n   a   n e w   f i e l d   i n   t h e i r   A P I .   S o m e   t o o l s   o r   m u t a t i n g   w e b h o o k s   m i g h t   h a v e   b e e n   b u i l t   w i t h   a n   e a r l i e r   v e r s i o n   o f   K u b e r n e t e s   A P I .   I f   t o o l s   p a s s   u n k n o w n   f i e l d s   a s - i s   u s i n g   v a r i o u s   p a t c h i n g   s t r a t e g i e s   t o   m u t a t e   a   P o d   o b j e c t ,   t h i s   w i l l   n o t   b e   a   p r o b l e m .   H o w e v e r ,   t h e r e   a r e   t o o l s   t h a t   w i l l   s t r i p   o u t   u n k n o w n   f i e l d s ;   i f   y o u   h a v e   t h o s e ,   t h e y   m u s t   b e   r e c o m p i l e d   w i t h   t h e   v 1 . 2 8 +   v e r s i o n   o f   K u b e r n e t e s   A P I   c l i e n t   c o d e .   T h e   w a y   t o   c h e c k   t h i s   i s   t o   u s e   t h e   k u b e c t l   d e s c r i b e   p o d   c o m m a n d   w i t h   y o u r   P o d   t h a t   h a s   p a s s e d   t h r o u g h   m u t a t i n g   a d m i s s i o n .   I f   a n y   t o o l s   s t r i p p e d   o u t   t h e   n e w   f i e l d   ( r e s t a r t P o l i c y : A l w a y s ) ,   y o u   w i l l   n o t   s e e   i t   i n   t h e   c o m m a n d   o u t p u t .   I f   y o u   h i t   a n   i s s u e   l i k e   t h i s ,   p l e a s e   a d v i s e   t h e   a u t h o r   o f   t h e   t o o l s   o r   t h e   w e b h o o k s   u s e   o n e   o f   t h e   p a t c h i n g   s t r a t e g i e s   f o r   m o d i f y i n g   o b j e c t s   i n s t e a d   o f   a   f u l l   o b


Question: What is Automatic injection of sidecars?

Answer: I f   y o u   a r e   u s i n g   s o f t w a r e   t h a t   i n j e c t s   s i d e c a r s   a u t o m a t i c a l l y ,   t h e r e   a r e   a   f e w   p o s s i b l e   s t r a t e g i e s   y o u   m a y   f o l l o w   t o   e n s u r e   t h a t   n a t i v e   s i d e c a r   c o n t a i n e r s   c a n   b e   u s e d .   A l l   s t r a t e g i e s   a r e   g e n e r a l l y   o p t i o n s   y o u   m a y   c h o o s e   t o   d e c i d e   w h e t h e r   t h e   P o d   t h e   s i d e c a r   w i l l   b e   i n j e c t e d   t o   w i l l   l a n d   o n   a   N o d e   s u p p o r t i n g   t h e   f e a t u r e   o r   n o t .   A s   a n   e x a m p l e ,   y o u   c a n   f o l l o w   t h i s   c o n v e r s a t i o n   i n   I s t i o   c o m m u n i t y .   T h e   d i s c u s s i o n   e x p l o r e s   t h e   o p t i o n s   l i s t e d   b e l o w .   M a r k   P o d s   t h a t   l a n d   t o   n o d e s   s u p p o r t i n g   s i d e c a r s .   Y o u   c a n   u s e   n o d e   l a b e l s   a n d   n o d e   a f f i n i t y   t o   m a r k   n o d e s   s u p p o r t i n g   s i d e c a r   c o n t a i n e r s   a n d   P o d s   l a n d i n g   o n   t h o s e   n o d e s . C h e c k   N o d e s   c o m p a t i b i l i t y   o n   i n j e c t i o n .   D u r i n g   s i d e c a r   i n j e c t i o n ,   y o u   m a y   u s e   t h e   f o l l o w i n g   s t r a t e g i e s   t o   c h e c k   n o d e   c o m p a t i b i l i t y : q u e r y   n o d e   v e r s i o n   a n d   a s s u m e   t h e   f e a t u r e   g a t e   i s   e n a b l e d   o n   t h e   v e r s i o n   1 . 2 9 + q u e r y   n o d e   p r o m e t h e u s   m e t r i c s   a n d   c h e c k   f e a t u r e   e n a b l e m e n t   s t a t u s a s s u m e   t h e   n o d e s   a r e   r u n n i n g   w i t h   a   s u p p o r t e d   v e r s i o n   s k e w   f r o m   t h e   A P I   s e r v e r t h e r e   m a y   b e   o t h e r   c u s t o m   w a y s   t o


Question: What is What's next?

Answer: L e a r n   m o r e   a b o u t   s i d e c a r   c o n t a i n e r s .


Question: What is StatefulSet?

Answer: StatefulSetStatefulSet represents a set of pods with consistent identities.apiVersion: apps/v1import "k8s.io/api/apps/v1"StatefulSetStatefulSet represents a set of pods with consistent identities. Identities are defined as:Network: A single stable DNS and hostname.Storage: As many VolumeClaims as requested.The StatefulSet guarantees that a given network identity will always map to the same storage identity.apiVersion: apps/v1kind: StatefulSetmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (StatefulSetSpec)Spec defines the desired identities of pods in this set.status (StatefulSetStatus)Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.StatefulSetSpecA StatefulSetSpec is the specification of a StatefulSet.serviceName (string)serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where "pod-specific-string" is managed by the StatefulSet controller.selector (LabelSelector), requiredselector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorstemplate (PodTemplateSpec), requiredtemplate is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet. Each pod will be named with the format <statefulsetname>-<podindex>. For example, a pod in a StatefulSet named "web" with index number "3" would be named "web-3". The only allowed template.spec.restartPolicy value is "Always".replicas (int32)replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.updateStrategy (StatefulSetUpdateStrategy)updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.updateStrategy.type (string)Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.updateStrategy.rollingUpdate (RollingUpdateStatefulSetStrategy)RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdate