Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   M u t a t i n g A d m i s s i o n P o l i c y b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   M u t a t i n g A d m i s s i o n P o l i c y   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / a d m i s s i o n r e g i s t r a t i o n . k 8 s . i o / v 1 b e t a 1 / m u t a t i n g a d m i s s i o n p o l i c i e s


Question: What is Parameters?

Answer: b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   l a b e l S e l e c t o r   (


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is kubectl create deployment?

Answer: kubectl create deploymentSynopsisCreate a deployment with the specified name.kubectl create deployment NAME --image=image -- [COMMAND] [args...] Examples # Create a deployment named my-dep that runs the busybox image kubectl create deployment my-dep --image=busybox # Create a deployment with a command kubectl create deployment my-dep --image=busybox -- date # Create a deployment named my-dep that runs the nginx image with 3 replicas kubectl create deployment my-dep --image=nginx --replicas=3 # Create a deployment named my-dep that runs the busybox image and expose port 5701 kubectl create deployment my-dep --image=busybox --port=5701 # Create a deployment named my-dep that runs multiple containers kubectl create deployment my-dep --image=busybox:latest --image=ubuntu:latest --image=nginx Options--allow-missing-template-keys Default: trueIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run string[="unchanged"] Default: "none"Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager string Default: "kubectl-create"Name of the manager used to track field ownership.-h, --helphelp for deployment--image stringsImage names to run. A deployment can have multiple images set for multi-container pod.-o, --output stringOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--port int32 Default: -1The containerPort that this deployment exposes.-r, --replicas int32 Default: 1Number of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--template stringTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate string[="strict"] Default: "strict"Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.Parent Options Inherited--as stringUsername to impersonate fo


Question: How does kubectl create deployment work?

Answer: kubectl create deploymentSynopsisCreate a deployment with the specified name.kubectl create deployment NAME --image=image -- [COMMAND] [args...] Examples # Create a deployment named my-dep that runs the busybox image kubectl create deployment my-dep --image=busybox # Create a deployment with a command kubectl create deployment my-dep --image=busybox -- date # Create a deployment named my-dep that runs the nginx image with 3 replicas kubectl create deployment my-dep --image=nginx --replicas=3 # Create a deployment named my-dep that runs the busybox image and expose port 5701 kubectl create deployment my-dep --image=busybox --port=5701 # Create a deployment named my-dep that runs multiple containers kubectl create deployment my-dep --image=busybox:latest --image=ubuntu:latest --image=nginx Options--allow-missing-template-keys Default: trueIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run string[="unchanged"] Default: "none"Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager string Default: "kubectl-create"Name of the manager used to track field ownership.-h, --helphelp for deployment--image stringsImage names to run. A deployment can have multiple images set for multi-container pod.-o, --output stringOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--port int32 Default: -1The containerPort that this deployment exposes.-r, --replicas int32 Default: 1Number of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--template stringTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate string[="strict"] Default: "strict"Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.Parent Options Inherited--as stringUsername to impersonate fo


Question: When would you use kubectl create deployment?

Answer: kubectl create deploymentSynopsisCreate a deployment with the specified name.kubectl create deployment NAME --image=image -- [COMMAND] [args...] Examples # Create a deployment named my-dep that runs the busybox image kubectl create deployment my-dep --image=busybox # Create a deployment with a command kubectl create deployment my-dep --image=busybox -- date # Create a deployment named my-dep that runs the nginx image with 3 replicas kubectl create deployment my-dep --image=nginx --replicas=3 # Create a deployment named my-dep that runs the busybox image and expose port 5701 kubectl create deployment my-dep --image=busybox --port=5701 # Create a deployment named my-dep that runs multiple containers kubectl create deployment my-dep --image=busybox:latest --image=ubuntu:latest --image=nginx Options--allow-missing-template-keys Default: trueIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run string[="unchanged"] Default: "none"Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager string Default: "kubectl-create"Name of the manager used to track field ownership.-h, --helphelp for deployment--image stringsImage names to run. A deployment can have multiple images set for multi-container pod.-o, --output stringOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--port int32 Default: -1The containerPort that this deployment exposes.-r, --replicas int32 Default: 1Number of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--template stringTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate string[="strict"] Default: "strict"Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.Parent Options Inherited--as stringUsername to impersonate fo


Question: What are the benefits of kubectl create deployment?

Answer: kubectl create deploymentSynopsisCreate a deployment with the specified name.kubectl create deployment NAME --image=image -- [COMMAND] [args...] Examples # Create a deployment named my-dep that runs the busybox image kubectl create deployment my-dep --image=busybox # Create a deployment with a command kubectl create deployment my-dep --image=busybox -- date # Create a deployment named my-dep that runs the nginx image with 3 replicas kubectl create deployment my-dep --image=nginx --replicas=3 # Create a deployment named my-dep that runs the busybox image and expose port 5701 kubectl create deployment my-dep --image=busybox --port=5701 # Create a deployment named my-dep that runs multiple containers kubectl create deployment my-dep --image=busybox:latest --image=ubuntu:latest --image=nginx Options--allow-missing-template-keys Default: trueIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.--dry-run string[="unchanged"] Default: "none"Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource.--field-manager string Default: "kubectl-create"Name of the manager used to track field ownership.-h, --helphelp for deployment--image stringsImage names to run. A deployment can have multiple images set for multi-container pod.-o, --output stringOutput format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).--port int32 Default: -1The containerPort that this deployment exposes.-r, --replicas int32 Default: 1Number of replicas to create. Default is 1.--save-configIf true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.--template stringTemplate string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].--validate string[="strict"] Default: "strict"Must be one of: strict (or true), warn, ignore (or false). "true" or "strict" will use a schema to validate the input and fail the request if invalid. It will perform server side validation if ServerSideFieldValidation is enabled on the api-server, but will fall back to less reliable client-side validation if not. "warn" will warn about unknown or duplicate fields without blocking the request if server-side field validation is enabled on the API server, and behave as "ignore" otherwise. "false" or "ignore" will not perform any schema validation, silently dropping any unknown or duplicate fields.Parent Options Inherited--as stringUsername to impersonate fo


Question: What is Synopsis?

Answer: C r e a t e   a   d e p l o y m e n t   w i t h   t h e   s p e c i f i e d   n a m e .   k u b e c t l   c r e a t e   d e p l o y m e n t   N A M E   - - i m a g e = i m a g e   - -   [ C O M M A N D ]   [ a r g s . . . ]


Question: What is Examples?

Answer: #   C r e a t e   a   d e p l o y m e n t   n a m e d   m y - d e p   t h a t   r u n s   t h e   b u s y b o x   i m a g e   k u b e c t l   c r e a t e   d e p l o y m e n t   m y - d e p   - - i m a g e = b u s y b o x   #   C r e a t e   a   d e p l o y m e n t   w i t h   a   c o m m a n d   k u b e c t l   c r e a t e   d e p l o y m e n t   m y - d e p   - - i m a g e = b u s y b o x   - -   d a t e   #   C r e a t e   a   d e p l o y m e n t   n a m e d   m y - d e p   t h a t   r u n s   t h e   n g i n x   i m a g e   w i t h   3   r e p l i c a s   k u b e c t l   c r e a t e   d e p l o y m e n t   m y - d e p   - - i m a g e = n g i n x   - - r e p l i c a s = 3   #   C r e a t e   a   d e p l o y m e n t   n a m e d   m y - d e p   t h a t   r u n s   t h e   b u s y b o x   i m a g e   a n d   e x p o s e   p o r t   5 7 0 1   k u b e c t l   c r e a t e   d e p l o y m e n t   m y - d e p   - - i m a g e = b u s y b o x   - - p o r t = 5 7 0 1   #   C r e a t e   a   d e p l o y m e n t   n a m e d   m y - d e p   t h a t   r u n s   m u l t i p l e   c o n t a i n e r s   k u b e c t l   c r e a t e   d e p l o y m e n t   m y - d e p   - - i m a g e = b u s y b o x : l a t e s t   - - i m a g e = u b u n t u : l a t e s t   - - i m a g e = n g i n x


Question: What is Options?

Answer: I f   t r u e ,   i g n o r e   a n y   e r r o r s   i n   t e m p l a t e s   w h e n   a   f i e l d   o r   m a p   k e y   i s   m i s s i n g   i n   t h e   t e m p l a t e .   O n l y   a p p l i e s   t o   g o l a n g   a n d   j s o n p a t h   o u t p u t   f o r m a t s .   M u s t   b e   " n o n e " ,   " s e r v e r " ,   o r   " c l i e n t " .   I f   c l i e n t   s t r a t e g y ,   o n l y   p r i n t   t h e   o b j e c t   t h a t   w o u l d   b e   s e n t ,   w i t h o u t   s e n d i n g   i t .   I f   s e r v e r   s t r a t e g y ,   s u b m i t   s e r v e r - s i d e   r e q u e s t   w i t h o u t   p e r s i s t i n g   t h e   r e s o u r c e .   N a m e   o f   t h e   m a n a g e r   u s e d   t o   t r a c k   f i e l d   o w n e r s h i p .   h e l p   f o r   d e p l o y m e n t   I m a g e   n a m e s   t o   r u n .   A   d e p l o y m e n t   c a n   h a v e   m u l t i p l e   i m a g e s   s e t   f o r   m u l t i - c o n t a i n e r   p o d .   O u t p u t   f o r m a t .   O n e   o f :   ( j s o n ,   y a m l ,   n a m e ,   g o - t e m p l a t e ,   g o - t e m p l a t e - f i l e ,   t e m p l a t e ,   t e m p l a t e f i l e ,   j s o n p a t h ,   j s o n p a t h - a s - j s o n ,   j s o n p a t h - f i l e ) .   T h e   c o n t a i n e r P o r t   t h a t   t h i s   d e p l o y m e n t   e x p o s e s .   N u m b e r   o f   r e p l i c a s   t o   c r e a t e .   D e f a u l t   i s   1 .   I f   t r u e ,   t h e   c o n f i g u r a t i o n   o f   c u r r e n t   o b j e c t   w i l l   b e   s a v e d   i n   i t s   a n n o t a t i o n .   O t h e r w i s e ,   t h e   a n n o t a t i o n   w i l l   b e   u n c h a n g e d .   T h i s   f l a g   i s   u s e f u l   w h e n   y o u   w a n t   t o   p e r f o r m   k u b e c t l   a p p l y   o n   t h i s   o b j e c t   i n   t h e   f u t u r e .   I f   t r u e ,   k e e p   t h e   m a n a g e d F i e l d s   w h e n   p r i n t i n g   o b j e c t


Question: What is Parent Options Inherited?

Answer: U s e r n a m e   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n .   U s e r   c o u l d   b e   a   r e g u l a r   u s e r   o r   a   s e r v i c e   a c c o u n t   i n   a   n a m e s p a c e .   G r o u p   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n ,   t h i s   f l a g   c a n   b e   r e p e a t e d   t o   s p e c i f y   m u l t i p l e   g r o u p s .   U I D   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n .   D e f a u l t   c a c h e   d i r e c t o r y   P a t h   t o   a   c e r t   f i l e   f o r   t h e   c e r t i f i c a t e   a u t h o r i t y   P a t h   t o   a   c l i e n t   c e r t i f i c a t e   f i l e   f o r   T L S   P a t h   t o   a   c l i e n t   k e y   f i l e   f o r   T L S   T h e   n a m e   o f   t h e   k u b e c o n f i g   c l u s t e r   t o   u s e   T h e   n a m e   o f   t h e   k u b e c o n f i g   c o n t e x t   t o   u s e   I f   t r u e ,   o p t - o u t   o f   r e s p o n s e   c o m p r e s s i o n   f o r   a l l   r e q u e s t s   t o   t h e   s e r v e r   I f   t r u e ,   t h e   s e r v e r ' s   c e r t i f i c a t e   w i l l   n o t   b e   c h e c k e d   f o r   v a l i d i t y .   T h i s   w i l l   m a k e   y o u r   H T T P S   c o n n e c t i o n s   i n s e c u r e   P a t h   t o   t h e   k u b e c o n f i g   f i l e   t o   u s e   f o r   C L I   r e q u e s t s .   P a t h   t o   t h e   k u b e r c   f i l e   t o   u s e   f o r   p r e f e r e n c e s .   T h i s   c a n   b e   d i s a b l e d   b y   e x p o r t i n g   K U B E C T L _ K U B E R C = f a l s e   f e a t u r e   g a t e   o r   t u r n i n g   o f f   t h e   f e a t u r e   K U B E R C = o f f .   R e q u i r e   s e r v e r   v e r s i o n   t o   m a t c h   c l i e n t   v e r s i o n   I f   p r e s e n t ,   t h e   n a m e s p a c e   s c o p e   f o r   t h i s   C L I   r e q u e s t   P a s s w o r d   f o r   b a s i c   a u t h e n t i c a t


Question: What is See Also?

Answer: k u b e c t l   c r e a t e   -   C r e a t e   a   r e s o u r c e   f r o m   a   f i l e   o r   f r o m   s t d i n   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Extend Resources?

Answer: Extend ResourcesCustomResourceDefinitionCustomResourceDefinition represents a resource that should be exposed on the API server.DeviceClassDeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors.MutatingWebhookConfigurationMutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.This page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: How does Extend Resources work?

Answer: Extend ResourcesCustomResourceDefinitionCustomResourceDefinition represents a resource that should be exposed on the API server.DeviceClassDeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors.MutatingWebhookConfigurationMutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.This page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: When would you use Extend Resources?

Answer: Extend ResourcesCustomResourceDefinitionCustomResourceDefinition represents a resource that should be exposed on the API server.DeviceClassDeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors.MutatingWebhookConfigurationMutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.This page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: What are the benefits of Extend Resources?

Answer: Extend ResourcesCustomResourceDefinitionCustomResourceDefinition represents a resource that should be exposed on the API server.DeviceClassDeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors.MutatingWebhookConfigurationMutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.ValidatingWebhookConfigurationValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.This page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: What is CustomResourceDefinition?

Answer: C u s t o m R e s o u r c e D e f i n i t i o n   r e p r e s e n t s   a   r e s o u r c e   t h a t   s h o u l d   b e   e x p o s e d   o n   t h e   A P I   s e r v e r .


Question: What is DeviceClass?

Answer: D e v i c e C l a s s   i s   a   v e n d o r -   o r   a d m i n - p r o v i d e d   r e s o u r c e   t h a t   c o n t a i n s   d e v i c e   c o n f i g u r a t i o n   a n d   s e l e c t o r s .


Question: What is MutatingWebhookConfiguration?

Answer: M u t a t i n g W e b h o o k C o n f i g u r a t i o n   d e s c r i b e s   t h e   c o n f i g u r a t i o n   o f   a n d   a d m i s s i o n   w e b h o o k   t h a t   a c c e p t   o r   r e j e c t   a n d   m a y   c h a n g e   t h e   o b j e c t .


Question: What is ValidatingWebhookConfiguration?

Answer: V a l i d a t i n g W e b h o o k C o n f i g u r a t i o n   d e s c r i b e s   t h e   c o n f i g u r a t i o n   o f   a n d   a d m i s s i o n   w e b h o o k   t h a t   a c c e p t   o r   r e j e c t   a n d   o b j e c t   w i t h o u t   c h a n g i n g   i t .   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is PriorityLevelConfiguration?

Answer: PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1import "k8s.io/api/flowcontrol/v1"PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1kind: PriorityLevelConfigurationmetadata (ObjectMeta)metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (PriorityLevelConfigurationSpec)spec is the specification of the desired behavior of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (PriorityLevelConfigurationStatus)status is the current status of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusPriorityLevelConfigurationSpecPriorityLevelConfigurationSpec specifies the configuration of a priority level.exempt (ExemptPriorityLevelConfiguration)exempt specifies how requests are handled for an exempt priority level. This field MUST be empty if type is "Limited". This field MAY be non-empty if type is "Exempt". If empty and type is "Exempt" then the default values for ExemptPriorityLevelConfiguration apply.ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the spec.exempt.lendablePercent (int32)lendablePercent prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )exempt.nominalConcurrencyShares (int32)nominalConcurrencyShares (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.limited (LimitedPriorityLevelConfiguration)limited specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if type is "Limited".*LimitedPriorityLevelConfiguration specifies how to


Question: How does PriorityLevelConfiguration work?

Answer: PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1import "k8s.io/api/flowcontrol/v1"PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1kind: PriorityLevelConfigurationmetadata (ObjectMeta)metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (PriorityLevelConfigurationSpec)spec is the specification of the desired behavior of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (PriorityLevelConfigurationStatus)status is the current status of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusPriorityLevelConfigurationSpecPriorityLevelConfigurationSpec specifies the configuration of a priority level.exempt (ExemptPriorityLevelConfiguration)exempt specifies how requests are handled for an exempt priority level. This field MUST be empty if type is "Limited". This field MAY be non-empty if type is "Exempt". If empty and type is "Exempt" then the default values for ExemptPriorityLevelConfiguration apply.ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the spec.exempt.lendablePercent (int32)lendablePercent prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )exempt.nominalConcurrencyShares (int32)nominalConcurrencyShares (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.limited (LimitedPriorityLevelConfiguration)limited specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if type is "Limited".*LimitedPriorityLevelConfiguration specifies how to


Question: When would you use PriorityLevelConfiguration?

Answer: PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1import "k8s.io/api/flowcontrol/v1"PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1kind: PriorityLevelConfigurationmetadata (ObjectMeta)metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (PriorityLevelConfigurationSpec)spec is the specification of the desired behavior of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (PriorityLevelConfigurationStatus)status is the current status of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusPriorityLevelConfigurationSpecPriorityLevelConfigurationSpec specifies the configuration of a priority level.exempt (ExemptPriorityLevelConfiguration)exempt specifies how requests are handled for an exempt priority level. This field MUST be empty if type is "Limited". This field MAY be non-empty if type is "Exempt". If empty and type is "Exempt" then the default values for ExemptPriorityLevelConfiguration apply.ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the spec.exempt.lendablePercent (int32)lendablePercent prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )exempt.nominalConcurrencyShares (int32)nominalConcurrencyShares (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.limited (LimitedPriorityLevelConfiguration)limited specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if type is "Limited".*LimitedPriorityLevelConfiguration specifies how to


Question: What are the benefits of PriorityLevelConfiguration?

Answer: PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1import "k8s.io/api/flowcontrol/v1"PriorityLevelConfigurationPriorityLevelConfiguration represents the configuration of a priority level.apiVersion: flowcontrol.apiserver.k8s.io/v1kind: PriorityLevelConfigurationmetadata (ObjectMeta)metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (PriorityLevelConfigurationSpec)spec is the specification of the desired behavior of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (PriorityLevelConfigurationStatus)status is the current status of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusPriorityLevelConfigurationSpecPriorityLevelConfigurationSpec specifies the configuration of a priority level.exempt (ExemptPriorityLevelConfiguration)exempt specifies how requests are handled for an exempt priority level. This field MUST be empty if type is "Limited". This field MAY be non-empty if type is "Exempt". If empty and type is "Exempt" then the default values for ExemptPriorityLevelConfiguration apply.ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the spec.exempt.lendablePercent (int32)lendablePercent prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )exempt.nominalConcurrencyShares (int32)nominalConcurrencyShares (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.limited (LimitedPriorityLevelConfiguration)limited specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if type is "Limited".*LimitedPriorityLevelConfiguration specifies how to


Question: What is PriorityLevelConfiguration?

Answer: a p i V e r s i o n :   f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1   i m p o r t   " k 8 s . i o / a p i / f l o w c o n t r o l / v 1 "


Question: What is PriorityLevelConfiguration?

Answer: P r i o r i t y L e v e l C o n f i g u r a t i o n   r e p r e s e n t s   t h e   c o n f i g u r a t i o n   o f   a   p r i o r i t y   l e v e l .   a p i V e r s i o n :   f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 k i n d :   P r i o r i t y L e v e l C o n f i g u r a t i o n m e t a d a t a   ( O b j e c t M e t a ) m e t a d a t a   i s   t h e   s t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a s p e c   ( P r i o r i t y L e v e l C o n f i g u r a t i o n S p e c ) s p e c   i s   t h e   s p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   o f   a   " r e q u e s t - p r i o r i t y " .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s s t a t u s   ( P r i o r i t y L e v e l C o n f i g u r a t i o n S t a t u s ) s t a t u s   i s   t h e   c u r r e n t   s t a t u s   o f   a   " r e q u e s t - p r i o r i t y " .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s   a p i V e r s i o n :   f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1   k i n d :   P r i o r i t y L e v e l C o n f i g u r a t i o n   m e t a d a t a   ( O b j e c t M e t a )   m e t a d a t a   i s   t h e   s t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   s p e c


Question: What is PriorityLevelConfigurationSpec?

Answer: P r i o r i t y L e v e l C o n f i g u r a t i o n S p e c   s p e c i f i e s   t h e   c o n f i g u r a t i o n   o f   a   p r i o r i t y   l e v e l .   e x e m p t   ( E x e m p t P r i o r i t y L e v e l C o n f i g u r a t i o n ) e x e m p t   s p e c i f i e s   h o w   r e q u e s t s   a r e   h a n d l e d   f o r   a n   e x e m p t   p r i o r i t y   l e v e l .   T h i s   f i e l d   M U S T   b e   e m p t y   i f   t y p e   i s   " L i m i t e d " .   T h i s   f i e l d   M A Y   b e   n o n - e m p t y   i f   t y p e   i s   " E x e m p t " .   I f   e m p t y   a n d   t y p e   i s   " E x e m p t "   t h e n   t h e   d e f a u l t   v a l u e s   f o r   E x e m p t P r i o r i t y L e v e l C o n f i g u r a t i o n   a p p l y . E x e m p t P r i o r i t y L e v e l C o n f i g u r a t i o n   d e s c r i b e s   t h e   c o n f i g u r a b l e   a s p e c t s   o f   t h e   h a n d l i n g   o f   e x e m p t   r e q u e s t s .   I n   t h e   m a n d a t o r y   e x e m p t   c o n f i g u r a t i o n   o b j e c t   t h e   v a l u e s   i n   t h e   f i e l d s   h e r e   c a n   b e   m o d i f i e d   b y   a u t h o r i z e d   u s e r s ,   u n l i k e   t h e   r e s t   o f   t h e   s p e c . e x e m p t . l e n d a b l e P e r c e n t   ( i n t 3 2 ) l e n d a b l e P e r c e n t   p r e s c r i b e s   t h e   f r a c t i o n   o f   t h e   l e v e l ' s   N o m i n a l C L   t h a t   c a n   b e   b o r r o w e d   b y   o t h e r   p r i o r i t y   l e v e l s .   T h i s   v a l u e   o f   t h i s   f i e l d   m u s t   b e   b e t w e e n   0   a n d   1 0 0 ,   i n c l u s i v e ,   a n d   i t   d e f a u l t s   t o   0 .   T h e   n u m b e r   o f   s e a t s   t h a t   o t h e r   l e v e l s   c a n   b o r r o w   f r o m   t h i s   l e v e l ,   k n o w n   a s   t h i s   l e v e l ' s   L e n d a b l e C o n c u r r e n c y L i m i t   ( L e n d a b l e C L ) ,   i s   d e f i n e d   a s   f o


Question: What is PriorityLevelConfigurationStatus?

Answer: P r i o r i t y L e v e l C o n f i g u r a t i o n S t a t u s   r e p r e s e n t s   t h e   c u r r e n t   s t a t e   o f   a   " r e q u e s t - p r i o r i t y " .   c o n d i t i o n s   ( [ ] P r i o r i t y L e v e l C o n f i g u r a t i o n C o n d i t i o n ) P a t c h   s t r a t e g y :   m e r g e   o n   k e y   t y p e M a p :   u n i q u e   v a l u e s   o n   k e y   t y p e   w i l l   b e   k e p t   d u r i n g   a   m e r g e c o n d i t i o n s   i s   t h e   c u r r e n t   s t a t e   o f   " r e q u e s t - p r i o r i t y " . P r i o r i t y L e v e l C o n f i g u r a t i o n C o n d i t i o n   d e f i n e s   t h e   c o n d i t i o n   o f   p r i o r i t y   l e v e l . c o n d i t i o n s . l a s t T r a n s i t i o n T i m e   ( T i m e ) l a s t T r a n s i t i o n T i m e   i s   t h e   l a s t   t i m e   t h e   c o n d i t i o n   t r a n s i t i o n e d   f r o m   o n e   s t a t u s   t o   a n o t h e r . T i m e   i s   a   w r a p p e r   a r o u n d   t i m e . T i m e   w h i c h   s u p p o r t s   c o r r e c t   m a r s h a l i n g   t o   Y A M L   a n d   J S O N .   W r a p p e r s   a r e   p r o v i d e d   f o r   m a n y   o f   t h e   f a c t o r y   m e t h o d s   t h a t   t h e   t i m e   p a c k a g e   o f f e r s . c o n d i t i o n s . m e s s a g e   ( s t r i n g ) m e s s a g e   i s   a   h u m a n - r e a d a b l e   m e s s a g e   i n d i c a t i n g   d e t a i l s   a b o u t   l a s t   t r a n s i t i o n . c o n d i t i o n s . r e a s o n   ( s t r i n g ) r e a s o n   i s   a   u n i q u e ,   o n e - w o r d ,   C a m e l C a s e   r e a s o n   f o r   t h e   c o n d i t i o n ' s   l a s t   t r a n s i t i o n . c o n d i t i o n s . s t a t u s   ( s t r i n g ) s t a t u s   i s   t h e   s t a t u s   o f   t h e   c o n d i t i o n .   C a n   b e   T r u e ,   F a l s e ,   U n k n o w n .   R e q u i r e d . c o n d i t i o n s . t y p e   ( s t r i n g ) t y p e   i


Question: What is PriorityLevelConfigurationList?

Answer: P r i o r i t y L e v e l C o n f i g u r a t i o n L i s t   i s   a   l i s t   o f   P r i o r i t y L e v e l C o n f i g u r a t i o n   o b j e c t s .   a p i V e r s i o n :   f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 k i n d :   P r i o r i t y L e v e l C o n f i g u r a t i o n L i s t m e t a d a t a   ( L i s t M e t a ) m e t a d a t a   i s   t h e   s t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a i t e m s   ( [ ] P r i o r i t y L e v e l C o n f i g u r a t i o n ) ,   r e q u i r e d i t e m s   i s   a   l i s t   o f   r e q u e s t - p r i o r i t i e s .   a p i V e r s i o n :   f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1   k i n d :   P r i o r i t y L e v e l C o n f i g u r a t i o n L i s t   m e t a d a t a   ( L i s t M e t a )   m e t a d a t a   i s   t h e   s t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   i t e m s   ( [ ] P r i o r i t y L e v e l C o n f i g u r a t i o n ) ,   r e q u i r e d   i t e m s   i s   a   l i s t   o f   r e q u e s t - p r i o r i t i e s .


Question: What is HTTP Request?

Answer: G E T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   2 0 1   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   C r e a t e d   2 0 2   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   2 0 1   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   b o d y :   P r i o r i t y L e v e l C o n f i g u r a t i o n ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   2 0 1   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   2 0 1   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   O K   2 0 1   ( P r i o r i t y L e v e l C o n f i g u r a t i o n ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   P r i o r i t y L e v e l C o n f i g u r a t i o n   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / f l o w c o n t r o l . a p i s e r v e r . k 8 s . i o / v 1 / p r i o r i t y l e v e l c o n f i g u r a t i o n s


Question: What is Parameters?

Answer: b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   l a b e l S e l e c t o r   (


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Pod Security Policies?

Answer: Pod Security PoliciesRemoved featurePodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25.Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using either or both:Pod Security Admissiona 3rd party admission plugin, that you deploy and configure yourselfFor a migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller. For more information on the removal of this API, see PodSecurityPolicy Deprecation: Past, Present, and Future.If you are not running Kubernetes v1.34, check the documentation for your version of Kubernetes.


Question: How does Pod Security Policies work?

Answer: Pod Security PoliciesRemoved featurePodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25.Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using either or both:Pod Security Admissiona 3rd party admission plugin, that you deploy and configure yourselfFor a migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller. For more information on the removal of this API, see PodSecurityPolicy Deprecation: Past, Present, and Future.If you are not running Kubernetes v1.34, check the documentation for your version of Kubernetes.


Question: When would you use Pod Security Policies?

Answer: Pod Security PoliciesRemoved featurePodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25.Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using either or both:Pod Security Admissiona 3rd party admission plugin, that you deploy and configure yourselfFor a migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller. For more information on the removal of this API, see PodSecurityPolicy Deprecation: Past, Present, and Future.If you are not running Kubernetes v1.34, check the documentation for your version of Kubernetes.


Question: What are the benefits of Pod Security Policies?

Answer: Pod Security PoliciesRemoved featurePodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25.Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using either or both:Pod Security Admissiona 3rd party admission plugin, that you deploy and configure yourselfFor a migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller. For more information on the removal of this API, see PodSecurityPolicy Deprecation: Past, Present, and Future.If you are not running Kubernetes v1.34, check the documentation for your version of Kubernetes.


Question: What is Removed feature?

Answer: I n s t e a d   o f   u s i n g   P o d S e c u r i t y P o l i c y ,   y o u   c a n   e n f o r c e   s i m i l a r   r e s t r i c t i o n s   o n   P o d s   u s i n g   e i t h e r   o r   b o t h :   P o d   S e c u r i t y   A d m i s s i o n a   3 r d   p a r t y   a d m i s s i o n   p l u g i n ,   t h a t   y o u   d e p l o y   a n d   c o n f i g u r e   y o u r s e l f   F o r   a   m i g r a t i o n   g u i d e ,   s e e   M i g r a t e   f r o m   P o d S e c u r i t y P o l i c y   t o   t h e   B u i l t - I n   P o d S e c u r i t y   A d m i s s i o n   C o n t r o l l e r .   F o r   m o r e   i n f o r m a t i o n   o n   t h e   r e m o v a l   o f   t h i s   A P I ,   s e e   P o d S e c u r i t y P o l i c y   D e p r e c a t i o n :   P a s t ,   P r e s e n t ,   a n d   F u t u r e .   I f   y o u   a r e   n o t   r u n n i n g   K u b e r n e t e s   v 1 . 3 4 ,   c h e c k   t h e   d o c u m e n t a t i o n   f o r   y o u r   v e r s i o n   o f   K u b e r n e t e s .


Question: What is Kubernetes External Metrics (v1beta1)?

Answer: Kubernetes External Metrics (v1beta1)Package v1beta1 is the v1beta1 version of the external metrics API.Resource TypesExternalMetricValueExternalMetricValueListExternalMetricValueAppears in:ExternalMetricValueListExternalMetricValue is a metric value for external metric A single metric value is identified by metric name and a set of string labels. For one metric there can be multiple values with different sets of labels.FieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValuemetricName [Required]stringthe name of the metricmetricLabels [Required]map[string]stringa set of labels that identify a single time series for the metrictimestamp [Required]meta/v1.Timeindicates the time at which the metrics were producedwindow [Required]int64indicates the window ([Timestamp-Window, Timestamp]) from which these metrics were calculated, when returning rate metrics calculated from cumulative metrics (or zero for non-calculated instantaneous metrics).value [Required]k8s.io/apimachinery/pkg/api/resource.Quantitythe value of the metricExternalMetricValueListExternalMetricValueList is a list of values for a given metric for some set labelsFieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValueListmetadata [Required]meta/v1.ListMetaNo description provided.items [Required][]ExternalMetricValuevalue of the metric matching a given set of labelsThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: How does Kubernetes External Metrics (v1beta1) work?

Answer: Kubernetes External Metrics (v1beta1)Package v1beta1 is the v1beta1 version of the external metrics API.Resource TypesExternalMetricValueExternalMetricValueListExternalMetricValueAppears in:ExternalMetricValueListExternalMetricValue is a metric value for external metric A single metric value is identified by metric name and a set of string labels. For one metric there can be multiple values with different sets of labels.FieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValuemetricName [Required]stringthe name of the metricmetricLabels [Required]map[string]stringa set of labels that identify a single time series for the metrictimestamp [Required]meta/v1.Timeindicates the time at which the metrics were producedwindow [Required]int64indicates the window ([Timestamp-Window, Timestamp]) from which these metrics were calculated, when returning rate metrics calculated from cumulative metrics (or zero for non-calculated instantaneous metrics).value [Required]k8s.io/apimachinery/pkg/api/resource.Quantitythe value of the metricExternalMetricValueListExternalMetricValueList is a list of values for a given metric for some set labelsFieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValueListmetadata [Required]meta/v1.ListMetaNo description provided.items [Required][]ExternalMetricValuevalue of the metric matching a given set of labelsThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: When would you use Kubernetes External Metrics (v1beta1)?

Answer: Kubernetes External Metrics (v1beta1)Package v1beta1 is the v1beta1 version of the external metrics API.Resource TypesExternalMetricValueExternalMetricValueListExternalMetricValueAppears in:ExternalMetricValueListExternalMetricValue is a metric value for external metric A single metric value is identified by metric name and a set of string labels. For one metric there can be multiple values with different sets of labels.FieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValuemetricName [Required]stringthe name of the metricmetricLabels [Required]map[string]stringa set of labels that identify a single time series for the metrictimestamp [Required]meta/v1.Timeindicates the time at which the metrics were producedwindow [Required]int64indicates the window ([Timestamp-Window, Timestamp]) from which these metrics were calculated, when returning rate metrics calculated from cumulative metrics (or zero for non-calculated instantaneous metrics).value [Required]k8s.io/apimachinery/pkg/api/resource.Quantitythe value of the metricExternalMetricValueListExternalMetricValueList is a list of values for a given metric for some set labelsFieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValueListmetadata [Required]meta/v1.ListMetaNo description provided.items [Required][]ExternalMetricValuevalue of the metric matching a given set of labelsThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: What are the benefits of Kubernetes External Metrics (v1beta1)?

Answer: Kubernetes External Metrics (v1beta1)Package v1beta1 is the v1beta1 version of the external metrics API.Resource TypesExternalMetricValueExternalMetricValueListExternalMetricValueAppears in:ExternalMetricValueListExternalMetricValue is a metric value for external metric A single metric value is identified by metric name and a set of string labels. For one metric there can be multiple values with different sets of labels.FieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValuemetricName [Required]stringthe name of the metricmetricLabels [Required]map[string]stringa set of labels that identify a single time series for the metrictimestamp [Required]meta/v1.Timeindicates the time at which the metrics were producedwindow [Required]int64indicates the window ([Timestamp-Window, Timestamp]) from which these metrics were calculated, when returning rate metrics calculated from cumulative metrics (or zero for non-calculated instantaneous metrics).value [Required]k8s.io/apimachinery/pkg/api/resource.Quantitythe value of the metricExternalMetricValueListExternalMetricValueList is a list of values for a given metric for some set labelsFieldDescriptionapiVersionstringexternal.metrics.k8s.io/v1beta1kindstringExternalMetricValueListmetadata [Required]meta/v1.ListMetaNo description provided.items [Required][]ExternalMetricValuevalue of the metric matching a given set of labelsThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


Question: What is Kubernetes External Metrics (v1beta1)?

Answer: P a c k a g e   v 1 b e t a 1   i s   t h e   v 1 b e t a 1   v e r s i o n   o f   t h e   e x t e r n a l   m e t r i c s   A P I .


Question: What is Resource Types?

Answer: E x t e r n a l M e t r i c V a l u e E x t e r n a l M e t r i c V a l u e L i s t


Question: What is ExternalMetricValue?

Answer: A p p e a r s   i n :   E x t e r n a l M e t r i c V a l u e L i s t   E x t e r n a l M e t r i c V a l u e   i s   a   m e t r i c   v a l u e   f o r   e x t e r n a l   m e t r i c   A   s i n g l e   m e t r i c   v a l u e   i s   i d e n t i f i e d   b y   m e t r i c   n a m e   a n d   a   s e t   o f   s t r i n g   l a b e l s .   F o r   o n e   m e t r i c   t h e r e   c a n   b e   m u l t i p l e   v a l u e s   w i t h   d i f f e r e n t   s e t s   o f   l a b e l s .   t h e   n a m e   o f   t h e   m e t r i c   a   s e t   o f   l a b e l s   t h a t   i d e n t i f y   a   s i n g l e   t i m e   s e r i e s   f o r   t h e   m e t r i c   i n d i c a t e s   t h e   t i m e   a t   w h i c h   t h e   m e t r i c s   w e r e   p r o d u c e d   i n d i c a t e s   t h e   w i n d o w   ( [ T i m e s t a m p - W i n d o w ,   T i m e s t a m p ] )   f r o m   w h i c h   t h e s e   m e t r i c s   w e r e   c a l c u l a t e d ,   w h e n   r e t u r n i n g   r a t e   m e t r i c s   c a l c u l a t e d   f r o m   c u m u l a t i v e   m e t r i c s   ( o r   z e r o   f o r   n o n - c a l c u l a t e d   i n s t a n t a n e o u s   m e t r i c s ) .   t h e   v a l u e   o f   t h e   m e t r i c


Question: What is ExternalMetricValueList?

Answer: E x t e r n a l M e t r i c V a l u e L i s t   i s   a   l i s t   o f   v a l u e s   f o r   a   g i v e n   m e t r i c   f o r   s o m e   s e t   l a b e l s   v a l u e   o f   t h e   m e t r i c   m a t c h i n g   a   g i v e n   s e t   o f   l a b e l s   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequest?

Answer: Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequestKubernetes lets you use a public key infrastructure (PKI) to authenticate to your cluster as a client.A few steps are required in order to get a normal user to be able to authenticate and invoke an API. First, this user must have an X.509 certificate issued by an authority that your Kubernetes cluster trusts. The client must then present that certificate to the Kubernetes API.You use a CertificateSigningRequest as part of this process, and either you or some other principal must approve the request.You will create a private key, and then get a certificate issued, and finally configure that private key for a client.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the kubectl, openssl and base64 utilities.This page assumes you are using Kubernetes role based access control (RBAC). If you have alternative or additional security mechanisms around authorization, you need to account for those as well.Create private keyIn this step, you create a private key. You need to keep this document secret; anyone who has it can impersonate the user.# Create a private key openssl genrsa -out myuser.key 3072 Create an X.509 certificate signing requestNote:This is not the same as the similarly-named CertificateSigningRequest API; the file you generate here goes into the CertificateSigningRequest.It is important to set CN and O attribute of the CSR. CN is the name of the user and O is the group that this user will belong to. You can refer to RBAC for standard groups.# Change the common name "myuser" to the actual username that you want to use openssl req -new -key myuser.key -out myuser.csr -subj "/CN=myuser" Create a Kubernetes CertificateSigningRequestEncode the CSR document using this command:cat myuser.csr | base64 | tr -d "\n" Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kubectl. Below is a snippet of shell that you can use to generate the CertificateSigningRequest.cat <<EOF | kubectl apply -f - apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myuser # example spec: # This is an encoded CSR. Change this to the base64-encoded contents of myuser.csr request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ1ZqQ0NBVDRDQVFBd0VURVBNQTBHQTFVRUF3d0dZVzVuWld4aE1JSUJJakFOQmdrcWhraUc5dzBCQVFFRgpBQU9DQVE4QU1JSUJDZ0tDQVFFQTByczhJTHRHdTYxakx2dHhWTTJSVlRWMDNHWlJTWWw0dWluVWo4RElaWjBOCnR2MUZtRVFSd3VoaUZsOFEzcWl0Qm0wMUFSMkNJVXBGd2ZzSjZ4MXF3ckJzVkhZbGlBNVhwRVpZM3ExcGswSDQKM3Z3aGJlK1o2MVNrVHF5SVBYUUwrTWM5T1Nsbm0xb0R2N0NtSkZNMUlMRVI3QTVGZnZKO


Question: How does Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequest work?

Answer: Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequestKubernetes lets you use a public key infrastructure (PKI) to authenticate to your cluster as a client.A few steps are required in order to get a normal user to be able to authenticate and invoke an API. First, this user must have an X.509 certificate issued by an authority that your Kubernetes cluster trusts. The client must then present that certificate to the Kubernetes API.You use a CertificateSigningRequest as part of this process, and either you or some other principal must approve the request.You will create a private key, and then get a certificate issued, and finally configure that private key for a client.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the kubectl, openssl and base64 utilities.This page assumes you are using Kubernetes role based access control (RBAC). If you have alternative or additional security mechanisms around authorization, you need to account for those as well.Create private keyIn this step, you create a private key. You need to keep this document secret; anyone who has it can impersonate the user.# Create a private key openssl genrsa -out myuser.key 3072 Create an X.509 certificate signing requestNote:This is not the same as the similarly-named CertificateSigningRequest API; the file you generate here goes into the CertificateSigningRequest.It is important to set CN and O attribute of the CSR. CN is the name of the user and O is the group that this user will belong to. You can refer to RBAC for standard groups.# Change the common name "myuser" to the actual username that you want to use openssl req -new -key myuser.key -out myuser.csr -subj "/CN=myuser" Create a Kubernetes CertificateSigningRequestEncode the CSR document using this command:cat myuser.csr | base64 | tr -d "\n" Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kubectl. Below is a snippet of shell that you can use to generate the CertificateSigningRequest.cat <<EOF | kubectl apply -f - apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myuser # example spec: # This is an encoded CSR. Change this to the base64-encoded contents of myuser.csr request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ1ZqQ0NBVDRDQVFBd0VURVBNQTBHQTFVRUF3d0dZVzVuWld4aE1JSUJJakFOQmdrcWhraUc5dzBCQVFFRgpBQU9DQVE4QU1JSUJDZ0tDQVFFQTByczhJTHRHdTYxakx2dHhWTTJSVlRWMDNHWlJTWWw0dWluVWo4RElaWjBOCnR2MUZtRVFSd3VoaUZsOFEzcWl0Qm0wMUFSMkNJVXBGd2ZzSjZ4MXF3ckJzVkhZbGlBNVhwRVpZM3ExcGswSDQKM3Z3aGJlK1o2MVNrVHF5SVBYUUwrTWM5T1Nsbm0xb0R2N0NtSkZNMUlMRVI3QTVGZnZKO


Question: When would you use Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequest?

Answer: Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequestKubernetes lets you use a public key infrastructure (PKI) to authenticate to your cluster as a client.A few steps are required in order to get a normal user to be able to authenticate and invoke an API. First, this user must have an X.509 certificate issued by an authority that your Kubernetes cluster trusts. The client must then present that certificate to the Kubernetes API.You use a CertificateSigningRequest as part of this process, and either you or some other principal must approve the request.You will create a private key, and then get a certificate issued, and finally configure that private key for a client.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the kubectl, openssl and base64 utilities.This page assumes you are using Kubernetes role based access control (RBAC). If you have alternative or additional security mechanisms around authorization, you need to account for those as well.Create private keyIn this step, you create a private key. You need to keep this document secret; anyone who has it can impersonate the user.# Create a private key openssl genrsa -out myuser.key 3072 Create an X.509 certificate signing requestNote:This is not the same as the similarly-named CertificateSigningRequest API; the file you generate here goes into the CertificateSigningRequest.It is important to set CN and O attribute of the CSR. CN is the name of the user and O is the group that this user will belong to. You can refer to RBAC for standard groups.# Change the common name "myuser" to the actual username that you want to use openssl req -new -key myuser.key -out myuser.csr -subj "/CN=myuser" Create a Kubernetes CertificateSigningRequestEncode the CSR document using this command:cat myuser.csr | base64 | tr -d "\n" Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kubectl. Below is a snippet of shell that you can use to generate the CertificateSigningRequest.cat <<EOF | kubectl apply -f - apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myuser # example spec: # This is an encoded CSR. Change this to the base64-encoded contents of myuser.csr request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ1ZqQ0NBVDRDQVFBd0VURVBNQTBHQTFVRUF3d0dZVzVuWld4aE1JSUJJakFOQmdrcWhraUc5dzBCQVFFRgpBQU9DQVE4QU1JSUJDZ0tDQVFFQTByczhJTHRHdTYxakx2dHhWTTJSVlRWMDNHWlJTWWw0dWluVWo4RElaWjBOCnR2MUZtRVFSd3VoaUZsOFEzcWl0Qm0wMUFSMkNJVXBGd2ZzSjZ4MXF3ckJzVkhZbGlBNVhwRVpZM3ExcGswSDQKM3Z3aGJlK1o2MVNrVHF5SVBYUUwrTWM5T1Nsbm0xb0R2N0NtSkZNMUlMRVI3QTVGZnZKO


Question: What are the benefits of Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequest?

Answer: Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequestKubernetes lets you use a public key infrastructure (PKI) to authenticate to your cluster as a client.A few steps are required in order to get a normal user to be able to authenticate and invoke an API. First, this user must have an X.509 certificate issued by an authority that your Kubernetes cluster trusts. The client must then present that certificate to the Kubernetes API.You use a CertificateSigningRequest as part of this process, and either you or some other principal must approve the request.You will create a private key, and then get a certificate issued, and finally configure that private key for a client.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the kubectl, openssl and base64 utilities.This page assumes you are using Kubernetes role based access control (RBAC). If you have alternative or additional security mechanisms around authorization, you need to account for those as well.Create private keyIn this step, you create a private key. You need to keep this document secret; anyone who has it can impersonate the user.# Create a private key openssl genrsa -out myuser.key 3072 Create an X.509 certificate signing requestNote:This is not the same as the similarly-named CertificateSigningRequest API; the file you generate here goes into the CertificateSigningRequest.It is important to set CN and O attribute of the CSR. CN is the name of the user and O is the group that this user will belong to. You can refer to RBAC for standard groups.# Change the common name "myuser" to the actual username that you want to use openssl req -new -key myuser.key -out myuser.csr -subj "/CN=myuser" Create a Kubernetes CertificateSigningRequestEncode the CSR document using this command:cat myuser.csr | base64 | tr -d "\n" Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kubectl. Below is a snippet of shell that you can use to generate the CertificateSigningRequest.cat <<EOF | kubectl apply -f - apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: name: myuser # example spec: # This is an encoded CSR. Change this to the base64-encoded contents of myuser.csr request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ1ZqQ0NBVDRDQVFBd0VURVBNQTBHQTFVRUF3d0dZVzVuWld4aE1JSUJJakFOQmdrcWhraUc5dzBCQVFFRgpBQU9DQVE4QU1JSUJDZ0tDQVFFQTByczhJTHRHdTYxakx2dHhWTTJSVlRWMDNHWlJTWWw0dWluVWo4RElaWjBOCnR2MUZtRVFSd3VoaUZsOFEzcWl0Qm0wMUFSMkNJVXBGd2ZzSjZ4MXF3ckJzVkhZbGlBNVhwRVpZM3ExcGswSDQKM3Z3aGJlK1o2MVNrVHF5SVBYUUwrTWM5T1Nsbm0xb0R2N0NtSkZNMUlMRVI3QTVGZnZKO


Question: What is Issue a Certificate for a Kubernetes API Client Using A CertificateSigningRequest?

Answer: K u b e r n e t e s   l e t s   y o u   u s e   a   p u b l i c   k e y   i n f r a s t r u c t u r e   ( P K I )   t o   a u t h e n t i c a t e   t o   y o u r   c l u s t e r   a s   a   c l i e n t .   A   f e w   s t e p s   a r e   r e q u i r e d   i n   o r d e r   t o   g e t   a   n o r m a l   u s e r   t o   b e   a b l e   t o   a u t h e n t i c a t e   a n d   i n v o k e   a n   A P I .   F i r s t ,   t h i s   u s e r   m u s t   h a v e   a n   X . 5 0 9   c e r t i f i c a t e   i s s u e d   b y   a n   a u t h o r i t y   t h a t   y o u r   K u b e r n e t e s   c l u s t e r   t r u s t s .   T h e   c l i e n t   m u s t   t h e n   p r e s e n t   t h a t   c e r t i f i c a t e   t o   t h e   K u b e r n e t e s   A P I .   Y o u   u s e   a   C e r t i f i c a t e S i g n i n g R e q u e s t   a s   p a r t   o f   t h i s   p r o c e s s ,   a n d   e i t h e r   y o u   o r   s o m e   o t h e r   p r i n c i p a l   m u s t   a p p r o v e   t h e   r e q u e s t .   Y o u   w i l l   c r e a t e   a   p r i v a t e   k e y ,   a n d   t h e n   g e t   a   c e r t i f i c a t e   i s s u e d ,   a n d   f i n a l l y   c o n f i g u r e   t h a t   p r i v a t e   k e y   f o r   a   c l i e n t .


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s : i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s Y o u   n e e d   t h e   k u b e c t l ,   o p e n s s l   a n d   b a s e 6 4   u t i l i t i e s .   Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s :   i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s   Y o u   n e e d   t h e   k u b e c t l ,   o p e n s s l   a n d   b a s e 6 4   u t i l i t i e s .   T h i s   p a g e   a s s u m e s   y o u   a r e   u s i n g   K u b e r n e t e s   r o l e


Question: What is Create private key?

Answer: I n   t h i s   s t e p ,   y o u   c r e a t e   a   p r i v a t e   k e y .   Y o u   n e e d   t o   k e e p   t h i s   d o c u m e n t   s e c r e t ;   a n y o n e   w h o   h a s   i t   c a n   i m p e r s o n a t e   t h e   u s e r .   #   C r e a t e   a   p r i v a t e   k e y   o p e n s s l   g e n r s a   - o u t   m y u s e r . k e y   3 0 7 2


Question: What is Note:?

Answer: I t   i s   i m p o r t a n t   t o   s e t   C N   a n d   O   a t t r i b u t e   o f   t h e   C S R .   C N   i s   t h e   n a m e   o f   t h e   u s e r   a n d   O   i s   t h e   g r o u p   t h a t   t h i s   u s e r   w i l l   b e l o n g   t o .   Y o u   c a n   r e f e r   t o   R B A C   f o r   s t a n d a r d   g r o u p s .   #   C h a n g e   t h e   c o m m o n   n a m e   " m y u s e r "   t o   t h e   a c t u a l   u s e r n a m e   t h a t   y o u   w a n t   t o   u s e   o p e n s s l   r e q   - n e w   - k e y   m y u s e r . k e y   - o u t   m y u s e r . c s r   - s u b j   " / C N = m y u s e r "


Question: What is Create a Kubernetes CertificateSigningRequest?

Answer: E n c o d e   t h e   C S R   d o c u m e n t   u s i n g   t h i s   c o m m a n d :   c a t   m y u s e r . c s r   |   b a s e 6 4   |   t r   - d   " \ n "   C r e a t e   a   C e r t i f i c a t e S i g n i n g R e q u e s t   a n d   s u b m i t   i t   t o   a   K u b e r n e t e s   C l u s t e r   v i a   k u b e c t l .   B e l o w   i s   a   s n i p p e t   o f   s h e l l   t h a t   y o u   c a n   u s e   t o   g e n e r a t e   t h e   C e r t i f i c a t e S i g n i n g R e q u e s t .   c a t   < < E O F   |   k u b e c t l   a p p l y   - f   -   a p i V e r s i o n :   c e r t i f i c a t e s . k 8 s . i o / v 1   k i n d :   C e r t i f i c a t e S i g n i n g R e q u e s t   m e t a d a t a :   n a m e :   m y u s e r   #   e x a m p l e   s p e c :   #   T h i s   i s   a n   e n c o d e d   C S R .   C h a n g e   t h i s   t o   t h e   b a s e 6 4 - e n c o d e d   c o n t e n t s   o f   m y u s e r . c s r   r e q u e s t :   L S 0 t L S 1 C R U d J T i B D R V J U S U Z J Q 0 F U R S B S R V F V R V N U L S 0 t L S 0 K T U l J Q 1 Z q Q 0 N B V D R D Q V F B d 0 V U R V B N Q T B H Q T F V R U F 3 d 0 d Z V z V u W l d 4 a E 1 J S U J J a k F O Q m d r c W h r a U c 5 d z B C Q V F F R g p B Q U 9 D Q V E 4 Q U 1 J S U J D Z 0 t D Q V F F Q T B y c z h J T H R H d T Y x a k x 2 d H h W T T J S V l R W M D N H W l J T W W w 0 d W l u V W o 4 R E l a W j B O C n R 2 M U Z t R V F S d 3 V o a U Z s O F E z c W l 0 Q m 0 w M U F S M k N J V X B G d 2 Z z S j Z 4 M X F 3 c k J z V k h Z b G l B N V h w R V p Z M 3 E x c G s w S D Q K M 3 Z 3 a G J l K 1 o 2 M V N r V H F 5 S V B Y U U w r T W M 5 T 1 N s b m 0 x b 0 R 2 N 0 N t S k Z N M U l M R V I 3 Q T V G Z n Z K O E d F R j J 6 d H B o a U l F M w p u b 1 d t d H N Z b 3 J u T 2 w z c 2 l H Q 2 Z G Z z R 4 Z m d 4 e W 8 y b m l n e F N V e k l 1 b X N n V m 9 P M 2 t t T 0 x 1 R V F 6 c X p k a k J 3 T F J X b W l E C k l m M X B M W n o y a l V n a l d 4 U k h C M 1 g y W n V V V 1 d 1


Question: What is Approve the CertificateSigningRequest?

Answer: U s e   k u b e c t l   t o   f i n d   t h e   C S R   y o u   m a d e ,   a n d   m a n u a l l y   a p p r o v e   i t .   G e t   t h e   l i s t   o f   C S R s :   k u b e c t l   g e t   c s r   A p p r o v e   t h e   C S R :   k u b e c t l   c e r t i f i c a t e   a p p r o v e   m y u s e r


Question: What is Get the certificate?

Answer: R e t r i e v e   t h e   c e r t i f i c a t e   f r o m   t h e   C S R ,   t o   c h e c k   i t   l o o k s   O K .   k u b e c t l   g e t   c s r / m y u s e r   - o   y a m l   T h e   c e r t i f i c a t e   v a l u e   i s   i n   B a s e 6 4 - e n c o d e d   f o r m a t   u n d e r   . s t a t u s . c e r t i f i c a t e .   E x p o r t   t h e   i s s u e d   c e r t i f i c a t e   f r o m   t h e   C e r t i f i c a t e S i g n i n g R e q u e s t .   k u b e c t l   g e t   c s r   m y u s e r   - o   j s o n p a t h = ' { . s t a t u s . c e r t i f i c a t e } ' |   b a s e 6 4   - d   >   m y u s e r . c r t


Question: What is Configure the certificate into kubeconfig?

Answer: T h e   n e x t   s t e p   i s   t o   a d d   t h i s   u s e r   i n t o   t h e   k u b e c o n f i g   f i l e .   F i r s t ,   y o u   n e e d   t o   a d d   n e w   c r e d e n t i a l s :   k u b e c t l   c o n f i g   s e t - c r e d e n t i a l s   m y u s e r   - - c l i e n t - k e y = m y u s e r . k e y   - - c l i e n t - c e r t i f i c a t e = m y u s e r . c r t   - - e m b e d - c e r t s = t r u e   T h e n ,   y o u   n e e d   t o   a d d   t h e   c o n t e x t :   k u b e c t l   c o n f i g   s e t - c o n t e x t   m y u s e r   - - c l u s t e r = k u b e r n e t e s   - - u s e r = m y u s e r   T o   t e s t   i t :   k u b e c t l   - - c o n t e x t   m y u s e r   a u t h   w h o a m i   Y o u   s h o u l d   s e e   o u t p u t   c o n f i r m i n g   t h a t   y o u   a r e   “ m y u s e r “ .


Question: What is Note:?

Answer: W i t h   t h e   c e r t i f i c a t e   c r e a t e d   i t   i s   t i m e   t o   d e f i n e   t h e   R o l e   a n d   R o l e B i n d i n g   f o r   t h i s   u s e r   t o   a c c e s s   K u b e r n e t e s   c l u s t e r   r e s o u r c e s .   T h i s   i s   a   s a m p l e   c o m m a n d   t o   c r e a t e   a   R o l e   f o r   t h i s   n e w   u s e r :   k u b e c t l   c r e a t e   r o l e   d e v e l o p e r   - - v e r b = c r e a t e   - - v e r b = g e t   - - v e r b = l i s t   - - v e r b = u p d a t e   - - v e r b = d e l e t e   - - r e s o u r c e = p o d s   T h i s   i s   a   s a m p l e   c o m m a n d   t o   c r e a t e   a   R o l e B i n d i n g   f o r   t h i s   n e w   u s e r :   k u b e c t l   c r e a t e   r o l e b i n d i n g   d e v e l o p e r - b i n d i n g - m y u s e r   - - r o l e = d e v e l o p e r   - - u s e r = m y u s e r


Question: What is What's next?

Answer: R e a d   M a n a g e   T L S   C e r t i f i c a t e s   i n   a   C l u s t e r F o r   d e t a i l s   o f   X . 5 0 9   i t s e l f ,   r e f e r   t o   R F C   5 2 8 0   s e c t i o n   3 . 1 F o r   i n f o r m a t i o n   o n   t h e   s y n t a x   o f   P K C S # 1 0   c e r t i f i c a t e   s i g n i n g   r e q u e s t s ,   r e f e r   t o   R F C   2 9 8 6 R e a d   a b o u t   C l u s t e r T r u s t B u n d l e s