Question: When would you use Mapping PodSecurityPolicies to Pod Security Standards?

Answer: Mapping PodSecurityPolicies to Pod Security StandardsThe tables below enumerate the configuration parameters on PodSecurityPolicy objects, whether the field mutates and/or validates pods, and how the configuration values map to the Pod Security Standards.For each applicable parameter, the allowed values for the Baseline and Restricted profiles are listed. Anything outside the allowed values for those profiles would fall under the Privileged profile. "No opinion" means all values are allowed under all Pod Security Standards.For a step-by-step migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller.PodSecurityPolicy SpecThe fields enumerated in this table are part of the PodSecurityPolicySpec, which is specified under the .spec field path.Mapping PodSecurityPolicySpec fields to Pod Security StandardsPodSecurityPolicySpecTypePod Security Standards EquivalentprivilegedValidatingBaseline & Restricted: false / undefined / nildefaultAddCapabilitiesMutating & ValidatingRequirements match allowedCapabilities below.allowedCapabilitiesValidatingBaseline: subset ofAUDIT_WRITECHOWNDAC_OVERRIDEFOWNERFSETIDKILLMKNODNET_BIND_SERVICESETFCAPSETGIDSETPCAPSETUIDSYS_CHROOTRestricted: empty / undefined / nil OR a list containing only NET_BIND_SERVICErequiredDropCapabilitiesMutating & ValidatingBaseline: no opinionRestricted: must include ALLvolumesValidatingBaseline: anything excepthostPath*Restricted: subset ofconfigMapcsidownwardAPIemptyDirephemeralpersistentVolumeClaimprojectedsecrethostNetworkValidatingBaseline & Restricted: false / undefined / nilhostPortsValidatingBaseline & Restricted: undefined / nil / emptyhostPIDValidatingBaseline & Restricted: false / undefined / nilhostIPCValidatingBaseline & Restricted: false / undefined / nilseLinuxMutating & ValidatingBaseline & Restricted: seLinux.rule is MustRunAs, with the following optionsuser is unset ("" / undefined / nil)role is unset ("" / undefined / nil)type is unset or one of: container_t, container_init_t, container_kvm_t, container_engine_tlevel is anythingrunAsUserMutating & ValidatingBaseline: AnythingRestricted: rule is MustRunAsNonRootrunAsGroupMutating (MustRunAs) & ValidatingNo opinionsupplementalGroupsMutating & ValidatingNo opinionfsGroupMutating & ValidatingNo opinionreadOnlyRootFilesystemMutating & ValidatingNo opiniondefaultAllowPrivilegeEscalationMutatingNo opinion (non-validating)allowPrivilegeEscalationMutating & ValidatingOnly mutating if set to falseBaseline: No opinionRestricted: falseallowedHostPathsValidatingNo opinion (volumes takes precedence)allowedFlexVolumesValidatingNo opinion (volumes takes precedence)allowedCSIDriversValidatingNo opinion (volumes takes precedence)allowedUnsafeSysctlsValidatingBaseline & Restricted: undefined / nil / emptyforbiddenSysctlsValidatingNo opinionallowedProcMountTypes(alpha feature)ValidatingBaseline & Restricted: ["Default"] OR undefined / nil / emptyruntimeClass .defaultRuntimeClassNameMutatingNo opinionrunt


Question: What are the benefits of Mapping PodSecurityPolicies to Pod Security Standards?

Answer: Mapping PodSecurityPolicies to Pod Security StandardsThe tables below enumerate the configuration parameters on PodSecurityPolicy objects, whether the field mutates and/or validates pods, and how the configuration values map to the Pod Security Standards.For each applicable parameter, the allowed values for the Baseline and Restricted profiles are listed. Anything outside the allowed values for those profiles would fall under the Privileged profile. "No opinion" means all values are allowed under all Pod Security Standards.For a step-by-step migration guide, see Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller.PodSecurityPolicy SpecThe fields enumerated in this table are part of the PodSecurityPolicySpec, which is specified under the .spec field path.Mapping PodSecurityPolicySpec fields to Pod Security StandardsPodSecurityPolicySpecTypePod Security Standards EquivalentprivilegedValidatingBaseline & Restricted: false / undefined / nildefaultAddCapabilitiesMutating & ValidatingRequirements match allowedCapabilities below.allowedCapabilitiesValidatingBaseline: subset ofAUDIT_WRITECHOWNDAC_OVERRIDEFOWNERFSETIDKILLMKNODNET_BIND_SERVICESETFCAPSETGIDSETPCAPSETUIDSYS_CHROOTRestricted: empty / undefined / nil OR a list containing only NET_BIND_SERVICErequiredDropCapabilitiesMutating & ValidatingBaseline: no opinionRestricted: must include ALLvolumesValidatingBaseline: anything excepthostPath*Restricted: subset ofconfigMapcsidownwardAPIemptyDirephemeralpersistentVolumeClaimprojectedsecrethostNetworkValidatingBaseline & Restricted: false / undefined / nilhostPortsValidatingBaseline & Restricted: undefined / nil / emptyhostPIDValidatingBaseline & Restricted: false / undefined / nilhostIPCValidatingBaseline & Restricted: false / undefined / nilseLinuxMutating & ValidatingBaseline & Restricted: seLinux.rule is MustRunAs, with the following optionsuser is unset ("" / undefined / nil)role is unset ("" / undefined / nil)type is unset or one of: container_t, container_init_t, container_kvm_t, container_engine_tlevel is anythingrunAsUserMutating & ValidatingBaseline: AnythingRestricted: rule is MustRunAsNonRootrunAsGroupMutating (MustRunAs) & ValidatingNo opinionsupplementalGroupsMutating & ValidatingNo opinionfsGroupMutating & ValidatingNo opinionreadOnlyRootFilesystemMutating & ValidatingNo opiniondefaultAllowPrivilegeEscalationMutatingNo opinion (non-validating)allowPrivilegeEscalationMutating & ValidatingOnly mutating if set to falseBaseline: No opinionRestricted: falseallowedHostPathsValidatingNo opinion (volumes takes precedence)allowedFlexVolumesValidatingNo opinion (volumes takes precedence)allowedCSIDriversValidatingNo opinion (volumes takes precedence)allowedUnsafeSysctlsValidatingBaseline & Restricted: undefined / nil / emptyforbiddenSysctlsValidatingNo opinionallowedProcMountTypes(alpha feature)ValidatingBaseline & Restricted: ["Default"] OR undefined / nil / emptyruntimeClass .defaultRuntimeClassNameMutatingNo opinionrunt


Question: What is Mapping PodSecurityPolicies to Pod Security Standards?

Answer: T h e   t a b l e s   b e l o w   e n u m e r a t e   t h e   c o n f i g u r a t i o n   p a r a m e t e r s   o n   P o d S e c u r i t y P o l i c y   o b j e c t s ,   w h e t h e r   t h e   f i e l d   m u t a t e s   a n d / o r   v a l i d a t e s   p o d s ,   a n d   h o w   t h e   c o n f i g u r a t i o n   v a l u e s   m a p   t o   t h e   P o d   S e c u r i t y   S t a n d a r d s .   F o r   e a c h   a p p l i c a b l e   p a r a m e t e r ,   t h e   a l l o w e d   v a l u e s   f o r   t h e   B a s e l i n e   a n d   R e s t r i c t e d   p r o f i l e s   a r e   l i s t e d .   A n y t h i n g   o u t s i d e   t h e   a l l o w e d   v a l u e s   f o r   t h o s e   p r o f i l e s   w o u l d   f a l l   u n d e r   t h e   P r i v i l e g e d   p r o f i l e .   " N o   o p i n i o n "   m e a n s   a l l   v a l u e s   a r e   a l l o w e d   u n d e r   a l l   P o d   S e c u r i t y   S t a n d a r d s .   F o r   a   s t e p - b y - s t e p   m i g r a t i o n   g u i d e ,   s e e   M i g r a t e   f r o m   P o d S e c u r i t y P o l i c y   t o   t h e   B u i l t - I n   P o d S e c u r i t y   A d m i s s i o n   C o n t r o l l e r .


Question: What is PodSecurityPolicy Spec?

Answer: T h e   f i e l d s   e n u m e r a t e d   i n   t h i s   t a b l e   a r e   p a r t   o f   t h e   P o d S e c u r i t y P o l i c y S p e c ,   w h i c h   i s   s p e c i f i e d   u n d e r   t h e   . s p e c   f i e l d   p a t h .   B a s e l i n e :   s u b s e t   o f   A U D I T _ W R I T E C H O W N D A C _ O V E R R I D E F O W N E R F S E T I D K I L L M K N O D N E T _ B I N D _ S E R V I C E S E T F C A P S E T G I D S E T P C A P S E T U I D S Y S _ C H R O O T   R e s t r i c t e d :   e m p t y   /   u n d e f i n e d   /   n i l   O R   a   l i s t   c o n t a i n i n g   o n l y   N E T _ B I N D _ S E R V I C E   B a s e l i n e :   n o   o p i n i o n   R e s t r i c t e d :   m u s t   i n c l u d e   A L L   B a s e l i n e :   a n y t h i n g   e x c e p t   h o s t P a t h *   R e s t r i c t e d :   s u b s e t   o f   c o n f i g M a p c s i d o w n w a r d A P I e m p t y D i r e p h e m e r a l p e r s i s t e n t V o l u m e C l a i m p r o j e c t e d s e c r e t   B a s e l i n e   &   R e s t r i c t e d :   s e L i n u x . r u l e   i s   M u s t R u n A s ,   w i t h   t h e   f o l l o w i n g   o p t i o n s   u s e r   i s   u n s e t   ( " "   /   u n d e f i n e d   /   n i l ) r o l e   i s   u n s e t   ( " "   /   u n d e f i n e d   /   n i l ) t y p e   i s   u n s e t   o r   o n e   o f :   c o n t a i n e r _ t ,   c o n t a i n e r _ i n i t _ t ,   c o n t a i n e r _ k v m _ t ,   c o n t a i n e r _ e n g i n e _ t l e v e l   i s   a n y t h i n g   B a s e l i n e :   A n y t h i n g   R e s t r i c t e d :   r u l e   i s   M u s t R u n A s N o n R o o t   O n l y   m u t a t i n g   i f   s e t   t o   f a l s e   B a s e l i n e :   N o   o p i n i o n   R e s t r i c t e d :   f a l s e


Question: What is PodSecurityPolicy annotations?

Answer: T h e   a n n o t a t i o n s   e n u m e r a t e d   i n   t h i s   t a b l e   c a n   b e   s p e c i f i e d   u n d e r   . m e t a d a t a . a n n o t a t i o n s   o n   t h e   P o d S e c u r i t y P o l i c y   o b j e c t .   B a s e l i n e :   " r u n t i m e / d e f a u l t , "   ( T r a i l i n g   c o m m a   t o   a l l o w   u n s e t )   R e s t r i c t e d :   " r u n t i m e / d e f a u l t "   ( N o   t r a i l i n g   c o m m a )   l o c a l h o s t / *   v a l u e s   a r e   a l s o   p e r m i t t e d   f o r   b o t h   B a s e l i n e   &   R e s t r i c t e d .   B a s e l i n e :   " r u n t i m e / d e f a u l t , "   ( T r a i l i n g   c o m m a   t o   a l l o w   u n s e t )   R e s t r i c t e d :   " r u n t i m e / d e f a u l t "   ( N o   t r a i l i n g   c o m m a )   l o c a l h o s t / *   v a l u e s   a r e   a l s o   p e r m i t t e d   f o r   b o t h   B a s e l i n e   &   R e s t r i c t e d .


Question: What is API Access Control?

Answer: API Access ControlFor an introduction to how Kubernetes implements and controls API access, read Controlling Access to the Kubernetes API.Reference documentation:AuthenticatingAuthenticating with Bootstrap TokensAdmission ControllersDynamic Admission ControlAuthorizationRole Based Access ControlAttribute Based Access ControlNode AuthorizationWebhook AuthorizationCertificate Signing Requestsincluding CSR approval and certificate signingService accountsDeveloper guideAdministrationKubelet Authentication & Authorizationincluding kubelet TLS bootstrapping


Question: How does API Access Control work?

Answer: API Access ControlFor an introduction to how Kubernetes implements and controls API access, read Controlling Access to the Kubernetes API.Reference documentation:AuthenticatingAuthenticating with Bootstrap TokensAdmission ControllersDynamic Admission ControlAuthorizationRole Based Access ControlAttribute Based Access ControlNode AuthorizationWebhook AuthorizationCertificate Signing Requestsincluding CSR approval and certificate signingService accountsDeveloper guideAdministrationKubelet Authentication & Authorizationincluding kubelet TLS bootstrapping


Question: When would you use API Access Control?

Answer: API Access ControlFor an introduction to how Kubernetes implements and controls API access, read Controlling Access to the Kubernetes API.Reference documentation:AuthenticatingAuthenticating with Bootstrap TokensAdmission ControllersDynamic Admission ControlAuthorizationRole Based Access ControlAttribute Based Access ControlNode AuthorizationWebhook AuthorizationCertificate Signing Requestsincluding CSR approval and certificate signingService accountsDeveloper guideAdministrationKubelet Authentication & Authorizationincluding kubelet TLS bootstrapping


Question: What are the benefits of API Access Control?

Answer: API Access ControlFor an introduction to how Kubernetes implements and controls API access, read Controlling Access to the Kubernetes API.Reference documentation:AuthenticatingAuthenticating with Bootstrap TokensAdmission ControllersDynamic Admission ControlAuthorizationRole Based Access ControlAttribute Based Access ControlNode AuthorizationWebhook AuthorizationCertificate Signing Requestsincluding CSR approval and certificate signingService accountsDeveloper guideAdministrationKubelet Authentication & Authorizationincluding kubelet TLS bootstrapping


Question: What is API Access Control?

Answer: F o r   a n   i n t r o d u c t i o n   t o   h o w   K u b e r n e t e s   i m p l e m e n t s   a n d   c o n t r o l s   A P I   a c c e s s ,   r e a d   C o n t r o l l i n g   A c c e s s   t o   t h e   K u b e r n e t e s   A P I .   R e f e r e n c e   d o c u m e n t a t i o n :   A u t h e n t i c a t i n g A u t h e n t i c a t i n g   w i t h   B o o t s t r a p   T o k e n s A d m i s s i o n   C o n t r o l l e r s D y n a m i c   A d m i s s i o n   C o n t r o l A u t h o r i z a t i o n R o l e   B a s e d   A c c e s s   C o n t r o l A t t r i b u t e   B a s e d   A c c e s s   C o n t r o l N o d e   A u t h o r i z a t i o n W e b h o o k   A u t h o r i z a t i o n C e r t i f i c a t e   S i g n i n g   R e q u e s t s i n c l u d i n g   C S R   a p p r o v a l   a n d   c e r t i f i c a t e   s i g n i n g S e r v i c e   a c c o u n t s D e v e l o p e r   g u i d e A d m i n i s t r a t i o n K u b e l e t   A u t h e n t i c a t i o n   &   A u t h o r i z a t i o n i n c l u d i n g   k u b e l e t   T L S   b o o t s t r a p p i n g   A u t h e n t i c a t i n g   w i t h   B o o t s t r a p   T o k e n s   D y n a m i c   A d m i s s i o n   C o n t r o l   R o l e   B a s e d   A c c e s s   C o n t r o l A t t r i b u t e   B a s e d   A c c e s s   C o n t r o l N o d e   A u t h o r i z a t i o n W e b h o o k   A u t h o r i z a t i o n   i n c l u d i n g   C S R   a p p r o v a l   a n d   c e r t i f i c a t e   s i g n i n g   D e v e l o p e r   g u i d e A d m i n i s t r a t i o n   i n c l u d i n g   k u b e l e t   T L S   b o o t s t r a p p i n g


Question: What is APIService?

Answer: APIServiceAPIService represents a server for a particular GroupVersion.apiVersion: apiregistration.k8s.io/v1import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"APIServiceAPIService represents a server for a particular GroupVersion. Name must be "version.group".apiVersion: apiregistration.k8s.io/v1kind: APIServicemetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (APIServiceSpec)Spec contains information for locating and communicating with a serverstatus (APIServiceStatus)Status contains derived information about an API serverAPIServiceSpecAPIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.groupPriorityMinimum (int32), requiredGroupPriorityMinimum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMinimum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000sversionPriority (int32), requiredVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.caBundle ([]byte)Atomic: will be replaced during a mergeCABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.group (string)Group is the API group name this server hostsinsecureSkipTLSVerify (boolean)InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.service (ServiceReference)Service is a r


Question: How does APIService work?

Answer: APIServiceAPIService represents a server for a particular GroupVersion.apiVersion: apiregistration.k8s.io/v1import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"APIServiceAPIService represents a server for a particular GroupVersion. Name must be "version.group".apiVersion: apiregistration.k8s.io/v1kind: APIServicemetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (APIServiceSpec)Spec contains information for locating and communicating with a serverstatus (APIServiceStatus)Status contains derived information about an API serverAPIServiceSpecAPIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.groupPriorityMinimum (int32), requiredGroupPriorityMinimum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMinimum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000sversionPriority (int32), requiredVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.caBundle ([]byte)Atomic: will be replaced during a mergeCABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.group (string)Group is the API group name this server hostsinsecureSkipTLSVerify (boolean)InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.service (ServiceReference)Service is a r


Question: When would you use APIService?

Answer: APIServiceAPIService represents a server for a particular GroupVersion.apiVersion: apiregistration.k8s.io/v1import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"APIServiceAPIService represents a server for a particular GroupVersion. Name must be "version.group".apiVersion: apiregistration.k8s.io/v1kind: APIServicemetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (APIServiceSpec)Spec contains information for locating and communicating with a serverstatus (APIServiceStatus)Status contains derived information about an API serverAPIServiceSpecAPIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.groupPriorityMinimum (int32), requiredGroupPriorityMinimum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMinimum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000sversionPriority (int32), requiredVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.caBundle ([]byte)Atomic: will be replaced during a mergeCABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.group (string)Group is the API group name this server hostsinsecureSkipTLSVerify (boolean)InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.service (ServiceReference)Service is a r


Question: What are the benefits of APIService?

Answer: APIServiceAPIService represents a server for a particular GroupVersion.apiVersion: apiregistration.k8s.io/v1import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"APIServiceAPIService represents a server for a particular GroupVersion. Name must be "version.group".apiVersion: apiregistration.k8s.io/v1kind: APIServicemetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (APIServiceSpec)Spec contains information for locating and communicating with a serverstatus (APIServiceStatus)Status contains derived information about an API serverAPIServiceSpecAPIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.groupPriorityMinimum (int32), requiredGroupPriorityMinimum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMinimum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000sversionPriority (int32), requiredVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.caBundle ([]byte)Atomic: will be replaced during a mergeCABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.group (string)Group is the API group name this server hostsinsecureSkipTLSVerify (boolean)InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.service (ServiceReference)Service is a r


Question: What is APIService?

Answer: a p i V e r s i o n :   a p i r e g i s t r a t i o n . k 8 s . i o / v 1   i m p o r t   " k 8 s . i o / k u b e - a g g r e g a t o r / p k g / a p i s / a p i r e g i s t r a t i o n / v 1 "


Question: What is APIService?

Answer: A P I S e r v i c e   r e p r e s e n t s   a   s e r v e r   f o r   a   p a r t i c u l a r   G r o u p V e r s i o n .   N a m e   m u s t   b e   " v e r s i o n . g r o u p " .   a p i V e r s i o n :   a p i r e g i s t r a t i o n . k 8 s . i o / v 1 k i n d :   A P I S e r v i c e m e t a d a t a   ( O b j e c t M e t a ) S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a s p e c   ( A P I S e r v i c e S p e c ) S p e c   c o n t a i n s   i n f o r m a t i o n   f o r   l o c a t i n g   a n d   c o m m u n i c a t i n g   w i t h   a   s e r v e r s t a t u s   ( A P I S e r v i c e S t a t u s ) S t a t u s   c o n t a i n s   d e r i v e d   i n f o r m a t i o n   a b o u t   a n   A P I   s e r v e r   a p i V e r s i o n :   a p i r e g i s t r a t i o n . k 8 s . i o / v 1   k i n d :   A P I S e r v i c e   m e t a d a t a   ( O b j e c t M e t a )   S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   s p e c   ( A P I S e r v i c e S p e c )   S p e c   c o n t a i n s   i n f o r m a t i o n   f o r   l o c a t i n g   a n d   c o m m u n i c a t i n g   w i t h   a   s e r v e r   s t a t u s   ( A P I S e r v i c e S t a t u s )   S t a t u s   c o n t a i n s   d e r i v e d   i n f o r m a t i o n   a b o u t   a n   A P I   s e r v e r


Question: What is APIServiceSpec?

Answer: A P I S e r v i c e S p e c   c o n t a i n s   i n f o r m a t i o n   f o r   l o c a t i n g   a n d   c o m m u n i c a t i n g   w i t h   a   s e r v e r .   O n l y   h t t p s   i s   s u p p o r t e d ,   t h o u g h   y o u   a r e   a b l e   t o   d i s a b l e   c e r t i f i c a t e   v e r i f i c a t i o n .   g r o u p P r i o r i t y M i n i m u m   ( i n t 3 2 ) ,   r e q u i r e d G r o u p P r i o r i t y M i n i m u m   i s   t h e   p r i o r i t y   t h i s   g r o u p   s h o u l d   h a v e   a t   l e a s t .   H i g h e r   p r i o r i t y   m e a n s   t h a t   t h e   g r o u p   i s   p r e f e r r e d   b y   c l i e n t s   o v e r   l o w e r   p r i o r i t y   o n e s .   N o t e   t h a t   o t h e r   v e r s i o n s   o f   t h i s   g r o u p   m i g h t   s p e c i f y   e v e n   h i g h e r   G r o u p P r i o r i t y M i n i m u m   v a l u e s   s u c h   t h a t   t h e   w h o l e   g r o u p   g e t s   a   h i g h e r   p r i o r i t y .   T h e   p r i m a r y   s o r t   i s   b a s e d   o n   G r o u p P r i o r i t y M i n i m u m ,   o r d e r e d   h i g h e s t   n u m b e r   t o   l o w e s t   ( 2 0   b e f o r e   1 0 ) .   T h e   s e c o n d a r y   s o r t   i s   b a s e d   o n   t h e   a l p h a b e t i c a l   c o m p a r i s o n   o f   t h e   n a m e   o f   t h e   o b j e c t .   ( v 1 . b a r   b e f o r e   v 1 . f o o )   W e ' d   r e c o m m e n d   s o m e t h i n g   l i k e :   * . k 8 s . i o   ( e x c e p t   e x t e n s i o n s )   a t   1 8 0 0 0   a n d   P a a S e s   ( O p e n S h i f t ,   D e i s )   a r e   r e c o m m e n d e d   t o   b e   i n   t h e   2 0 0 0 s v e r s i o n P r i o r i t y   ( i n t 3 2 ) ,   r e q u i r e d V e r s i o n P r i o r i t y   c o n t r o l s   t h e   o r d e r i n g   o f   t h i s   A P I   v e r s i o n   i n s i d e   o f   i t s   g r o u p .   M u s t   b e   g r e a t e r   t h a n   z e r o .   T h e   p r i m a r y   s o r t   i


Question: What is APIServiceStatus?

Answer: A P I S e r v i c e S t a t u s   c o n t a i n s   d e r i v e d   i n f o r m a t i o n   a b o u t   a n   A P I   s e r v e r   c o n d i t i o n s   ( [ ] A P I S e r v i c e C o n d i t i o n ) P a t c h   s t r a t e g y :   m e r g e   o n   k e y   t y p e M a p :   u n i q u e   v a l u e s   o n   k e y   t y p e   w i l l   b e   k e p t   d u r i n g   a   m e r g e C u r r e n t   s e r v i c e   s t a t e   o f   a p i S e r v i c e . A P I S e r v i c e C o n d i t i o n   d e s c r i b e s   t h e   s t a t e   o f   a n   A P I S e r v i c e   a t   a   p a r t i c u l a r   p o i n t c o n d i t i o n s . s t a t u s   ( s t r i n g ) ,   r e q u i r e d S t a t u s   i s   t h e   s t a t u s   o f   t h e   c o n d i t i o n .   C a n   b e   T r u e ,   F a l s e ,   U n k n o w n . c o n d i t i o n s . t y p e   ( s t r i n g ) ,   r e q u i r e d T y p e   i s   t h e   t y p e   o f   t h e   c o n d i t i o n . c o n d i t i o n s . l a s t T r a n s i t i o n T i m e   ( T i m e ) L a s t   t i m e   t h e   c o n d i t i o n   t r a n s i t i o n e d   f r o m   o n e   s t a t u s   t o   a n o t h e r . T i m e   i s   a   w r a p p e r   a r o u n d   t i m e . T i m e   w h i c h   s u p p o r t s   c o r r e c t   m a r s h a l i n g   t o   Y A M L   a n d   J S O N .   W r a p p e r s   a r e   p r o v i d e d   f o r   m a n y   o f   t h e   f a c t o r y   m e t h o d s   t h a t   t h e   t i m e   p a c k a g e   o f f e r s . c o n d i t i o n s . m e s s a g e   ( s t r i n g ) H u m a n - r e a d a b l e   m e s s a g e   i n d i c a t i n g   d e t a i l s   a b o u t   l a s t   t r a n s i t i o n . c o n d i t i o n s . r e a s o n   ( s t r i n g ) U n i q u e ,   o n e - w o r d ,   C a m e l C a s e   r e a s o n   f o r   t h e   c o n d i t i o n ' s   l a s t   t r a n s i t i o n .   c o n d i t i o n s   ( [ ] A P I S e r v i c e C o n d i t i o n )   P a t c h   s t r a t e g y :   m e r g e   o n   k e y   t


Question: What is APIServiceList?

Answer: A P I S e r v i c e L i s t   i s   a   l i s t   o f   A P I S e r v i c e   o b j e c t s .   a p i V e r s i o n :   a p i r e g i s t r a t i o n . k 8 s . i o / v 1 k i n d :   A P I S e r v i c e L i s t m e t a d a t a   ( L i s t M e t a ) S t a n d a r d   l i s t   m e t a d a t a   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a i t e m s   ( [ ] A P I S e r v i c e ) ,   r e q u i r e d I t e m s   i s   t h e   l i s t   o f   A P I S e r v i c e   a p i V e r s i o n :   a p i r e g i s t r a t i o n . k 8 s . i o / v 1   k i n d :   A P I S e r v i c e L i s t   m e t a d a t a   ( L i s t M e t a )   S t a n d a r d   l i s t   m e t a d a t a   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   i t e m s   ( [ ] A P I S e r v i c e ) ,   r e q u i r e d   I t e m s   i s   t h e   l i s t   o f   A P I S e r v i c e


Question: What is HTTP Request?

Answer: G E T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s


Question: What is Parameters?

Answer: b o d y :   A P I S e r v i c e ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   b o d y :   A P I S e r v i c e ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   2 0 1   ( A P I S e r v i c e ) :   C r e a t e d   2 0 2   ( A P I S e r v i c e ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e b o d y :   A P I S e r v i c e ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   b o d y :   A P I S e r v i c e ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   2 0 1   ( A P I S e r v i c e ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e b o d y :   A P I S e r v i c e ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   b o d y :   A P I S e r v i c e ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   2 0 1   ( A P I S e r v i c e ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   2 0 1   ( A P I S e r v i c e ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( A P I S e r v i c e ) :   O K   2 0 1   ( A P I S e r v i c e ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   A P I S e r v i c e b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   A P I S e r v i c e   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / a p i r e g i s t r a t i o n . k 8 s . i o / v 1 / a p i s e r v i c e s


Question: What is Parameters?

Answer: b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   l a b e l S e l e c t o r   (


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Production environment?

Answer: Production environmentCreate a production-quality Kubernetes clusterA production-quality Kubernetes cluster requires planning and preparation. If your Kubernetes cluster is to run critical workloads, it must be configured to be resilient. This page explains steps you can take to set up a production-ready cluster, or to promote an existing cluster for production use. If you're already familiar with production setup and want the links, skip to What's next.Production considerationsTypically, a production Kubernetes cluster environment has more requirements than a personal learning, development, or test environment Kubernetes. A production environment may require secure access by many users, consistent availability, and the resources to adapt to changing demands.As you decide where you want your production Kubernetes environment to live (on premises or in a cloud) and the amount of management you want to take on or hand to others, consider how your requirements for a Kubernetes cluster are influenced by the following issues:Availability: A single-machine Kubernetes learning environment has a single point of failure. Creating a highly available cluster means considering:Separating the control plane from the worker nodes.Replicating the control plane components on multiple nodes.Load balancing traffic to the cluster’s API server.Having enough worker nodes available, or able to quickly become available, as changing workloads warrant it.Scale: If you expect your production Kubernetes environment to receive a stable amount of demand, you might be able to set up for the capacity you need and be done. However, if you expect demand to grow over time or change dramatically based on things like season or special events, you need to plan how to scale to relieve increased pressure from more requests to the control plane and worker nodes or scale down to reduce unused resources.Security and access management: You have full admin privileges on your own Kubernetes learning cluster. But shared clusters with important workloads, and more than one or two users, require a more refined approach to who and what can access cluster resources. You can use role-based access control (RBAC) and other security mechanisms to make sure that users and workloads can get access to the resources they need, while keeping workloads, and the cluster itself, secure. You can set limits on the resources that users and workloads can access by managing policies and container resources.Before building a Kubernetes production environment on your own, consider handing off some or all of this job to Turnkey Cloud Solutions providers or other Kubernetes Partners. Options include:Serverless: Just run workloads on third-party equipment without managing a cluster at all. You will be charged for things like CPU usage, memory, and disk requests.Managed control plane: Let the provider manage the scale and availability of the cluster's control plane, as well as handle patches and upgrades.Managed worker


Question: How does Production environment work?

Answer: Production environmentCreate a production-quality Kubernetes clusterA production-quality Kubernetes cluster requires planning and preparation. If your Kubernetes cluster is to run critical workloads, it must be configured to be resilient. This page explains steps you can take to set up a production-ready cluster, or to promote an existing cluster for production use. If you're already familiar with production setup and want the links, skip to What's next.Production considerationsTypically, a production Kubernetes cluster environment has more requirements than a personal learning, development, or test environment Kubernetes. A production environment may require secure access by many users, consistent availability, and the resources to adapt to changing demands.As you decide where you want your production Kubernetes environment to live (on premises or in a cloud) and the amount of management you want to take on or hand to others, consider how your requirements for a Kubernetes cluster are influenced by the following issues:Availability: A single-machine Kubernetes learning environment has a single point of failure. Creating a highly available cluster means considering:Separating the control plane from the worker nodes.Replicating the control plane components on multiple nodes.Load balancing traffic to the cluster’s API server.Having enough worker nodes available, or able to quickly become available, as changing workloads warrant it.Scale: If you expect your production Kubernetes environment to receive a stable amount of demand, you might be able to set up for the capacity you need and be done. However, if you expect demand to grow over time or change dramatically based on things like season or special events, you need to plan how to scale to relieve increased pressure from more requests to the control plane and worker nodes or scale down to reduce unused resources.Security and access management: You have full admin privileges on your own Kubernetes learning cluster. But shared clusters with important workloads, and more than one or two users, require a more refined approach to who and what can access cluster resources. You can use role-based access control (RBAC) and other security mechanisms to make sure that users and workloads can get access to the resources they need, while keeping workloads, and the cluster itself, secure. You can set limits on the resources that users and workloads can access by managing policies and container resources.Before building a Kubernetes production environment on your own, consider handing off some or all of this job to Turnkey Cloud Solutions providers or other Kubernetes Partners. Options include:Serverless: Just run workloads on third-party equipment without managing a cluster at all. You will be charged for things like CPU usage, memory, and disk requests.Managed control plane: Let the provider manage the scale and availability of the cluster's control plane, as well as handle patches and upgrades.Managed worker


Question: When would you use Production environment?

Answer: Production environmentCreate a production-quality Kubernetes clusterA production-quality Kubernetes cluster requires planning and preparation. If your Kubernetes cluster is to run critical workloads, it must be configured to be resilient. This page explains steps you can take to set up a production-ready cluster, or to promote an existing cluster for production use. If you're already familiar with production setup and want the links, skip to What's next.Production considerationsTypically, a production Kubernetes cluster environment has more requirements than a personal learning, development, or test environment Kubernetes. A production environment may require secure access by many users, consistent availability, and the resources to adapt to changing demands.As you decide where you want your production Kubernetes environment to live (on premises or in a cloud) and the amount of management you want to take on or hand to others, consider how your requirements for a Kubernetes cluster are influenced by the following issues:Availability: A single-machine Kubernetes learning environment has a single point of failure. Creating a highly available cluster means considering:Separating the control plane from the worker nodes.Replicating the control plane components on multiple nodes.Load balancing traffic to the cluster’s API server.Having enough worker nodes available, or able to quickly become available, as changing workloads warrant it.Scale: If you expect your production Kubernetes environment to receive a stable amount of demand, you might be able to set up for the capacity you need and be done. However, if you expect demand to grow over time or change dramatically based on things like season or special events, you need to plan how to scale to relieve increased pressure from more requests to the control plane and worker nodes or scale down to reduce unused resources.Security and access management: You have full admin privileges on your own Kubernetes learning cluster. But shared clusters with important workloads, and more than one or two users, require a more refined approach to who and what can access cluster resources. You can use role-based access control (RBAC) and other security mechanisms to make sure that users and workloads can get access to the resources they need, while keeping workloads, and the cluster itself, secure. You can set limits on the resources that users and workloads can access by managing policies and container resources.Before building a Kubernetes production environment on your own, consider handing off some or all of this job to Turnkey Cloud Solutions providers or other Kubernetes Partners. Options include:Serverless: Just run workloads on third-party equipment without managing a cluster at all. You will be charged for things like CPU usage, memory, and disk requests.Managed control plane: Let the provider manage the scale and availability of the cluster's control plane, as well as handle patches and upgrades.Managed worker


Question: What are the benefits of Production environment?

Answer: Production environmentCreate a production-quality Kubernetes clusterA production-quality Kubernetes cluster requires planning and preparation. If your Kubernetes cluster is to run critical workloads, it must be configured to be resilient. This page explains steps you can take to set up a production-ready cluster, or to promote an existing cluster for production use. If you're already familiar with production setup and want the links, skip to What's next.Production considerationsTypically, a production Kubernetes cluster environment has more requirements than a personal learning, development, or test environment Kubernetes. A production environment may require secure access by many users, consistent availability, and the resources to adapt to changing demands.As you decide where you want your production Kubernetes environment to live (on premises or in a cloud) and the amount of management you want to take on or hand to others, consider how your requirements for a Kubernetes cluster are influenced by the following issues:Availability: A single-machine Kubernetes learning environment has a single point of failure. Creating a highly available cluster means considering:Separating the control plane from the worker nodes.Replicating the control plane components on multiple nodes.Load balancing traffic to the cluster’s API server.Having enough worker nodes available, or able to quickly become available, as changing workloads warrant it.Scale: If you expect your production Kubernetes environment to receive a stable amount of demand, you might be able to set up for the capacity you need and be done. However, if you expect demand to grow over time or change dramatically based on things like season or special events, you need to plan how to scale to relieve increased pressure from more requests to the control plane and worker nodes or scale down to reduce unused resources.Security and access management: You have full admin privileges on your own Kubernetes learning cluster. But shared clusters with important workloads, and more than one or two users, require a more refined approach to who and what can access cluster resources. You can use role-based access control (RBAC) and other security mechanisms to make sure that users and workloads can get access to the resources they need, while keeping workloads, and the cluster itself, secure. You can set limits on the resources that users and workloads can access by managing policies and container resources.Before building a Kubernetes production environment on your own, consider handing off some or all of this job to Turnkey Cloud Solutions providers or other Kubernetes Partners. Options include:Serverless: Just run workloads on third-party equipment without managing a cluster at all. You will be charged for things like CPU usage, memory, and disk requests.Managed control plane: Let the provider manage the scale and availability of the cluster's control plane, as well as handle patches and upgrades.Managed worker


Question: What is Production environment?

Answer: A   p r o d u c t i o n - q u a l i t y   K u b e r n e t e s   c l u s t e r   r e q u i r e s   p l a n n i n g   a n d   p r e p a r a t i o n .   I f   y o u r   K u b e r n e t e s   c l u s t e r   i s   t o   r u n   c r i t i c a l   w o r k l o a d s ,   i t   m u s t   b e   c o n f i g u r e d   t o   b e   r e s i l i e n t .   T h i s   p a g e   e x p l a i n s   s t e p s   y o u   c a n   t a k e   t o   s e t   u p   a   p r o d u c t i o n - r e a d y   c l u s t e r ,   o r   t o   p r o m o t e   a n   e x i s t i n g   c l u s t e r   f o r   p r o d u c t i o n   u s e .   I f   y o u ' r e   a l r e a d y   f a m i l i a r   w i t h   p r o d u c t i o n   s e t u p   a n d   w a n t   t h e   l i n k s ,   s k i p   t o   W h a t ' s   n e x t .


Question: What is Production considerations?

Answer: T y p i c a l l y ,   a   p r o d u c t i o n   K u b e r n e t e s   c l u s t e r   e n v i r o n m e n t   h a s   m o r e   r e q u i r e m e n t s   t h a n   a   p e r s o n a l   l e a r n i n g ,   d e v e l o p m e n t ,   o r   t e s t   e n v i r o n m e n t   K u b e r n e t e s .   A   p r o d u c t i o n   e n v i r o n m e n t   m a y   r e q u i r e   s e c u r e   a c c e s s   b y   m a n y   u s e r s ,   c o n s i s t e n t   a v a i l a b i l i t y ,   a n d   t h e   r e s o u r c e s   t o   a d a p t   t o   c h a n g i n g   d e m a n d s .   A s   y o u   d e c i d e   w h e r e   y o u   w a n t   y o u r   p r o d u c t i o n   K u b e r n e t e s   e n v i r o n m e n t   t o   l i v e   ( o n   p r e m i s e s   o r   i n   a   c l o u d )   a n d   t h e   a m o u n t   o f   m a n a g e m e n t   y o u   w a n t   t o   t a k e   o n   o r   h a n d   t o   o t h e r s ,   c o n s i d e r   h o w   y o u r   r e q u i r e m e n t s   f o r   a   K u b e r n e t e s   c l u s t e r   a r e   i n f l u e n c e d   b y   t h e   f o l l o w i n g   i s s u e s :   A v a i l a b i l i t y :   A   s i n g l e - m a c h i n e   K u b e r n e t e s   l e a r n i n g   e n v i r o n m e n t   h a s   a   s i n g l e   p o i n t   o f   f a i l u r e .   C r e a t i n g   a   h i g h l y   a v a i l a b l e   c l u s t e r   m e a n s   c o n s i d e r i n g : S e p a r a t i n g   t h e   c o n t r o l   p l a n e   f r o m   t h e   w o r k e r   n o d e s . R e p l i c a t i n g   t h e   c o n t r o l   p l a n e   c o m p o n e n t s   o n   m u l t i p l e   n o d e s . L o a d   b a l a n c i n g   t r a f f i c   t o   t h e   c l u s t e r ’ s   A P I   s e r v e r . H a v i n g   e n o u g h   w o r k e r   n o d e s   a v a i l a b l e ,   o r   a b l e   t o   q u i c k l y   b e c o m e   a v a i l a b l e ,   a s   c h a n g i n g   w o r k l o a d s   w a r r a n t   i t . S c a l e :   I f   y o u   e x p e c t   y o u r   p r


Question: What is Production cluster setup?

Answer: I n   a   p r o d u c t i o n - q u a l i t y   K u b e r n e t e s   c l u s t e r ,   t h e   c o n t r o l   p l a n e   m a n a g e s   t h e   c l u s t e r   f r o m   s e r v i c e s   t h a t   c a n   b e   s p r e a d   a c r o s s   m u l t i p l e   c o m p u t e r s   i n   d i f f e r e n t   w a y s .   E a c h   w o r k e r   n o d e ,   h o w e v e r ,   r e p r e s e n t s   a   s i n g l e   e n t i t y   t h a t   i s   c o n f i g u r e d   t o   r u n   K u b e r n e t e s   p o d s .


Question: What is Production control plane?

Answer: T h e   s i m p l e s t   K u b e r n e t e s   c l u s t e r   h a s   t h e   e n t i r e   c o n t r o l   p l a n e   a n d   w o r k e r   n o d e   s e r v i c e s   r u n n i n g   o n   t h e   s a m e   m a c h i n e .   Y o u   c a n   g r o w   t h a t   e n v i r o n m e n t   b y   a d d i n g   w o r k e r   n o d e s ,   a s   r e f l e c t e d   i n   t h e   d i a g r a m   i l l u s t r a t e d   i n   K u b e r n e t e s   C o m p o n e n t s .   I f   t h e   c l u s t e r   i s   m e a n t   t o   b e   a v a i l a b l e   f o r   a   s h o r t   p e r i o d   o f   t i m e ,   o r   c a n   b e   d i s c a r d e d   i f   s o m e t h i n g   g o e s   s e r i o u s l y   w r o n g ,   t h i s   m i g h t   m e e t   y o u r   n e e d s .   I f   y o u   n e e d   a   m o r e   p e r m a n e n t ,   h i g h l y   a v a i l a b l e   c l u s t e r ,   h o w e v e r ,   y o u   s h o u l d   c o n s i d e r   w a y s   o f   e x t e n d i n g   t h e   c o n t r o l   p l a n e .   B y   d e s i g n ,   o n e - m a c h i n e   c o n t r o l   p l a n e   s e r v i c e s   r u n n i n g   o n   a   s i n g l e   m a c h i n e   a r e   n o t   h i g h l y   a v a i l a b l e .   I f   k e e p i n g   t h e   c l u s t e r   u p   a n d   r u n n i n g   a n d   e n s u r i n g   t h a t   i t   c a n   b e   r e p a i r e d   i f   s o m e t h i n g   g o e s   w r o n g   i s   i m p o r t a n t ,   c o n s i d e r   t h e s e   s t e p s :   C h o o s e   d e p l o y m e n t   t o o l s :   Y o u   c a n   d e p l o y   a   c o n t r o l   p l a n e   u s i n g   t o o l s   s u c h   a s   k u b e a d m ,   k o p s ,   a n d   k u b e s p r a y .   S e e   I n s t a l l i n g   K u b e r n e t e s   w i t h   d e p l o y m e n t   t o o l s   t o   l e a r n   t i p s   f o r   p r o d u c t i o n - q u a l i t y   d e p l o y m e n t s   u s i n g   e a c h   o f   t h o s e   d e p l o y m e n t   m e t h o d s .   D i f f e r e n t   C o n t


Question: What is Production worker nodes?

Answer: P r o d u c t i o n - q u a l i t y   w o r k l o a d s   n e e d   t o   b e   r e s i l i e n t   a n d   a n y t h i n g   t h e y   r e l y   o n   n e e d s   t o   b e   r e s i l i e n t   ( s u c h   a s   C o r e D N S ) .   W h e t h e r   y o u   m a n a g e   y o u r   o w n   c o n t r o l   p l a n e   o r   h a v e   a   c l o u d   p r o v i d e r   d o   i t   f o r   y o u ,   y o u   s t i l l   n e e d   t o   c o n s i d e r   h o w   y o u   w a n t   t o   m a n a g e   y o u r   w o r k e r   n o d e s   ( a l s o   r e f e r r e d   t o   s i m p l y   a s   n o d e s ) .   C o n f i g u r e   n o d e s :   N o d e s   c a n   b e   p h y s i c a l   o r   v i r t u a l   m a c h i n e s .   I f   y o u   w a n t   t o   c r e a t e   a n d   m a n a g e   y o u r   o w n   n o d e s ,   y o u   c a n   i n s t a l l   a   s u p p o r t e d   o p e r a t i n g   s y s t e m ,   t h e n   a d d   a n d   r u n   t h e   a p p r o p r i a t e   N o d e   s e r v i c e s .   C o n s i d e r : T h e   d e m a n d s   o f   y o u r   w o r k l o a d s   w h e n   y o u   s e t   u p   n o d e s   b y   h a v i n g   a p p r o p r i a t e   m e m o r y ,   C P U ,   a n d   d i s k   s p e e d   a n d   s t o r a g e   c a p a c i t y   a v a i l a b l e . W h e t h e r   g e n e r i c   c o m p u t e r   s y s t e m s   w i l l   d o   o r   y o u   h a v e   w o r k l o a d s   t h a t   n e e d   G P U   p r o c e s s o r s ,   W i n d o w s   n o d e s ,   o r   V M   i s o l a t i o n . V a l i d a t e   n o d e s :   S e e   V a l i d   n o d e   s e t u p   f o r   i n f o r m a t i o n   o n   h o w   t o   e n s u r e   t h a t   a   n o d e   m e e t s   t h e   r e q u i r e m e n t s   t o   j o i n   a   K u b e r n e t e s   c l u s t e r . A d d   n o d e s   t o   t h e   c l u s t e r :   I f   y o u   a r e   m a n a g i n g   y o u r   o w n   c l u s t e r   y o u   c a n   a d d   n o d e s   b y   s e t t i n g   u p   y o u


Question: What is Production user management?

Answer: I n   p r o d u c t i o n ,   y o u   m a y   b e   m o v i n g   f r o m   a   m o d e l   w h e r e   y o u   o r   a   s m a l l   g r o u p   o f   p e o p l e   a r e   a c c e s s i n g   t h e   c l u s t e r   t o   w h e r e   t h e r e   m a y   p o t e n t i a l l y   b e   d o z e n s   o r   h u n d r e d s   o f   p e o p l e .   I n   a   l e a r n i n g   e n v i r o n m e n t   o r   p l a t f o r m   p r o t o t y p e ,   y o u   m i g h t   h a v e   a   s i n g l e   a d m i n i s t r a t i v e   a c c o u n t   f o r   e v e r y t h i n g   y o u   d o .   I n   p r o d u c t i o n ,   y o u   w i l l   w a n t   m o r e   a c c o u n t s   w i t h   d i f f e r e n t   l e v e l s   o f   a c c e s s   t o   d i f f e r e n t   n a m e s p a c e s .   T a k i n g   o n   a   p r o d u c t i o n - q u a l i t y   c l u s t e r   m e a n s   d e c i d i n g   h o w   y o u   w a n t   t o   s e l e c t i v e l y   a l l o w   a c c e s s   b y   o t h e r   u s e r s .   I n   p a r t i c u l a r ,   y o u   n e e d   t o   s e l e c t   s t r a t e g i e s   f o r   v a l i d a t i n g   t h e   i d e n t i t i e s   o f   t h o s e   w h o   t r y   t o   a c c e s s   y o u r   c l u s t e r   ( a u t h e n t i c a t i o n )   a n d   d e c i d i n g   i f   t h e y   h a v e   p e r m i s s i o n s   t o   d o   w h a t   t h e y   a r e   a s k i n g   ( a u t h o r i z a t i o n ) :   A u t h e n t i c a t i o n :   T h e   a p i s e r v e r   c a n   a u t h e n t i c a t e   u s e r s   u s i n g   c l i e n t   c e r t i f i c a t e s ,   b e a r e r   t o k e n s ,   a n   a u t h e n t i c a t i n g   p r o x y ,   o r   H T T P   b a s i c   a u t h .   Y o u   c a n   c h o o s e   w h i c h   a u t h e n t i c a t i o n   m e t h o d s   y o u   w a n t   t o   u s e .   U s i n g   p l u g i n s ,   t h e   a p i s e r v e r   c a n   l e v e r a g e   y o u r   o r g a n i z a t i o n ’ s   e x i s t i n g   a u t h e n t i c a t


Question: What is Set limits on workload resources?

Answer: D e m a n d s   f r o m   p r o d u c t i o n   w o r k l o a d s   c a n   c a u s e   p r e s s u r e   b o t h   i n s i d e   a n d   o u t s i d e   o f   t h e   K u b e r n e t e s   c o n t r o l   p l a n e .   C o n s i d e r   t h e s e   i t e m s   w h e n   s e t t i n g   u p   f o r   t h e   n e e d s   o f   y o u r   c l u s t e r ' s   w o r k l o a d s :   S e t   n a m e s p a c e   l i m i t s :   S e t   p e r - n a m e s p a c e   q u o t a s   o n   t h i n g s   l i k e   m e m o r y   a n d   C P U .   S e e   M a n a g e   M e m o r y ,   C P U ,   a n d   A P I   R e s o u r c e s   f o r   d e t a i l s . P r e p a r e   f o r   D N S   d e m a n d :   I f   y o u   e x p e c t   w o r k l o a d s   t o   m a s s i v e l y   s c a l e   u p ,   y o u r   D N S   s e r v i c e   m u s t   b e   r e a d y   t o   s c a l e   u p   a s   w e l l .   S e e   A u t o s c a l e   t h e   D N S   s e r v i c e   i n   a   C l u s t e r . C r e a t e   a d d i t i o n a l   s e r v i c e   a c c o u n t s :   U s e r   a c c o u n t s   d e t e r m i n e   w h a t   u s e r s   c a n   d o   o n   a   c l u s t e r ,   w h i l e   a   s e r v i c e   a c c o u n t   d e f i n e s   p o d   a c c e s s   w i t h i n   a   p a r t i c u l a r   n a m e s p a c e .   B y   d e f a u l t ,   a   p o d   t a k e s   o n   t h e   d e f a u l t   s e r v i c e   a c c o u n t   f r o m   i t s   n a m e s p a c e .   S e e   M a n a g i n g   S e r v i c e   A c c o u n t s   f o r   i n f o r m a t i o n   o n   c r e a t i n g   a   n e w   s e r v i c e   a c c o u n t .   F o r   e x a m p l e ,   y o u   m i g h t   w a n t   t o : A d d   s e c r e t s   t h a t   a   p o d   c o u l d   u s e   t o   p u l l   i m a g e s   f r o m   a   p a r t i c u l a r   c o n t a i n e r   r e g i s t r y .   S e e   C o n f i g u r e   S e r v i c e   A c c o u n t s   f o r   P o d s   f o r   a n   e x a m p l e . A s s i g n   R B A C   p e r m i s


Question: What is What's next?

Answer: D e c i d e   i f   y o u   w a n t   t o   b u i l d   y o u r   o w n   p r o d u c t i o n   K u b e r n e t e s   o r   o b t a i n   o n e   f r o m   a v a i l a b l e   T u r n k e y   C l o u d   S o l u t i o n s   o r   K u b e r n e t e s   P a r t n e r s . I f   y o u   c h o o s e   t o   b u i l d   y o u r   o w n   c l u s t e r ,   p l a n   h o w   y o u   w a n t   t o   h a n d l e   c e r t i f i c a t e s   a n d   s e t   u p   h i g h   a v a i l a b i l i t y   f o r   f e a t u r e s   s u c h   a s   e t c d   a n d   t h e   A P I   s e r v e r . C h o o s e   f r o m   k u b e a d m ,   k o p s   o r   K u b e s p r a y   d e p l o y m e n t   m e t h o d s . C o n f i g u r e   u s e r   m a n a g e m e n t   b y   d e t e r m i n i n g   y o u r   A u t h e n t i c a t i o n   a n d   A u t h o r i z a t i o n   m e t h o d s . P r e p a r e   f o r   a p p l i c a t i o n   w o r k l o a d s   b y   s e t t i n g   u p   r e s o u r c e   l i m i t s ,   D N S   a u t o s c a l i n g   a n d   s e r v i c e   a c c o u n t s .


Question: What is Kubernetes Documentation?

Answer: Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications. The open source project is hosted by the Cloud Native Computing Foundation (CNCF).Understand KubernetesLearn about Kubernetes and its fundamental concepts.Why Kubernetes?Components of a clusterThe Kubernetes APIObjects In KubernetesContainersWorkloads and PodsView ConceptsTry KubernetesFollow tutorials to learn how to deploy applications in Kubernetes.Hello MinikubeWalkthrough the basicsStateless Example: PHP Guestbook with RedisStateful Example: Wordpress with Persistent VolumesView TutorialsSet up a K8s clusterGet Kubernetes running based on your resources and needs.Learning environmentProduction environmentInstall the kubeadm setup toolSecuring a clusterkubeadm command referenceSet up KubernetesLearn how to use KubernetesLook up common tasks and how to perform them using a short sequence of steps.kubectl Quick ReferenceInstall kubectlConfigure access to clustersUse the Web UI DashboardConfigure a Pod to Use a ConfigMapGetting helpView TasksLook up reference informationBrowse terminology, command line syntax, API resource types, and setup tool documentation.Glossarykubectl command line toolLabels, annotations and taintsKubernetes API referenceOverview of APIFeature GatesView ReferenceContribute to KubernetesFind out how you can help make Kubernetes better.Contribute to KubernetesContribute to documentationSuggest content improvementsOpening a pull requestDocumenting a feature for a releaseLocalizing the docsParticipating in SIG DocsViewing Site AnalyticsSee Ways to ContributeTrainingGet certified in Kubernetes and make your cloud native projects successful!View trainingDownload KubernetesInstall Kubernetes or upgrade to the newest version.Download KubernetesAbout the documentationThis website contains documentation for the current and previous 4 versions of Kubernetes.See available versions


Question: How does Kubernetes Documentation work?

Answer: Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications. The open source project is hosted by the Cloud Native Computing Foundation (CNCF).Understand KubernetesLearn about Kubernetes and its fundamental concepts.Why Kubernetes?Components of a clusterThe Kubernetes APIObjects In KubernetesContainersWorkloads and PodsView ConceptsTry KubernetesFollow tutorials to learn how to deploy applications in Kubernetes.Hello MinikubeWalkthrough the basicsStateless Example: PHP Guestbook with RedisStateful Example: Wordpress with Persistent VolumesView TutorialsSet up a K8s clusterGet Kubernetes running based on your resources and needs.Learning environmentProduction environmentInstall the kubeadm setup toolSecuring a clusterkubeadm command referenceSet up KubernetesLearn how to use KubernetesLook up common tasks and how to perform them using a short sequence of steps.kubectl Quick ReferenceInstall kubectlConfigure access to clustersUse the Web UI DashboardConfigure a Pod to Use a ConfigMapGetting helpView TasksLook up reference informationBrowse terminology, command line syntax, API resource types, and setup tool documentation.Glossarykubectl command line toolLabels, annotations and taintsKubernetes API referenceOverview of APIFeature GatesView ReferenceContribute to KubernetesFind out how you can help make Kubernetes better.Contribute to KubernetesContribute to documentationSuggest content improvementsOpening a pull requestDocumenting a feature for a releaseLocalizing the docsParticipating in SIG DocsViewing Site AnalyticsSee Ways to ContributeTrainingGet certified in Kubernetes and make your cloud native projects successful!View trainingDownload KubernetesInstall Kubernetes or upgrade to the newest version.Download KubernetesAbout the documentationThis website contains documentation for the current and previous 4 versions of Kubernetes.See available versions


Question: When would you use Kubernetes Documentation?

Answer: Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications. The open source project is hosted by the Cloud Native Computing Foundation (CNCF).Understand KubernetesLearn about Kubernetes and its fundamental concepts.Why Kubernetes?Components of a clusterThe Kubernetes APIObjects In KubernetesContainersWorkloads and PodsView ConceptsTry KubernetesFollow tutorials to learn how to deploy applications in Kubernetes.Hello MinikubeWalkthrough the basicsStateless Example: PHP Guestbook with RedisStateful Example: Wordpress with Persistent VolumesView TutorialsSet up a K8s clusterGet Kubernetes running based on your resources and needs.Learning environmentProduction environmentInstall the kubeadm setup toolSecuring a clusterkubeadm command referenceSet up KubernetesLearn how to use KubernetesLook up common tasks and how to perform them using a short sequence of steps.kubectl Quick ReferenceInstall kubectlConfigure access to clustersUse the Web UI DashboardConfigure a Pod to Use a ConfigMapGetting helpView TasksLook up reference informationBrowse terminology, command line syntax, API resource types, and setup tool documentation.Glossarykubectl command line toolLabels, annotations and taintsKubernetes API referenceOverview of APIFeature GatesView ReferenceContribute to KubernetesFind out how you can help make Kubernetes better.Contribute to KubernetesContribute to documentationSuggest content improvementsOpening a pull requestDocumenting a feature for a releaseLocalizing the docsParticipating in SIG DocsViewing Site AnalyticsSee Ways to ContributeTrainingGet certified in Kubernetes and make your cloud native projects successful!View trainingDownload KubernetesInstall Kubernetes or upgrade to the newest version.Download KubernetesAbout the documentationThis website contains documentation for the current and previous 4 versions of Kubernetes.See available versions


Question: What are the benefits of Kubernetes Documentation?

Answer: Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications. The open source project is hosted by the Cloud Native Computing Foundation (CNCF).Understand KubernetesLearn about Kubernetes and its fundamental concepts.Why Kubernetes?Components of a clusterThe Kubernetes APIObjects In KubernetesContainersWorkloads and PodsView ConceptsTry KubernetesFollow tutorials to learn how to deploy applications in Kubernetes.Hello MinikubeWalkthrough the basicsStateless Example: PHP Guestbook with RedisStateful Example: Wordpress with Persistent VolumesView TutorialsSet up a K8s clusterGet Kubernetes running based on your resources and needs.Learning environmentProduction environmentInstall the kubeadm setup toolSecuring a clusterkubeadm command referenceSet up KubernetesLearn how to use KubernetesLook up common tasks and how to perform them using a short sequence of steps.kubectl Quick ReferenceInstall kubectlConfigure access to clustersUse the Web UI DashboardConfigure a Pod to Use a ConfigMapGetting helpView TasksLook up reference informationBrowse terminology, command line syntax, API resource types, and setup tool documentation.Glossarykubectl command line toolLabels, annotations and taintsKubernetes API referenceOverview of APIFeature GatesView ReferenceContribute to KubernetesFind out how you can help make Kubernetes better.Contribute to KubernetesContribute to documentationSuggest content improvementsOpening a pull requestDocumenting a feature for a releaseLocalizing the docsParticipating in SIG DocsViewing Site AnalyticsSee Ways to ContributeTrainingGet certified in Kubernetes and make your cloud native projects successful!View trainingDownload KubernetesInstall Kubernetes or upgrade to the newest version.Download KubernetesAbout the documentationThis website contains documentation for the current and previous 4 versions of Kubernetes.See available versions


Question: What is Kubernetes Documentation?

Answer: K u b e r n e t e s   D o c u m e n t a t i o n   D o c u m e n t a t i o n   A v a i l a b l e   D o c u m e n t a t i o n   V e r s i o n s   G e t t i n g   s t a r t e d   L e a r n i n g   e n v i r o n m e n t   P r o d u c t i o n   e n v i r o n m e n t   C o n t a i n e r   R u n t i m e s   I n s t a l l i n g   K u b e r n e t e s   w i t h   d e p l o y m e n t   t o o l s   B o o t s t r a p p i n g   c l u s t e r s   w i t h   k u b e a d m   I n s t a l l i n g   k u b e a d m   T r o u b l e s h o o t i n g   k u b e a d m   C r e a t i n g   a   c l u s t e r   w i t h   k u b e a d m   C u s t o m i z i n g   c o m p o n e n t s   w i t h   t h e   k u b e a d m   A P I   O p t i o n s   f o r   H i g h l y   A v a i l a b l e   T o p o l o g y   C r e a t i n g   H i g h l y   A v a i l a b l e   C l u s t e r s   w i t h   k u b e a d m   S e t   u p   a   H i g h   A v a i l a b i l i t y   e t c d   C l u s t e r   w i t h   k u b e a d m   C o n f i g u r i n g   e a c h   k u b e l e t   i n   y o u r   c l u s t e r   u s i n g   k u b e a d m   D u a l - s t a c k   s u p p o r t   w i t h   k u b e a d m   T u r n k e y   C l o u d   S o l u t i o n s   B e s t   p r a c t i c e s   C o n s i d e r a t i o n s   f o r   l a r g e   c l u s t e r s   R u n n i n g   i n   m u l t i p l e   z o n e s   V a l i d a t e   n o d e   s e t u p   E n f o r c i n g   P o d   S e c u r i t y   S t a n d a r d s   P K I   c e r t i f i c a t e s   a n d   r e q u i r e m e n t s   C o n c e p t s   O v e r v i e w   K u b e r n e t e s   C o m p o n e n t s   O b j e c t s   I n   K u b e r n e t e s   K u b e r n e t e s   O b j e c t   M a n a g e m e n t   O b j e c t   N a m e s   a n d   I D s   L a b e l s   a n d   S e l e c t o r s   N a m e s p a c e s   A n n o t a t i o n s   F i e l d   S e l e c t o r s   F i n a l i z e r s   O w n e r s   a n d   D e p e n d e n t s   R e c o m m e n d e d   L a b e l s   T h e   K u b e r n e t e s


Question: What is Understand Kubernetes?

Answer: L e a r n   a b o u t   K u b e r n e t e s   a n d   i t s   f u n d a m e n t a l   c o n c e p t s .   W h y   K u b e r n e t e s ? C o m p o n e n t s   o f   a   c l u s t e r T h e   K u b e r n e t e s   A P I O b j e c t s   I n   K u b e r n e t e s C o n t a i n e r s W o r k l o a d s   a n d   P o d s


Question: What is Try Kubernetes?

Answer: F o l l o w   t u t o r i a l s   t o   l e a r n   h o w   t o   d e p l o y   a p p l i c a t i o n s   i n   K u b e r n e t e s .   H e l l o   M i n i k u b e W a l k t h r o u g h   t h e   b a s i c s S t a t e l e s s   E x a m p l e :   P H P   G u e s t b o o k   w i t h   R e d i s S t a t e f u l   E x a m p l e :   W o r d p r e s s   w i t h   P e r s i s t e n t   V o l u m e s


Question: What is Set up a K8s cluster?

Answer: G e t   K u b e r n e t e s   r u n n i n g   b a s e d   o n   y o u r   r e s o u r c e s   a n d   n e e d s .   L e a r n i n g   e n v i r o n m e n t P r o d u c t i o n   e n v i r o n m e n t I n s t a l l   t h e   k u b e a d m   s e t u p   t o o l S e c u r i n g   a   c l u s t e r k u b e a d m   c o m m a n d   r e f e r e n c e


Question: What is Learn how to use Kubernetes?

Answer: L o o k   u p   c o m m o n   t a s k s   a n d   h o w   t o   p e r f o r m   t h e m   u s i n g   a   s h o r t   s e q u e n c e   o f   s t e p s .   k u b e c t l   Q u i c k   R e f e r e n c e I n s t a l l   k u b e c t l C o n f i g u r e   a c c e s s   t o   c l u s t e r s U s e   t h e   W e b   U I   D a s h b o a r d C o n f i g u r e   a   P o d   t o   U s e   a   C o n f i g M a p G e t t i n g   h e l p


Question: What is Look up reference information?

Answer: B r o w s e   t e r m i n o l o g y ,   c o m m a n d   l i n e   s y n t a x ,   A P I   r e s o u r c e   t y p e s ,   a n d   s e t u p   t o o l   d o c u m e n t a t i o n .   G l o s s a r y k u b e c t l   c o m m a n d   l i n e   t o o l L a b e l s ,   a n n o t a t i o n s   a n d   t a i n t s K u b e r n e t e s   A P I   r e f e r e n c e O v e r v i e w   o f   A P I F e a t u r e   G a t e s


Question: What is Contribute to Kubernetes?

Answer: F i n d   o u t   h o w   y o u   c a n   h e l p   m a k e   K u b e r n e t e s   b e t t e r .   C o n t r i b u t e   t o   K u b e r n e t e s C o n t r i b u t e   t o   d o c u m e n t a t i o n S u g g e s t   c o n t e n t   i m p r o v e m e n t s O p e n i n g   a   p u l l   r e q u e s t D o c u m e n t i n g   a   f e a t u r e   f o r   a   r e l e a s e L o c a l i z i n g   t h e   d o c s P a r t i c i p a t i n g   i n   S I G   D o c s V i e w i n g   S i t e   A n a l y t i c s


Question: What is Training?

Answer: G e t   c e r t i f i e d   i n   K u b e r n e t e s   a n d   m a k e   y o u r   c l o u d   n a t i v e   p r o j e c t s   s u c c e s s f u l !


Question: What is Download Kubernetes?

Answer: I n s t a l l   K u b e r n e t e s   o r   u p g r a d e   t o   t h e   n e w e s t   v e r s i o n .


Question: What is About the documentation?

Answer: T h i s   w e b s i t e   c o n t a i n s   d o c u m e n t a t i o n   f o r   t h e   c u r r e n t   a n d   p r e v i o u s   4   v e r s i o n s   o f   K u b e r n e t e s .   ©   2 0 2 5   T h e   K u b e r n e t e s   A u t h o r s   |   D o c u m e n t a t i o n   D i s t r i b u t e d   u n d e r   C C   B Y   4 . 0   ©   2 0 2 5   T h e   L i n u x   F o u n d a t i o n   ® .   A l l   r i g h t s   r e s e r v e d .   T h e   L i n u x   F o u n d a t i o n   h a s   r e g i s t e r e d   t r a d e m a r k s   a n d   u s e s   t r a d e m a r k s .   F o r   a   l i s t   o f   t r a d e m a r k s   o f   T h e   L i n u x   F o u n d a t i o n ,   p l e a s e   s e e   o u r   T r a d e m a r k   U s a g e   p a g e   I C P   l i c e n s e :   京 I C P 备 1 7 0 7 4 2 6 6 号 - 3


Question: What is kube-apiserver?

Answer: kube-apiserverSynopsisThe Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others. The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.kube-apiserver [flags] Options--admission-control-config-file stringFile with admission control configuration.--advertise-address stringThe IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.--aggregator-reject-forwarding-redirect Default: trueAggregator reject forwarding redirect response back to client.--allow-metric-labels stringToString Default: []The map from metric-label to value allow-list of this label. The key's format is <MetricName>,<LabelName>. The value's format is <allowed_value>,<allowed_value>...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.--allow-metric-labels-manifest stringThe path to the manifest file that contains the allow-list mapping. The format of the file is the same as the flag --allow-metric-labels. Note that the flag --allow-metric-labels will override the manifest file.--allow-privilegedIf true, allow privileged containers. [default=false]--anonymous-auth Default: trueEnables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.--api-audiences stringsIdentifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list containing the issuer URL.--audit-log-batch-buffer-size int Default: 10000The size of the buffer to store events before batching and writing. Only used in batch mode.--audit-log-batch-max-size int Default: 1The maximum size of a batch. Only used in batch mode.--audit-log-batch-max-wait durationThe amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.--audit-log-batch-throttle-burst intMaximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.--audit-log-batch-throttle-enableWhether batching throttling is enabled. Only used in batch mode.--audit-log-batch-throttle-qps floatMaximum average number of batches per second. Only used in batch mode.--audit-log-compressIf set, the rotated log files will be compressed using gzip.--audit-log-format string Default: "json"Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates str


Question: How does kube-apiserver work?

Answer: kube-apiserverSynopsisThe Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others. The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.kube-apiserver [flags] Options--admission-control-config-file stringFile with admission control configuration.--advertise-address stringThe IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.--aggregator-reject-forwarding-redirect Default: trueAggregator reject forwarding redirect response back to client.--allow-metric-labels stringToString Default: []The map from metric-label to value allow-list of this label. The key's format is <MetricName>,<LabelName>. The value's format is <allowed_value>,<allowed_value>...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.--allow-metric-labels-manifest stringThe path to the manifest file that contains the allow-list mapping. The format of the file is the same as the flag --allow-metric-labels. Note that the flag --allow-metric-labels will override the manifest file.--allow-privilegedIf true, allow privileged containers. [default=false]--anonymous-auth Default: trueEnables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.--api-audiences stringsIdentifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list containing the issuer URL.--audit-log-batch-buffer-size int Default: 10000The size of the buffer to store events before batching and writing. Only used in batch mode.--audit-log-batch-max-size int Default: 1The maximum size of a batch. Only used in batch mode.--audit-log-batch-max-wait durationThe amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.--audit-log-batch-throttle-burst intMaximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.--audit-log-batch-throttle-enableWhether batching throttling is enabled. Only used in batch mode.--audit-log-batch-throttle-qps floatMaximum average number of batches per second. Only used in batch mode.--audit-log-compressIf set, the rotated log files will be compressed using gzip.--audit-log-format string Default: "json"Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates str


Question: When would you use kube-apiserver?

Answer: kube-apiserverSynopsisThe Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others. The API Server services REST operations and provides the frontend to the cluster's shared state through which all other components interact.kube-apiserver [flags] Options--admission-control-config-file stringFile with admission control configuration.--advertise-address stringThe IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.--aggregator-reject-forwarding-redirect Default: trueAggregator reject forwarding redirect response back to client.--allow-metric-labels stringToString Default: []The map from metric-label to value allow-list of this label. The key's format is <MetricName>,<LabelName>. The value's format is <allowed_value>,<allowed_value>...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.--allow-metric-labels-manifest stringThe path to the manifest file that contains the allow-list mapping. The format of the file is the same as the flag --allow-metric-labels. Note that the flag --allow-metric-labels will override the manifest file.--allow-privilegedIf true, allow privileged containers. [default=false]--anonymous-auth Default: trueEnables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.--api-audiences stringsIdentifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list containing the issuer URL.--audit-log-batch-buffer-size int Default: 10000The size of the buffer to store events before batching and writing. Only used in batch mode.--audit-log-batch-max-size int Default: 1The maximum size of a batch. Only used in batch mode.--audit-log-batch-max-wait durationThe amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.--audit-log-batch-throttle-burst intMaximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.--audit-log-batch-throttle-enableWhether batching throttling is enabled. Only used in batch mode.--audit-log-batch-throttle-qps floatMaximum average number of batches per second. Only used in batch mode.--audit-log-compressIf set, the rotated log files will be compressed using gzip.--audit-log-format string Default: "json"Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates str