Question: What is Compatibility across topology changes?

Answer: O n   r a r e   o c c u r r e n c e s ,   t h e   a u t h o r   f o r   a   C u s t o m R e s o u r c e D e f i n i t i o n   ( C R D )   o r   b u i l t - i n   m a y   w a n t   t o   c h a n g e   t h e   s p e c i f i c   t o p o l o g y   o f   a   f i e l d   i n   t h e i r   r e s o u r c e ,   w i t h o u t   i n c r e m e n t i n g   i t s   A P I   v e r s i o n .   C h a n g i n g   t h e   t o p o l o g y   o f   t y p e s ,   b y   u p g r a d i n g   t h e   c l u s t e r   o r   u p d a t i n g   t h e   C R D ,   h a s   d i f f e r e n t   c o n s e q u e n c e s   w h e n   u p d a t i n g   e x i s t i n g   o b j e c t s .   T h e r e   a r e   t w o   c a t e g o r i e s   o f   c h a n g e s :   w h e n   a   f i e l d   g o e s   f r o m   m a p / s e t / g r a n u l a r   t o   a t o m i c ,   a n d   t h e   o t h e r   w a y   a r o u n d .   W h e n   t h e   l i s t T y p e ,   m a p T y p e ,   o r   s t r u c t T y p e   c h a n g e s   f r o m   m a p / s e t / g r a n u l a r   t o   a t o m i c ,   t h e   w h o l e   l i s t ,   m a p ,   o r   s t r u c t   o f   e x i s t i n g   o b j e c t s   w i l l   e n d - u p   b e i n g   o w n e d   b y   a c t o r s   w h o   o w n e d   a n   e l e m e n t   o f   t h e s e   t y p e s .   T h i s   m e a n s   t h a t   a n y   f u r t h e r   c h a n g e   t o   t h e s e   o b j e c t s   w o u l d   c a u s e   a   c o n f l i c t .   W h e n   a   l i s t T y p e ,   m a p T y p e ,   o r   s t r u c t T y p e   c h a n g e s   f r o m   a t o m i c   t o   m a p / s e t / g r a n u l a r ,   t h e   A P I   s e r v e r   i s   u n a b l e   t o   i n f e r   t h e   n e w   o w n e r s h i p   o f   t h e s e   f i e l d s .   B e c a u s e   o f   t h a t ,   n o   c o n f l i c t   w i l l   b e   p r o d u c e d   w h e n   o b j e c t s   h a v e   t h e s e   f i e l d s   u p d a t e d .   F o r   t h a t   r e a s o n ,   i t   i s   n o t   r e c o m m e n d e d   t o


Question: What is Using Server-Side Apply in a controller?

Answer: A s   a   d e v e l o p e r   o f   a   c o n t r o l l e r ,   y o u   c a n   u s e   S e r v e r - S i d e   A p p l y   a s   a   w a y   t o   s i m p l i f y   t h e   u p d a t e   l o g i c   o f   y o u r   c o n t r o l l e r .   T h e   m a i n   d i f f e r e n c e s   w i t h   a   r e a d - m o d i f y - w r i t e   a n d / o r   p a t c h   a r e   t h e   f o l l o w i n g :   t h e   a p p l i e d   o b j e c t   m u s t   c o n t a i n   a l l   t h e   f i e l d s   t h a t   t h e   c o n t r o l l e r   c a r e s   a b o u t . t h e r e   i s   n o   w a y   t o   r e m o v e   f i e l d s   t h a t   h a v e n ' t   b e e n   a p p l i e d   b y   t h e   c o n t r o l l e r   b e f o r e   ( c o n t r o l l e r   c a n   s t i l l   s e n d   a   p a t c h   o r   u p d a t e   f o r   t h e s e   u s e - c a s e s ) . t h e   o b j e c t   d o e s n ' t   h a v e   t o   b e   r e a d   b e f o r e h a n d ;   r e s o u r c e V e r s i o n   d o e s n ' t   h a v e   t o   b e   s p e c i f i e d .   I t   i s   s t r o n g l y   r e c o m m e n d e d   f o r   c o n t r o l l e r s   t o   a l w a y s   f o r c e   c o n f l i c t s   o n   o b j e c t s   t h a t   t h e y   o w n   a n d   m a n a g e ,   s i n c e   t h e y   m i g h t   n o t   b e   a b l e   t o   r e s o l v e   o r   a c t   o n   t h e s e   c o n f l i c t s .


Question: What is Transferring ownership?

Answer: I n   a d d i t i o n   t o   t h e   c o n c u r r e n c y   c o n t r o l s   p r o v i d e d   b y   c o n f l i c t   r e s o l u t i o n ,   S e r v e r - S i d e   A p p l y   p r o v i d e s   w a y s   t o   p e r f o r m   c o o r d i n a t e d   f i e l d   o w n e r s h i p   t r a n s f e r s   f r o m   u s e r s   t o   c o n t r o l l e r s .   T h i s   i s   b e s t   e x p l a i n e d   b y   e x a m p l e .   L e t ' s   l o o k   a t   h o w   t o   s a f e l y   t r a n s f e r   o w n e r s h i p   o f   t h e   r e p l i c a s   f i e l d   f r o m   a   u s e r   t o   a   c o n t r o l l e r   w h i l e   e n a b l i n g   a u t o m a t i c   h o r i z o n t a l   s c a l i n g   f o r   a   D e p l o y m e n t ,   u s i n g   t h e   H o r i z o n t a l P o d A u t o s c a l e r   r e s o u r c e   a n d   i t s   a c c o m p a n y i n g   c o n t r o l l e r .   S a y   a   u s e r   h a s   d e f i n e d   D e p l o y m e n t   w i t h   r e p l i c a s   s e t   t o   t h e   d e s i r e d   v a l u e :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   l a b e l s :   a p p :   n g i n x   s p e c :   r e p l i c a s :   3   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 4 . 2   A n d   t h e   u s e r   h a s   c r e a t e d   t h e   D e p l o y m e n t   u s i n g   S e r v e r - S i d e   A p p l y ,   l i k e   s o :   k u b e c t l   a p p l y   - f   h t t p s : / / k 8 s . i o / e x a m p l e s / a p p l i c a t i o n / s s a / n g i n x - d e p l o y m e n t . y a m l   - - s e r v e r - s i d e   T h e n   l a t e r ,   a u t o m a t i c   s c a l i n g   i s   e n a b l e d   f o r   t h e   D e p l o y m e n t ;   f o r   e x a m p l e :   k u


Question: What is Note:?

Answer: T h e   u s e r   a p p l i e s   t h a t   m a n i f e s t   u s i n g   a   p r i v a t e   f i e l d   m a n a g e r   n a m e .   I n   t h i s   e x a m p l e ,   t h e   u s e r   p i c k e d   h a n d o v e r - t o - h p a :   k u b e c t l   a p p l y   - f   n g i n x - d e p l o y m e n t - r e p l i c a s - o n l y . y a m l   \   - - s e r v e r - s i d e   - - f i e l d - m a n a g e r = h a n d o v e r - t o - h p a   \   - - v a l i d a t e = f a l s e   I f   t h e   a p p l y   r e s u l t s   i n   a   c o n f l i c t   w i t h   t h e   H P A   c o n t r o l l e r ,   t h e n   d o   n o t h i n g .   T h e   c o n f l i c t   i n d i c a t e s   t h e   c o n t r o l l e r   h a s   c l a i m e d   t h e   f i e l d   e a r l i e r   i n   t h e   p r o c e s s   t h a n   i t   s o m e t i m e s   d o e s .   A t   t h i s   p o i n t   t h e   u s e r   m a y   r e m o v e   t h e   r e p l i c a s   f i e l d   f r o m   t h e i r   m a n i f e s t :   a p i V e r s i o n :   a p p s / v 1   k i n d :   D e p l o y m e n t   m e t a d a t a :   n a m e :   n g i n x - d e p l o y m e n t   l a b e l s :   a p p :   n g i n x   s p e c :   s e l e c t o r :   m a t c h L a b e l s :   a p p :   n g i n x   t e m p l a t e :   m e t a d a t a :   l a b e l s :   a p p :   n g i n x   s p e c :   c o n t a i n e r s :   -   n a m e :   n g i n x   i m a g e :   n g i n x : 1 . 1 4 . 2   N o t e   t h a t   w h e n e v e r   t h e   H P A   c o n t r o l l e r   s e t s   t h e   r e p l i c a s   f i e l d   t o   a   n e w   v a l u e ,   t h e   t e m p o r a r y   f i e l d   m a n a g e r   w i l l   n o   l o n g e r   o w n   a n y   f i e l d s   a n d   w i l l   b e   a u t o m a t i c a l l y   d e l e t e d .   N o   f u r t h e r   c l e a n   u p   i s   r e q u i r e d .


Question: What is Transferring ownership between managers?

Answer: F i e l d   m a n a g e r s   c a n   t r a n s f e r   o w n e r s h i p   o f   a   f i e l d   b e t w e e n   e a c h   o t h e r   b y   s e t t i n g   t h e   f i e l d   t o   t h e   s a m e   v a l u e   i n   b o t h   o f   t h e i r   a p p l i e d   c o n f i g u r a t i o n s ,   c a u s i n g   t h e m   t o   s h a r e   o w n e r s h i p   o f   t h e   f i e l d .   O n c e   t h e   m a n a g e r s   s h a r e   o w n e r s h i p   o f   t h e   f i e l d ,   o n e   o f   t h e m   c a n   r e m o v e   t h e   f i e l d   f r o m   t h e i r   a p p l i e d   c o n f i g u r a t i o n   t o   g i v e   u p   o w n e r s h i p   a n d   c o m p l e t e   t h e   t r a n s f e r   t o   t h e   o t h e r   f i e l d   m a n a g e r .


Question: What is Comparison with Client-Side Apply?

Answer: S e r v e r - S i d e   A p p l y   i s   m e a n t   b o t h   a s   a   r e p l a c e m e n t   f o r   t h e   o r i g i n a l   c l i e n t - s i d e   i m p l e m e n t a t i o n   o f   t h e   k u b e c t l   a p p l y   s u b c o m m a n d ,   a n d   a s   s i m p l e   a n d   e f f e c t i v e   m e c h a n i s m   f o r   c o n t r o l l e r s   t o   e n a c t   t h e i r   c h a n g e s .   C o m p a r e d   t o   t h e   l a s t - a p p l i e d   a n n o t a t i o n   m a n a g e d   b y   k u b e c t l ,   S e r v e r - S i d e   A p p l y   u s e s   a   m o r e   d e c l a r a t i v e   a p p r o a c h ,   w h i c h   t r a c k s   a n   o b j e c t ' s   f i e l d   m a n a g e m e n t ,   r a t h e r   t h a n   a   u s e r ' s   l a s t   a p p l i e d   s t a t e .   T h i s   m e a n s   t h a t   a s   a   s i d e   e f f e c t   o f   u s i n g   S e r v e r - S i d e   A p p l y ,   i n f o r m a t i o n   a b o u t   w h i c h   f i e l d   m a n a g e r   m a n a g e s   e a c h   f i e l d   i n   a n   o b j e c t   a l s o   b e c o m e s   a v a i l a b l e .   A   c o n s e q u e n c e   o f   t h e   c o n f l i c t   d e t e c t i o n   a n d   r e s o l u t i o n   i m p l e m e n t e d   b y   S e r v e r - S i d e   A p p l y   i s   t h a t   a n   a p p l i e r   a l w a y s   h a s   u p   t o   d a t e   f i e l d   v a l u e s   i n   t h e i r   l o c a l   s t a t e .   I f   t h e y   d o n ' t ,   t h e y   g e t   a   c o n f l i c t   t h e   n e x t   t i m e   t h e y   a p p l y .   A n y   o f   t h e   t h r e e   o p t i o n s   t o   r e s o l v e   c o n f l i c t s   r e s u l t s   i n   t h e   a p p l i e d   c o n f i g u r a t i o n   b e i n g   a n   u p   t o   d a t e   s u b s e t   o f   t h e   o b j e c t   o n   t h e   s e r v e r ' s   f i e l d s .   T h i s   i s   d i f f e r e n t   f r o m   C l i e n t - S i d e   A p p l y ,   w h e r e   o u t d a t e d   v a l u e s   w h i c h   h a


Question: What is Upgrading from client-side apply to server-side apply?

Answer: C l i e n t - s i d e   a p p l y   u s e r s   w h o   m a n a g e   a   r e s o u r c e   w i t h   k u b e c t l   a p p l y   c a n   s t a r t   u s i n g   s e r v e r - s i d e   a p p l y   w i t h   t h e   f o l l o w i n g   f l a g .   k u b e c t l   a p p l y   - - s e r v e r - s i d e   [ - - d r y - r u n = s e r v e r ]   B y   d e f a u l t ,   f i e l d   m a n a g e m e n t   o f   t h e   o b j e c t   t r a n s f e r s   f r o m   c l i e n t - s i d e   a p p l y   t o   k u b e c t l   s e r v e r - s i d e   a p p l y ,   w i t h o u t   e n c o u n t e r i n g   c o n f l i c t s .


Question: What is Caution:?

Answer: K e e p   t h e   l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   u p   t o   d a t e .   T h e   a n n o t a t i o n   i n f e r s   c l i e n t - s i d e   a p p l i e s   m a n a g e d   f i e l d s .   A n y   f i e l d s   n o t   m a n a g e d   b y   c l i e n t - s i d e   a p p l y   r a i s e   c o n f l i c t s .   F o r   e x a m p l e ,   i f   y o u   u s e d   k u b e c t l   s c a l e   t o   u p d a t e   t h e   r e p l i c a s   f i e l d   a f t e r   c l i e n t - s i d e   a p p l y ,   t h e n   t h i s   f i e l d   i s   n o t   o w n e d   b y   c l i e n t - s i d e   a p p l y   a n d   c r e a t e s   c o n f l i c t s   o n   k u b e c t l   a p p l y   - - s e r v e r - s i d e .   T h i s   b e h a v i o r   a p p l i e s   t o   s e r v e r - s i d e   a p p l y   w i t h   t h e   k u b e c t l   f i e l d   m a n a g e r .   A s   a n   e x c e p t i o n ,   y o u   c a n   o p t - o u t   o f   t h i s   b e h a v i o r   b y   s p e c i f y i n g   a   d i f f e r e n t ,   n o n - d e f a u l t   f i e l d   m a n a g e r ,   a s   s e e n   i n   t h e   f o l l o w i n g   e x a m p l e .   T h e   d e f a u l t   f i e l d   m a n a g e r   f o r   k u b e c t l   s e r v e r - s i d e   a p p l y   i s   k u b e c t l .   k u b e c t l   a p p l y   - - s e r v e r - s i d e   - - f i e l d - m a n a g e r = m y - m a n a g e r   [ - - d r y - r u n = s e r v e r ]


Question: What is Downgrading from server-side apply to client-side apply?

Answer: I f   y o u   m a n a g e   a   r e s o u r c e   w i t h   k u b e c t l   a p p l y   - - s e r v e r - s i d e ,   y o u   c a n   d o w n g r a d e   t o   c l i e n t - s i d e   a p p l y   d i r e c t l y   w i t h   k u b e c t l   a p p l y .   D o w n g r a d i n g   w o r k s   b e c a u s e   k u b e c t l   S e r v e r - S i d e   A p p l y   k e e p s   t h e   l a s t - a p p l i e d - c o n f i g u r a t i o n   a n n o t a t i o n   u p - t o - d a t e   i f   y o u   u s e   k u b e c t l   a p p l y .   T h i s   b e h a v i o r   a p p l i e s   t o   S e r v e r - S i d e   A p p l y   w i t h   t h e   k u b e c t l   f i e l d   m a n a g e r .   A s   a n   e x c e p t i o n ,   y o u   c a n   o p t - o u t   o f   t h i s   b e h a v i o r   b y   s p e c i f y i n g   a   d i f f e r e n t ,   n o n - d e f a u l t   f i e l d   m a n a g e r ,   a s   s e e n   i n   t h e   f o l l o w i n g   e x a m p l e .   T h e   d e f a u l t   f i e l d   m a n a g e r   f o r   k u b e c t l   s e r v e r - s i d e   a p p l y   i s   k u b e c t l .   k u b e c t l   a p p l y   - - s e r v e r - s i d e   - - f i e l d - m a n a g e r = m y - m a n a g e r   [ - - d r y - r u n = s e r v e r ]


Question: What is API implementation?

Answer: T h e   P A T C H   v e r b   ( f o r   a n   o b j e c t   t h a t   s u p p o r t s   S e r v e r - S i d e   A p p l y )   a c c e p t s   t h e   u n o f f i c i a l   a p p l i c a t i o n / a p p l y - p a t c h + y a m l   c o n t e n t   t y p e .   U s e r s   o f   S e r v e r - S i d e   A p p l y   c a n   s e n d   p a r t i a l l y   s p e c i f i e d   o b j e c t s   a s   Y A M L   a s   t h e   b o d y   o f   a   P A T C H   r e q u e s t   t o   t h e   U R I   o f   a   r e s o u r c e .   W h e n   a p p l y i n g   a   c o n f i g u r a t i o n ,   y o u   s h o u l d   a l w a y s   i n c l u d e   a l l   t h e   f i e l d s   t h a t   a r e   i m p o r t a n t   t o   t h e   o u t c o m e   ( s u c h   a s   a   d e s i r e d   s t a t e )   t h a t   y o u   w a n t   t o   d e f i n e .   A l l   J S O N   m e s s a g e s   a r e   v a l i d   Y A M L .   T h e r e f o r e ,   i n   a d d i t i o n   t o   u s i n g   Y A M L   r e q u e s t   b o d i e s   f o r   S e r v e r - S i d e   A p p l y   r e q u e s t s ,   y o u   c a n   a l s o   u s e   J S O N   r e q u e s t   b o d i e s ,   a s   t h e y   a r e   a l s o   v a l i d   Y A M L .   I n   e i t h e r   c a s e ,   u s e   t h e   m e d i a   t y p e   a p p l i c a t i o n / a p p l y - p a t c h + y a m l   f o r   t h e   H T T P   r e q u e s t .


Question: What is Access control and permissions?

Answer: S i n c e   S e r v e r - S i d e   A p p l y   i s   a   t y p e   o f   P A T C H ,   a   p r i n c i p a l   ( s u c h   a s   a   R o l e   f o r   K u b e r n e t e s   R B A C )   r e q u i r e s   t h e   p a t c h   p e r m i s s i o n   t o   e d i t   e x i s t i n g   r e s o u r c e s ,   a n d   a l s o   n e e d s   t h e   c r e a t e   v e r b   p e r m i s s i o n   i n   o r d e r   t o   c r e a t e   n e w   r e s o u r c e s   w i t h   S e r v e r - S i d e   A p p l y .


Question: What is Clearing managedFields?

Answer: I t   i s   p o s s i b l e   t o   s t r i p   a l l   m a n a g e d F i e l d s   f r o m   a n   o b j e c t   b y   o v e r w r i t i n g   t h e m   u s i n g   a   p a t c h   ( J S O N   M e r g e   P a t c h ,   S t r a t e g i c   M e r g e   P a t c h ,   J S O N   P a t c h ) ,   o r   t h r o u g h   a n   u p d a t e   ( H T T P   P U T ) ;   i n   o t h e r   w o r d s ,   t h r o u g h   e v e r y   w r i t e   o p e r a t i o n   o t h e r   t h a n   a p p l y .   T h i s   c a n   b e   d o n e   b y   o v e r w r i t i n g   t h e   m a n a g e d F i e l d s   f i e l d   w i t h   a n   e m p t y   e n t r y .   T w o   e x a m p l e s   a r e :   P A T C H   / a p i / v 1 / n a m e s p a c e s / d e f a u l t / c o n f i g m a p s / e x a m p l e - c m   A c c e p t :   a p p l i c a t i o n / j s o n   C o n t e n t - T y p e :   a p p l i c a t i o n / m e r g e - p a t c h + j s o n   {   " m e t a d a t a " :   {   " m a n a g e d F i e l d s " :   [   { }   ]   }   }   P A T C H   / a p i / v 1 / n a m e s p a c e s / d e f a u l t / c o n f i g m a p s / e x a m p l e - c m   A c c e p t :   a p p l i c a t i o n / j s o n   C o n t e n t - T y p e :   a p p l i c a t i o n / j s o n - p a t c h + j s o n   I f - M a t c h :   1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9   [ { " o p " :   " r e p l a c e " ,   " p a t h " :   " / m e t a d a t a / m a n a g e d F i e l d s " ,   " v a l u e " :   [ { } ] } ]   T h i s   w i l l   o v e r w r i t e   t h e   m a n a g e d F i e l d s   w i t h   a   l i s t   c o n t a i n i n g   a   s i n g l e   e m p t y   e n t r y   t h a t   t h e n   r e s u l t s   i n   t h e   m a n a g e d F i e l d s   b e i n g   s t r i p p e d   e n t i r e l y   f r o m   t h e   o b j e c t .   N o t e   t h a t   s e t t i n g   t h e   m a n a g e d F i e l d s   t o   a n   e m p t y   l i s t   w i l l   n o t   r e s e t   t h e   f i e l d .   T h i s   i s   o n   p u r p o s e ,   s o   m a n a g e d F i


Question: What is What's next?

Answer: Y o u   c a n   r e a d   a b o u t   m a n a g e d F i e l d s   w i t h i n   t h e   K u b e r n e t e s   A P I   r e f e r e n c e   f o r   t h e   m e t a d a t a   t o p   l e v e l   f i e l d .


Question: What is Volume Health Monitoring?

Answer: Volume Health MonitoringFEATURE STATE: Kubernetes v1.21 [alpha]CSI volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on PVCs or Pods.Volume health monitoringKubernetes volume health monitoring is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the kubelet.If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related PersistentVolumeClaim (PVC) when an abnormal volume condition is detected on a CSI volume.The External Health Monitor controller also watches for node failure events. You can enable node failure monitoring by setting the enable-node-watcher flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume. In addition, Volume Health information is exposed as Kubelet VolumeStats metrics. A new metric kubelet_volume_stats_health_status_abnormal is added. This metric includes two labels: namespace and persistentvolumeclaim. The count is either 1 or 0. 1 indicates the volume is unhealthy, 0 indicates volume is healthy. For more information, please check KEP.Note:You need to enable the CSIVolumeHealth feature gate to use this feature from the node side.What's nextSee the CSI driver documentation to find out which CSI drivers have implemented this feature.


Question: How does Volume Health Monitoring work?

Answer: Volume Health MonitoringFEATURE STATE: Kubernetes v1.21 [alpha]CSI volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on PVCs or Pods.Volume health monitoringKubernetes volume health monitoring is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the kubelet.If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related PersistentVolumeClaim (PVC) when an abnormal volume condition is detected on a CSI volume.The External Health Monitor controller also watches for node failure events. You can enable node failure monitoring by setting the enable-node-watcher flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume. In addition, Volume Health information is exposed as Kubelet VolumeStats metrics. A new metric kubelet_volume_stats_health_status_abnormal is added. This metric includes two labels: namespace and persistentvolumeclaim. The count is either 1 or 0. 1 indicates the volume is unhealthy, 0 indicates volume is healthy. For more information, please check KEP.Note:You need to enable the CSIVolumeHealth feature gate to use this feature from the node side.What's nextSee the CSI driver documentation to find out which CSI drivers have implemented this feature.


Question: When would you use Volume Health Monitoring?

Answer: Volume Health MonitoringFEATURE STATE: Kubernetes v1.21 [alpha]CSI volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on PVCs or Pods.Volume health monitoringKubernetes volume health monitoring is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the kubelet.If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related PersistentVolumeClaim (PVC) when an abnormal volume condition is detected on a CSI volume.The External Health Monitor controller also watches for node failure events. You can enable node failure monitoring by setting the enable-node-watcher flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume. In addition, Volume Health information is exposed as Kubelet VolumeStats metrics. A new metric kubelet_volume_stats_health_status_abnormal is added. This metric includes two labels: namespace and persistentvolumeclaim. The count is either 1 or 0. 1 indicates the volume is unhealthy, 0 indicates volume is healthy. For more information, please check KEP.Note:You need to enable the CSIVolumeHealth feature gate to use this feature from the node side.What's nextSee the CSI driver documentation to find out which CSI drivers have implemented this feature.


Question: What are the benefits of Volume Health Monitoring?

Answer: Volume Health MonitoringFEATURE STATE: Kubernetes v1.21 [alpha]CSI volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on PVCs or Pods.Volume health monitoringKubernetes volume health monitoring is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the kubelet.If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related PersistentVolumeClaim (PVC) when an abnormal volume condition is detected on a CSI volume.The External Health Monitor controller also watches for node failure events. You can enable node failure monitoring by setting the enable-node-watcher flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume. In addition, Volume Health information is exposed as Kubelet VolumeStats metrics. A new metric kubelet_volume_stats_health_status_abnormal is added. This metric includes two labels: namespace and persistentvolumeclaim. The count is either 1 or 0. 1 indicates the volume is unhealthy, 0 indicates volume is healthy. For more information, please check KEP.Note:You need to enable the CSIVolumeHealth feature gate to use this feature from the node side.What's nextSee the CSI driver documentation to find out which CSI drivers have implemented this feature.


Question: What is Volume Health Monitoring?

Answer: C S I   v o l u m e   h e a l t h   m o n i t o r i n g   a l l o w s   C S I   D r i v e r s   t o   d e t e c t   a b n o r m a l   v o l u m e   c o n d i t i o n s   f r o m   t h e   u n d e r l y i n g   s t o r a g e   s y s t e m s   a n d   r e p o r t   t h e m   a s   e v e n t s   o n   P V C s   o r   P o d s .


Question: What is Volume health monitoring?

Answer: K u b e r n e t e s   v o l u m e   h e a l t h   m o n i t o r i n g   i s   p a r t   o f   h o w   K u b e r n e t e s   i m p l e m e n t s   t h e   C o n t a i n e r   S t o r a g e   I n t e r f a c e   ( C S I ) .   V o l u m e   h e a l t h   m o n i t o r i n g   f e a t u r e   i s   i m p l e m e n t e d   i n   t w o   c o m p o n e n t s :   a n   E x t e r n a l   H e a l t h   M o n i t o r   c o n t r o l l e r ,   a n d   t h e   k u b e l e t .   I f   a   C S I   D r i v e r   s u p p o r t s   V o l u m e   H e a l t h   M o n i t o r i n g   f e a t u r e   f r o m   t h e   c o n t r o l l e r   s i d e ,   a n   e v e n t   w i l l   b e   r e p o r t e d   o n   t h e   r e l a t e d   P e r s i s t e n t V o l u m e C l a i m   ( P V C )   w h e n   a n   a b n o r m a l   v o l u m e   c o n d i t i o n   i s   d e t e c t e d   o n   a   C S I   v o l u m e .   T h e   E x t e r n a l   H e a l t h   M o n i t o r   c o n t r o l l e r   a l s o   w a t c h e s   f o r   n o d e   f a i l u r e   e v e n t s .   Y o u   c a n   e n a b l e   n o d e   f a i l u r e   m o n i t o r i n g   b y   s e t t i n g   t h e   e n a b l e - n o d e - w a t c h e r   f l a g   t o   t r u e .   W h e n   t h e   e x t e r n a l   h e a l t h   m o n i t o r   d e t e c t s   a   n o d e   f a i l u r e   e v e n t ,   t h e   c o n t r o l l e r   r e p o r t s   a n   E v e n t   w i l l   b e   r e p o r t e d   o n   t h e   P V C   t o   i n d i c a t e   t h a t   p o d s   u s i n g   t h i s   P V C   a r e   o n   a   f a i l e d   n o d e .   I f   a   C S I   D r i v e r   s u p p o r t s   V o l u m e   H e a l t h   M o n i t o r i n g   f e a t u r e   f r o m   t h e   n o d e   s i d e ,   a n   E v e n t   w i l l   b e   r e p o r t e d   o n   e v e r y   P o d   u s i n g   t h e   P V C   w h e n   a n   a b n o r m a l   v o l u m e   c o n d i t i o n   i s   d e t e c t e d   o n   a   C S I   v o l u m e .   I n   a d d i t


Question: What is What's next?

Answer: S e e   t h e   C S I   d r i v e r   d o c u m e n t a t i o n   t o   f i n d   o u t   w h i c h   C S I   d r i v e r s   h a v e   i m p l e m e n t e d   t h i s   f e a t u r e .


Question: What is Manage TLS Certificates in a Cluster?

Answer: Manage TLS Certificates in a ClusterKubernetes provides a certificates.k8s.io API, which lets you provision TLS certificates signed by a Certificate Authority (CA) that you control. These CA and certificates can be used by your workloads to establish trust.certificates.k8s.io API uses a protocol that is similar to the ACME draft.Note:Certificates created using the certificates.k8s.io API are signed by a dedicated CA. It is possible to configure your cluster to use the cluster root CA for this purpose, but you should never rely on this. Do not assume that these certificates will validate against the cluster root CA.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the cfssl tool. You can download cfssl from https://github.com/cloudflare/cfssl/releases.Some steps in this page use the jq tool. If you don't have jq, you can install it via your operating system's software sources, or fetch it from https://jqlang.github.io/jq/.Trusting TLS in a clusterTrusting the custom CA from an application running as a pod usually requires some extra application configuration. You will need to add the CA certificate bundle to the list of CA certificates that the TLS client or server trusts. For example, you would do this with a golang TLS config by parsing the certificate chain and adding the parsed certificates to the RootCAs field in the tls.Config struct.Note:Even though the custom CA certificate may be included in the filesystem (in the ConfigMap kube-root-ca.crt), you should not use that certificate authority for any purpose other than to verify internal Kubernetes endpoints. An example of an internal Kubernetes endpoint is the Service named kubernetes in the default namespace.If you want to use a custom certificate authority for your workloads, you should generate that CA separately, and distribute its CA certificate using a ConfigMap that your pods have access to read.Requesting a certificateThe following section demonstrates how to create a TLS certificate for a Kubernetes service accessed through DNS.Note:This tutorial uses CFSSL: Cloudflare's PKI and TLS toolkit click here to know more.Create a certificate signing requestGenerate a private key and certificate signing request (or CSR) by running the following command:cat <<EOF | cfssl genkey - | cfssljson -bare server { "hosts": [ "my-svc.my-namespace.svc.cluster.local", "my-pod.my-namespace.pod.cluster.local", "192.0.2.24", "10.0.34.2" ], "CN": "my-pod.my-namespace.pod.cluster.local", "key": { "algo": "ecdsa", "size": 256 } } EOF Where 192.0.2.24 is the service's cluster IP, my-svc.my-namespace.svc.cluster.local is


Question: How does Manage TLS Certificates in a Cluster work?

Answer: Manage TLS Certificates in a ClusterKubernetes provides a certificates.k8s.io API, which lets you provision TLS certificates signed by a Certificate Authority (CA) that you control. These CA and certificates can be used by your workloads to establish trust.certificates.k8s.io API uses a protocol that is similar to the ACME draft.Note:Certificates created using the certificates.k8s.io API are signed by a dedicated CA. It is possible to configure your cluster to use the cluster root CA for this purpose, but you should never rely on this. Do not assume that these certificates will validate against the cluster root CA.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the cfssl tool. You can download cfssl from https://github.com/cloudflare/cfssl/releases.Some steps in this page use the jq tool. If you don't have jq, you can install it via your operating system's software sources, or fetch it from https://jqlang.github.io/jq/.Trusting TLS in a clusterTrusting the custom CA from an application running as a pod usually requires some extra application configuration. You will need to add the CA certificate bundle to the list of CA certificates that the TLS client or server trusts. For example, you would do this with a golang TLS config by parsing the certificate chain and adding the parsed certificates to the RootCAs field in the tls.Config struct.Note:Even though the custom CA certificate may be included in the filesystem (in the ConfigMap kube-root-ca.crt), you should not use that certificate authority for any purpose other than to verify internal Kubernetes endpoints. An example of an internal Kubernetes endpoint is the Service named kubernetes in the default namespace.If you want to use a custom certificate authority for your workloads, you should generate that CA separately, and distribute its CA certificate using a ConfigMap that your pods have access to read.Requesting a certificateThe following section demonstrates how to create a TLS certificate for a Kubernetes service accessed through DNS.Note:This tutorial uses CFSSL: Cloudflare's PKI and TLS toolkit click here to know more.Create a certificate signing requestGenerate a private key and certificate signing request (or CSR) by running the following command:cat <<EOF | cfssl genkey - | cfssljson -bare server { "hosts": [ "my-svc.my-namespace.svc.cluster.local", "my-pod.my-namespace.pod.cluster.local", "192.0.2.24", "10.0.34.2" ], "CN": "my-pod.my-namespace.pod.cluster.local", "key": { "algo": "ecdsa", "size": 256 } } EOF Where 192.0.2.24 is the service's cluster IP, my-svc.my-namespace.svc.cluster.local is


Question: When would you use Manage TLS Certificates in a Cluster?

Answer: Manage TLS Certificates in a ClusterKubernetes provides a certificates.k8s.io API, which lets you provision TLS certificates signed by a Certificate Authority (CA) that you control. These CA and certificates can be used by your workloads to establish trust.certificates.k8s.io API uses a protocol that is similar to the ACME draft.Note:Certificates created using the certificates.k8s.io API are signed by a dedicated CA. It is possible to configure your cluster to use the cluster root CA for this purpose, but you should never rely on this. Do not assume that these certificates will validate against the cluster root CA.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the cfssl tool. You can download cfssl from https://github.com/cloudflare/cfssl/releases.Some steps in this page use the jq tool. If you don't have jq, you can install it via your operating system's software sources, or fetch it from https://jqlang.github.io/jq/.Trusting TLS in a clusterTrusting the custom CA from an application running as a pod usually requires some extra application configuration. You will need to add the CA certificate bundle to the list of CA certificates that the TLS client or server trusts. For example, you would do this with a golang TLS config by parsing the certificate chain and adding the parsed certificates to the RootCAs field in the tls.Config struct.Note:Even though the custom CA certificate may be included in the filesystem (in the ConfigMap kube-root-ca.crt), you should not use that certificate authority for any purpose other than to verify internal Kubernetes endpoints. An example of an internal Kubernetes endpoint is the Service named kubernetes in the default namespace.If you want to use a custom certificate authority for your workloads, you should generate that CA separately, and distribute its CA certificate using a ConfigMap that your pods have access to read.Requesting a certificateThe following section demonstrates how to create a TLS certificate for a Kubernetes service accessed through DNS.Note:This tutorial uses CFSSL: Cloudflare's PKI and TLS toolkit click here to know more.Create a certificate signing requestGenerate a private key and certificate signing request (or CSR) by running the following command:cat <<EOF | cfssl genkey - | cfssljson -bare server { "hosts": [ "my-svc.my-namespace.svc.cluster.local", "my-pod.my-namespace.pod.cluster.local", "192.0.2.24", "10.0.34.2" ], "CN": "my-pod.my-namespace.pod.cluster.local", "key": { "algo": "ecdsa", "size": 256 } } EOF Where 192.0.2.24 is the service's cluster IP, my-svc.my-namespace.svc.cluster.local is


Question: What are the benefits of Manage TLS Certificates in a Cluster?

Answer: Manage TLS Certificates in a ClusterKubernetes provides a certificates.k8s.io API, which lets you provision TLS certificates signed by a Certificate Authority (CA) that you control. These CA and certificates can be used by your workloads to establish trust.certificates.k8s.io API uses a protocol that is similar to the ACME draft.Note:Certificates created using the certificates.k8s.io API are signed by a dedicated CA. It is possible to configure your cluster to use the cluster root CA for this purpose, but you should never rely on this. Do not assume that these certificates will validate against the cluster root CA.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesYou need the cfssl tool. You can download cfssl from https://github.com/cloudflare/cfssl/releases.Some steps in this page use the jq tool. If you don't have jq, you can install it via your operating system's software sources, or fetch it from https://jqlang.github.io/jq/.Trusting TLS in a clusterTrusting the custom CA from an application running as a pod usually requires some extra application configuration. You will need to add the CA certificate bundle to the list of CA certificates that the TLS client or server trusts. For example, you would do this with a golang TLS config by parsing the certificate chain and adding the parsed certificates to the RootCAs field in the tls.Config struct.Note:Even though the custom CA certificate may be included in the filesystem (in the ConfigMap kube-root-ca.crt), you should not use that certificate authority for any purpose other than to verify internal Kubernetes endpoints. An example of an internal Kubernetes endpoint is the Service named kubernetes in the default namespace.If you want to use a custom certificate authority for your workloads, you should generate that CA separately, and distribute its CA certificate using a ConfigMap that your pods have access to read.Requesting a certificateThe following section demonstrates how to create a TLS certificate for a Kubernetes service accessed through DNS.Note:This tutorial uses CFSSL: Cloudflare's PKI and TLS toolkit click here to know more.Create a certificate signing requestGenerate a private key and certificate signing request (or CSR) by running the following command:cat <<EOF | cfssl genkey - | cfssljson -bare server { "hosts": [ "my-svc.my-namespace.svc.cluster.local", "my-pod.my-namespace.pod.cluster.local", "192.0.2.24", "10.0.34.2" ], "CN": "my-pod.my-namespace.pod.cluster.local", "key": { "algo": "ecdsa", "size": 256 } } EOF Where 192.0.2.24 is the service's cluster IP, my-svc.my-namespace.svc.cluster.local is


Question: What is Manage TLS Certificates in a Cluster?

Answer: K u b e r n e t e s   p r o v i d e s   a   c e r t i f i c a t e s . k 8 s . i o   A P I ,   w h i c h   l e t s   y o u   p r o v i s i o n   T L S   c e r t i f i c a t e s   s i g n e d   b y   a   C e r t i f i c a t e   A u t h o r i t y   ( C A )   t h a t   y o u   c o n t r o l .   T h e s e   C A   a n d   c e r t i f i c a t e s   c a n   b e   u s e d   b y   y o u r   w o r k l o a d s   t o   e s t a b l i s h   t r u s t .   c e r t i f i c a t e s . k 8 s . i o   A P I   u s e s   a   p r o t o c o l   t h a t   i s   s i m i l a r   t o   t h e   A C M E   d r a f t .


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s :   i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s   Y o u   n e e d   t h e   c f s s l   t o o l .   Y o u   c a n   d o w n l o a d   c f s s l   f r o m   h t t p s : / / g i t h u b . c o m / c l o u d f l a r e / c f s s l / r e l e a s e s .   S o m e   s t e p s   i n   t h i s   p a g e   u s e   t h e   j q   t o o l .   I f   y o u   d o n ' t   h a v e   j q ,   y o u   c a n   i n s t a l l   i t   v i a   y o u r   o p e r a t i n g   s y s t e m ' s   s o f t w a r e   s o u r c e s ,   o r   f e t c h   i t   f r o m   h t t p s : / / j q l a n g . g i t h u b . i o / j q / .


Question: What is Trusting TLS in a cluster?

Answer: T r u s t i n g   t h e   c u s t o m   C A   f r o m   a n   a p p l i c a t i o n   r u n n i n g   a s   a   p o d   u s u a l l y   r e q u i r e s   s o m e   e x t r a   a p p l i c a t i o n   c o n f i g u r a t i o n .   Y o u   w i l l   n e e d   t o   a d d   t h e   C A   c e r t i f i c a t e   b u n d l e   t o   t h e   l i s t   o f   C A   c e r t i f i c a t e s   t h a t   t h e   T L S   c l i e n t   o r   s e r v e r   t r u s t s .   F o r   e x a m p l e ,   y o u   w o u l d   d o   t h i s   w i t h   a   g o l a n g   T L S   c o n f i g   b y   p a r s i n g   t h e   c e r t i f i c a t e   c h a i n   a n d   a d d i n g   t h e   p a r s e d   c e r t i f i c a t e s   t o   t h e   R o o t C A s   f i e l d   i n   t h e   t l s . C o n f i g   s t r u c t .


Question: What is Note:?

Answer: E v e n   t h o u g h   t h e   c u s t o m   C A   c e r t i f i c a t e   m a y   b e   i n c l u d e d   i n   t h e   f i l e s y s t e m   ( i n   t h e   C o n f i g M a p   k u b e - r o o t - c a . c r t ) ,   y o u   s h o u l d   n o t   u s e   t h a t   c e r t i f i c a t e   a u t h o r i t y   f o r   a n y   p u r p o s e   o t h e r   t h a n   t o   v e r i f y   i n t e r n a l   K u b e r n e t e s   e n d p o i n t s .   A n   e x a m p l e   o f   a n   i n t e r n a l   K u b e r n e t e s   e n d p o i n t   i s   t h e   S e r v i c e   n a m e d   k u b e r n e t e s   i n   t h e   d e f a u l t   n a m e s p a c e .   I f   y o u   w a n t   t o   u s e   a   c u s t o m   c e r t i f i c a t e   a u t h o r i t y   f o r   y o u r   w o r k l o a d s ,   y o u   s h o u l d   g e n e r a t e   t h a t   C A   s e p a r a t e l y ,   a n d   d i s t r i b u t e   i t s   C A   c e r t i f i c a t e   u s i n g   a   C o n f i g M a p   t h a t   y o u r   p o d s   h a v e   a c c e s s   t o   r e a d .


Question: What is Requesting a certificate?

Answer: T h e   f o l l o w i n g   s e c t i o n   d e m o n s t r a t e s   h o w   t o   c r e a t e   a   T L S   c e r t i f i c a t e   f o r   a   K u b e r n e t e s   s e r v i c e   a c c e s s e d   t h r o u g h   D N S .


Question: What is Create a certificate signing request?

Answer: G e n e r a t e   a   p r i v a t e   k e y   a n d   c e r t i f i c a t e   s i g n i n g   r e q u e s t   ( o r   C S R )   b y   r u n n i n g   t h e   f o l l o w i n g   c o m m a n d :   c a t   < < E O F   |   c f s s l   g e n k e y   -   |   c f s s l j s o n   - b a r e   s e r v e r   {   " h o s t s " :   [   " m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r . l o c a l " ,   " m y - p o d . m y - n a m e s p a c e . p o d . c l u s t e r . l o c a l " ,   " 1 9 2 . 0 . 2 . 2 4 " ,   " 1 0 . 0 . 3 4 . 2 "   ] ,   " C N " :   " m y - p o d . m y - n a m e s p a c e . p o d . c l u s t e r . l o c a l " ,   " k e y " :   {   " a l g o " :   " e c d s a " ,   " s i z e " :   2 5 6   }   }   E O F   W h e r e   1 9 2 . 0 . 2 . 2 4   i s   t h e   s e r v i c e ' s   c l u s t e r   I P ,   m y - s v c . m y - n a m e s p a c e . s v c . c l u s t e r . l o c a l   i s   t h e   s e r v i c e ' s   D N S   n a m e ,   1 0 . 0 . 3 4 . 2   i s   t h e   p o d ' s   I P   a n d   m y - p o d . m y - n a m e s p a c e . p o d . c l u s t e r . l o c a l   i s   t h e   p o d ' s   D N S   n a m e .   Y o u   s h o u l d   s e e   t h e   o u t p u t   s i m i l a r   t o :   2 0 2 2 / 0 2 / 0 1   1 1 : 4 5 : 3 2   [ I N F O ]   g e n e r a t e   r e c e i v e d   r e q u e s t   2 0 2 2 / 0 2 / 0 1   1 1 : 4 5 : 3 2   [ I N F O ]   r e c e i v e d   C S R   2 0 2 2 / 0 2 / 0 1   1 1 : 4 5 : 3 2   [ I N F O ]   g e n e r a t i n g   k e y :   e c d s a - 2 5 6   2 0 2 2 / 0 2 / 0 1   1 1 : 4 5 : 3 2   [ I N F O ]   e n c o d e d   C S R   T h i s   c o m m a n d   g e n e r a t e s   t w o   f i l e s ;   i t   g e n e r a t e s   s e r v e r . c s r   c o n t a i n i n g   t h e   P E M   e n c o d e d   P K C S # 1 0   c e r t i f i c a t i o n   r e q u e s t ,   a n d   s e r v e r - k e y . p e m   c o n t a i n i n g   t h e   P E M   e n c o d e d   k e y   t o   t h e   c e r t i f i c a t e   t h a t   i s   s t i l l   t o   b e   c r e


Question: What is Create a CertificateSigningRequest object to send to the Kubernetes API?

Answer: G e n e r a t e   a   C S R   m a n i f e s t   ( i n   Y A M L ) ,   a n d   s e n d   i t   t o   t h e   A P I   s e r v e r .   Y o u   c a n   d o   t h a t   b y   r u n n i n g   t h e   f o l l o w i n g   c o m m a n d :   c a t   < < E O F   |   k u b e c t l   a p p l y   - f   -   a p i V e r s i o n :   c e r t i f i c a t e s . k 8 s . i o / v 1   k i n d :   C e r t i f i c a t e S i g n i n g R e q u e s t   m e t a d a t a :   n a m e :   m y - s v c . m y - n a m e s p a c e   s p e c :   r e q u e s t :   $ ( c a t   s e r v e r . c s r   |   b a s e 6 4   |   t r   - d   ' \ n ' )   s i g n e r N a m e :   e x a m p l e . c o m / s e r v i n g   u s a g e s :   -   d i g i t a l   s i g n a t u r e   -   k e y   e n c i p h e r m e n t   -   s e r v e r   a u t h   E O F   N o t i c e   t h a t   t h e   s e r v e r . c s r   f i l e   c r e a t e d   i n   s t e p   1   i s   b a s e 6 4   e n c o d e d   a n d   s t a s h e d   i n   t h e   . s p e c . r e q u e s t   f i e l d .   Y o u   a r e   a l s o   r e q u e s t i n g   a   c e r t i f i c a t e   w i t h   t h e   " d i g i t a l   s i g n a t u r e " ,   " k e y   e n c i p h e r m e n t " ,   a n d   " s e r v e r   a u t h "   k e y   u s a g e s ,   s i g n e d   b y   a n   e x a m p l e   e x a m p l e . c o m / s e r v i n g   s i g n e r .   A   s p e c i f i c   s i g n e r N a m e   m u s t   b e   r e q u e s t e d .   V i e w   d o c u m e n t a t i o n   f o r   s u p p o r t e d   s i g n e r   n a m e s   f o r   m o r e   i n f o r m a t i o n .   T h e   C S R   s h o u l d   n o w   b e   v i s i b l e   f r o m   t h e   A P I   i n   a   P e n d i n g   s t a t e .   Y o u   c a n   s e e   i t   b y   r u n n i n g :   k u b e c t l   d e s c r i b e   c s r   m y - s v c . m y - n a m e s p a c e   N a m e :   m y - s v c . m y - n a m e s p a c e   L a b e l s :   < n o n e >   A n n o t a t i o n s :   < n o n e >   C r e a t i o n T i m e s t a m p :   T u e


Question: What is Get the CertificateSigningRequest approved?

Answer: A p p r o v i n g   t h e   c e r t i f i c a t e   s i g n i n g   r e q u e s t   i s   e i t h e r   d o n e   b y   a n   a u t o m a t e d   a p p r o v a l   p r o c e s s   o r   o n   a   o n e   o f f   b a s i s   b y   a   c l u s t e r   a d m i n i s t r a t o r .   I f   y o u ' r e   a u t h o r i z e d   t o   a p p r o v e   a   c e r t i f i c a t e   r e q u e s t ,   y o u   c a n   d o   t h a t   m a n u a l l y   u s i n g   k u b e c t l ;   f o r   e x a m p l e :   k u b e c t l   c e r t i f i c a t e   a p p r o v e   m y - s v c . m y - n a m e s p a c e   c e r t i f i c a t e s i g n i n g r e q u e s t . c e r t i f i c a t e s . k 8 s . i o / m y - s v c . m y - n a m e s p a c e   a p p r o v e d   Y o u   s h o u l d   n o w   s e e   t h e   f o l l o w i n g :   k u b e c t l   g e t   c s r   N A M E   A G E   S I G N E R N A M E   R E Q U E S T O R   R E Q U E S T E D D U R A T I O N   C O N D I T I O N   m y - s v c . m y - n a m e s p a c e   1 0 m   e x a m p l e . c o m / s e r v i n g   y o u r n a m e @ e x a m p l e . c o m   < n o n e >   A p p r o v e d   T h i s   m e a n s   t h e   c e r t i f i c a t e   r e q u e s t   h a s   b e e n   a p p r o v e d   a n d   i s   w a i t i n g   f o r   t h e   r e q u e s t e d   s i g n e r   t o   s i g n   i t .


Question: What is Sign the CertificateSigningRequest?

Answer: N e x t ,   y o u ' l l   p l a y   t h e   p a r t   o f   a   c e r t i f i c a t e   s i g n e r ,   i s s u e   t h e   c e r t i f i c a t e ,   a n d   u p l o a d   i t   t o   t h e   A P I .   A   s i g n e r   w o u l d   t y p i c a l l y   w a t c h   t h e   C e r t i f i c a t e S i g n i n g R e q u e s t   A P I   f o r   o b j e c t s   w i t h   i t s   s i g n e r N a m e ,   c h e c k   t h a t   t h e y   h a v e   b e e n   a p p r o v e d ,   s i g n   c e r t i f i c a t e s   f o r   t h o s e   r e q u e s t s ,   a n d   u p d a t e   t h e   A P I   o b j e c t   s t a t u s   w i t h   t h e   i s s u e d   c e r t i f i c a t e .


Question: What is Create a Certificate Authority?

Answer: Y o u   n e e d   a n   a u t h o r i t y   t o   p r o v i d e   t h e   d i g i t a l   s i g n a t u r e   o n   t h e   n e w   c e r t i f i c a t e .   F i r s t ,   c r e a t e   a   s i g n i n g   c e r t i f i c a t e   b y   r u n n i n g   t h e   f o l l o w i n g :   c a t   < < E O F   |   c f s s l   g e n c e r t   - i n i t c a   -   |   c f s s l j s o n   - b a r e   c a   {   " C N " :   " M y   E x a m p l e   S i g n e r " ,   " k e y " :   {   " a l g o " :   " r s a " ,   " s i z e " :   2 0 4 8   }   }   E O F   Y o u   s h o u l d   s e e   o u t p u t   s i m i l a r   t o :   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   g e n e r a t i n g   a   n e w   C A   k e y   a n d   c e r t i f i c a t e   f r o m   C S R   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   g e n e r a t e   r e c e i v e d   r e q u e s t   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   r e c e i v e d   C S R   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   g e n e r a t i n g   k e y :   r s a - 2 0 4 8   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   e n c o d e d   C S R   2 0 2 2 / 0 2 / 0 1   1 1 : 5 0 : 3 9   [ I N F O ]   s i g n e d   c e r t i f i c a t e   w i t h   s e r i a l   n u m b e r   2 6 3 9 8 3 1 5 1 0 1 3 6 8 6 7 2 0 8 9 9 7 1 6 3 5 4 3 4 9 6 0 5 5 0 0 7 9 7 8 3 4 5 8 0 4 7 2   T h i s   p r o d u c e s   a   c e r t i f i c a t e   a u t h o r i t y   k e y   f i l e   ( c a - k e y . p e m )   a n d   c e r t i f i c a t e   ( c a . p e m ) .


Question: What is Issue a certificate?

Answer: {   " s i g n i n g " :   {   " d e f a u l t " :   {   " u s a g e s " :   [   " d i g i t a l   s i g n a t u r e " ,   " k e y   e n c i p h e r m e n t " ,   " s e r v e r   a u t h "   ] ,   " e x p i r y " :   " 8 7 6 0 0 0 h " ,   " c a _ c o n s t r a i n t " :   {   " i s _ c a " :   f a l s e   }   }   }   }   U s e   a   s e r v e r - s i g n i n g - c o n f i g . j s o n   s i g n i n g   c o n f i g u r a t i o n   a n d   t h e   c e r t i f i c a t e   a u t h o r i t y   k e y   f i l e   a n d   c e r t i f i c a t e   t o   s i g n   t h e   c e r t i f i c a t e   r e q u e s t :   k u b e c t l   g e t   c s r   m y - s v c . m y - n a m e s p a c e   - o   j s o n p a t h = ' { . s p e c . r e q u e s t } '   |   \   b a s e 6 4   - - d e c o d e   |   \   c f s s l   s i g n   - c a   c a . p e m   - c a - k e y   c a - k e y . p e m   - c o n f i g   s e r v e r - s i g n i n g - c o n f i g . j s o n   -   |   \   c f s s l j s o n   - b a r e   c a - s i g n e d - s e r v e r   Y o u   s h o u l d   s e e   t h e   o u t p u t   s i m i l a r   t o :   2 0 2 2 / 0 2 / 0 1   1 1 : 5 2 : 2 6   [ I N F O ]   s i g n e d   c e r t i f i c a t e   w i t h   s e r i a l   n u m b e r   5 7 6 0 4 8 9 2 8 6 2 4 9 2 6 5 8 4 3 8 1 4 1 5 9 3 6 7 0 0 9 1 4 5 3 0 5 3 4 4 7 2 8 7 0 3 3 7   T h i s   p r o d u c e s   a   s i g n e d   s e r v i n g   c e r t i f i c a t e   f i l e ,   c a - s i g n e d - s e r v e r . p e m .


Question: What is Upload the signed certificate?

Answer: F i n a l l y ,   p o p u l a t e   t h e   s i g n e d   c e r t i f i c a t e   i n   t h e   A P I   o b j e c t ' s   s t a t u s :   k u b e c t l   g e t   c s r   m y - s v c . m y - n a m e s p a c e   - o   j s o n   |   \   j q   ' . s t a t u s . c e r t i f i c a t e   =   " ' $ ( b a s e 6 4   c a - s i g n e d - s e r v e r . p e m   |   t r   - d   ' \ n ' ) ' " '   |   \   k u b e c t l   r e p l a c e   - - r a w   / a p i s / c e r t i f i c a t e s . k 8 s . i o / v 1 / c e r t i f i c a t e s i g n i n g r e q u e s t s / m y - s v c . m y - n a m e s p a c e / s t a t u s   - f   -


Question: What is Note:?

Answer: O n c e   t h e   C S R   i s   a p p r o v e d   a n d   t h e   s i g n e d   c e r t i f i c a t e   i s   u p l o a d e d ,   r u n :   k u b e c t l   g e t   c s r   T h e   o u t p u t   i s   s i m i l a r   t o :   N A M E   A G E   S I G N E R N A M E   R E Q U E S T O R   R E Q U E S T E D D U R A T I O N   C O N D I T I O N   m y - s v c . m y - n a m e s p a c e   2 0 m   e x a m p l e . c o m / s e r v i n g   y o u r n a m e @ e x a m p l e . c o m   < n o n e >   A p p r o v e d , I s s u e d


Question: What is Download the certificate and use it?

Answer: N o w ,   a s   t h e   r e q u e s t i n g   u s e r ,   y o u   c a n   d o w n l o a d   t h e   i s s u e d   c e r t i f i c a t e   a n d   s a v e   i t   t o   a   s e r v e r . c r t   f i l e   b y   r u n n i n g   t h e   f o l l o w i n g :   k u b e c t l   g e t   c s r   m y - s v c . m y - n a m e s p a c e   - o   j s o n p a t h = ' { . s t a t u s . c e r t i f i c a t e } '   \   |   b a s e 6 4   - - d e c o d e   >   s e r v e r . c r t   N o w   y o u   c a n   p o p u l a t e   s e r v e r . c r t   a n d   s e r v e r - k e y . p e m   i n   a   S e c r e t   t h a t   y o u   c o u l d   l a t e r   m o u n t   i n t o   a   P o d   ( f o r   e x a m p l e ,   t o   u s e   w i t h   a   w e b s e r v e r   t h a t   s e r v e s   H T T P S ) .   k u b e c t l   c r e a t e   s e c r e t   t l s   s e r v e r   - - c e r t   s e r v e r . c r t   - - k e y   s e r v e r - k e y . p e m   s e c r e t / s e r v e r   c r e a t e d   F i n a l l y ,   y o u   c a n   p o p u l a t e   c a . p e m   i n t o   a   C o n f i g M a p   a n d   u s e   i t   a s   t h e   t r u s t   r o o t   t o   v e r i f y   t h e   s e r v i n g   c e r t i f i c a t e :   k u b e c t l   c r e a t e   c o n f i g m a p   e x a m p l e - s e r v i n g - c a   - - f r o m - f i l e   c a . c r t = c a . p e m   c o n f i g m a p / e x a m p l e - s e r v i n g - c a   c r e a t e d


Question: What is Approving CertificateSigningRequests?

Answer: A   K u b e r n e t e s   a d m i n i s t r a t o r   ( w i t h   a p p r o p r i a t e   p e r m i s s i o n s )   c a n   m a n u a l l y   a p p r o v e   ( o r   d e n y )   C e r t i f i c a t e S i g n i n g R e q u e s t s   b y   u s i n g   t h e   k u b e c t l   c e r t i f i c a t e   a p p r o v e   a n d   k u b e c t l   c e r t i f i c a t e   d e n y   c o m m a n d s .   H o w e v e r   i f   y o u   i n t e n d   t o   m a k e   h e a v y   u s a g e   o f   t h i s   A P I ,   y o u   m i g h t   c o n s i d e r   w r i t i n g   a n   a u t o m a t e d   c e r t i f i c a t e s   c o n t r o l l e r .


Question: What is Caution:?

Answer: T h e   a b i l i t y   t o   a p p r o v e   C S R s   d e c i d e s   w h o   t r u s t s   w h o m   w i t h i n   y o u r   e n v i r o n m e n t .   T h e   a b i l i t y   t o   a p p r o v e   C S R s   s h o u l d   n o t   b e   g r a n t e d   b r o a d l y   o r   l i g h t l y .   Y o u   s h o u l d   m a k e   s u r e   t h a t   y o u   c o n f i d e n t l y   u n d e r s t a n d   b o t h   t h e   v e r i f i c a t i o n   r e q u i r e m e n t s   t h a t   f a l l   o n   t h e   a p p r o v e r   a n d   t h e   r e p e r c u s s i o n s   o f   i s s u i n g   a   s p e c i f i c   c e r t i f i c a t e   b e f o r e   y o u   g r a n t   t h e   a p p r o v e   p e r m i s s i o n .   W h e t h e r   a   m a c h i n e   o r   a   h u m a n   u s i n g   k u b e c t l   a s   a b o v e ,   t h e   r o l e   o f   t h e   a p p r o v e r   i s   t o   v e r i f y   t h a t   t h e   C S R   s a t i s f i e s   t w o   r e q u i r e m e n t s :   T h e   s u b j e c t   o f   t h e   C S R   c o n t r o l s   t h e   p r i v a t e   k e y   u s e d   t o   s i g n   t h e   C S R .   T h i s   a d d r e s s e s   t h e   t h r e a t   o f   a   t h i r d   p a r t y   m a s q u e r a d i n g   a s   a n   a u t h o r i z e d   s u b j e c t .   I n   t h e   a b o v e   e x a m p l e ,   t h i s   s t e p   w o u l d   b e   t o   v e r i f y   t h a t   t h e   p o d   c o n t r o l s   t h e   p r i v a t e   k e y   u s e d   t o   g e n e r a t e   t h e   C S R . T h e   s u b j e c t   o f   t h e   C S R   i s   a u t h o r i z e d   t o   a c t   i n   t h e   r e q u e s t e d   c o n t e x t .   T h i s   a d d r e s s e s   t h e   t h r e a t   o f   a n   u n d e s i r e d   s u b j e c t   j o i n i n g   t h e   c l u s t e r .   I n   t h e   a b o v e   e x a m p l e ,   t h i s   s t e p   w o u l d   b e   t o   v e r i f y   t h a t   t h e   p o d   i s   a l l o w e d   t o   p a r t i c i p a t e   i n   t h e   r e q u e s


Question: What is Configuring your cluster to provide signing?

Answer: T h i s   p a g e   a s s u m e s   t h a t   a   s i g n e r   i s   s e t   u p   t o   s e r v e   t h e   c e r t i f i c a t e s   A P I .   T h e   K u b e r n e t e s   c o n t r o l l e r   m a n a g e r   p r o v i d e s   a   d e f a u l t   i m p l e m e n t a t i o n   o f   a   s i g n e r .   T o   e n a b l e   i t ,   p a s s   t h e   - - c l u s t e r - s i g n i n g - c e r t - f i l e   a n d   - - c l u s t e r - s i g n i n g - k e y - f i l e   p a r a m e t e r s   t o   t h e   c o n t r o l l e r   m a n a g e r   w i t h   p a t h s   t o   y o u r   C e r t i f i c a t e   A u t h o r i t y ' s   k e y p a i r .


Question: What is CronJob?

Answer: CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1import "k8s.io/api/batch/v1"CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1kind: CronJobmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (CronJobSpec)Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (CronJobStatus)Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusCronJobSpecCronJobSpec describes how the job execution will look like and when it will actually run.jobTemplate (JobTemplateSpec), requiredSpecifies the job that will be created when executing a CronJob.JobTemplateSpec describes the data a Job should have when created from a templatejobTemplate.metadata (ObjectMeta)Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadatajobTemplate.spec (JobSpec)Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusschedule (string), requiredThe schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.timeZone (string)The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zonesconcurrencyPolicy (string)Specifies how to treat concurrent executions of a Job. Valid values are:"Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping


Question: How does CronJob work?

Answer: CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1import "k8s.io/api/batch/v1"CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1kind: CronJobmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (CronJobSpec)Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (CronJobStatus)Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusCronJobSpecCronJobSpec describes how the job execution will look like and when it will actually run.jobTemplate (JobTemplateSpec), requiredSpecifies the job that will be created when executing a CronJob.JobTemplateSpec describes the data a Job should have when created from a templatejobTemplate.metadata (ObjectMeta)Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadatajobTemplate.spec (JobSpec)Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusschedule (string), requiredThe schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.timeZone (string)The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zonesconcurrencyPolicy (string)Specifies how to treat concurrent executions of a Job. Valid values are:"Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping


Question: When would you use CronJob?

Answer: CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1import "k8s.io/api/batch/v1"CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1kind: CronJobmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (CronJobSpec)Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (CronJobStatus)Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusCronJobSpecCronJobSpec describes how the job execution will look like and when it will actually run.jobTemplate (JobTemplateSpec), requiredSpecifies the job that will be created when executing a CronJob.JobTemplateSpec describes the data a Job should have when created from a templatejobTemplate.metadata (ObjectMeta)Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadatajobTemplate.spec (JobSpec)Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusschedule (string), requiredThe schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.timeZone (string)The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zonesconcurrencyPolicy (string)Specifies how to treat concurrent executions of a Job. Valid values are:"Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping


Question: What are the benefits of CronJob?

Answer: CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1import "k8s.io/api/batch/v1"CronJobCronJob represents the configuration of a single cron job.apiVersion: batch/v1kind: CronJobmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataspec (CronJobSpec)Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusstatus (CronJobStatus)Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusCronJobSpecCronJobSpec describes how the job execution will look like and when it will actually run.jobTemplate (JobTemplateSpec), requiredSpecifies the job that will be created when executing a CronJob.JobTemplateSpec describes the data a Job should have when created from a templatejobTemplate.metadata (ObjectMeta)Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadatajobTemplate.spec (JobSpec)Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusschedule (string), requiredThe schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.timeZone (string)The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zonesconcurrencyPolicy (string)Specifies how to treat concurrent executions of a Job. Valid values are:"Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping


Question: What is CronJob?

Answer: a p i V e r s i o n :   b a t c h / v 1   i m p o r t   " k 8 s . i o / a p i / b a t c h / v 1 "


Question: What is CronJob?

Answer: C r o n J o b   r e p r e s e n t s   t h e   c o n f i g u r a t i o n   o f   a   s i n g l e   c r o n   j o b .   a p i V e r s i o n :   b a t c h / v 1 k i n d :   C r o n J o b m e t a d a t a   ( O b j e c t M e t a ) S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a s p e c   ( C r o n J o b S p e c ) S p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   o f   a   c r o n   j o b ,   i n c l u d i n g   t h e   s c h e d u l e .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s s t a t u s   ( C r o n J o b S t a t u s ) C u r r e n t   s t a t u s   o f   a   c r o n   j o b .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s   a p i V e r s i o n :   b a t c h / v 1   k i n d :   C r o n J o b   m e t a d a t a   ( O b j e c t M e t a )   S t a n d a r d   o b j e c t ' s   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   s p e c   ( C r o n J o b S p e c )   S p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   o f   a   c r o n   j o b ,   i n c l u d i n g   t h e   s c h e d u l e .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d


Question: What is CronJobSpec?

Answer: C r o n J o b S p e c   d e s c r i b e s   h o w   t h e   j o b   e x e c u t i o n   w i l l   l o o k   l i k e   a n d   w h e n   i t   w i l l   a c t u a l l y   r u n .   j o b T e m p l a t e   ( J o b T e m p l a t e S p e c ) ,   r e q u i r e d S p e c i f i e s   t h e   j o b   t h a t   w i l l   b e   c r e a t e d   w h e n   e x e c u t i n g   a   C r o n J o b . J o b T e m p l a t e S p e c   d e s c r i b e s   t h e   d a t a   a   J o b   s h o u l d   h a v e   w h e n   c r e a t e d   f r o m   a   t e m p l a t e j o b T e m p l a t e . m e t a d a t a   ( O b j e c t M e t a ) S t a n d a r d   o b j e c t ' s   m e t a d a t a   o f   t h e   j o b s   c r e a t e d   f r o m   t h i s   t e m p l a t e .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a j o b T e m p l a t e . s p e c   ( J o b S p e c ) S p e c i f i c a t i o n   o f   t h e   d e s i r e d   b e h a v i o r   o f   t h e   j o b .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # s p e c - a n d - s t a t u s s c h e d u l e   ( s t r i n g ) ,   r e q u i r e d T h e   s c h e d u l e   i n   C r o n   f o r m a t ,   s e e   h t t p s : / / e n . w i k i p e d i a . o r g / w i k i / C r o n . t i m e Z o n e   ( s t r i n g ) T h e   t i m e   z o n e   n a m e   f o r   t h e   g i v e n   s c h e d u l e ,   s e e   h t t p s : / / e n . w i k i p e d i a . o r g / w i k i / L i s t _ o f _ t z _ d a t a b a s e _ t i m e _ z o n e s .   I f   n o t   s p e c i f i e d ,   t h i s   w i l l   d e f a u l t   t o   t h e   t i m e   z o n e   o f   t h e   k u b e - c o n t r o l l e r - m a n a g e r   p r o c e s s .   T h e   s e t   o f   v a l i d   t i m e   z


Question: What is CronJobStatus?

Answer: C r o n J o b S t a t u s   r e p r e s e n t s   t h e   c u r r e n t   s t a t e   o f   a   c r o n   j o b .   a c t i v e   ( [ ] O b j e c t R e f e r e n c e ) A t o m i c :   w i l l   b e   r e p l a c e d   d u r i n g   a   m e r g e A   l i s t   o f   p o i n t e r s   t o   c u r r e n t l y   r u n n i n g   j o b s . l a s t S c h e d u l e T i m e   ( T i m e ) I n f o r m a t i o n   w h e n   w a s   t h e   l a s t   t i m e   t h e   j o b   w a s   s u c c e s s f u l l y   s c h e d u l e d . T i m e   i s   a   w r a p p e r   a r o u n d   t i m e . T i m e   w h i c h   s u p p o r t s   c o r r e c t   m a r s h a l i n g   t o   Y A M L   a n d   J S O N .   W r a p p e r s   a r e   p r o v i d e d   f o r   m a n y   o f   t h e   f a c t o r y   m e t h o d s   t h a t   t h e   t i m e   p a c k a g e   o f f e r s . l a s t S u c c e s s f u l T i m e   ( T i m e ) I n f o r m a t i o n   w h e n   w a s   t h e   l a s t   t i m e   t h e   j o b   s u c c e s s f u l l y   c o m p l e t e d . T i m e   i s   a   w r a p p e r   a r o u n d   t i m e . T i m e   w h i c h   s u p p o r t s   c o r r e c t   m a r s h a l i n g   t o   Y A M L   a n d   J S O N .   W r a p p e r s   a r e   p r o v i d e d   f o r   m a n y   o f   t h e   f a c t o r y   m e t h o d s   t h a t   t h e   t i m e   p a c k a g e   o f f e r s .   a c t i v e   ( [ ] O b j e c t R e f e r e n c e )   A t o m i c :   w i l l   b e   r e p l a c e d   d u r i n g   a   m e r g e   A   l i s t   o f   p o i n t e r s   t o   c u r r e n t l y   r u n n i n g   j o b s .   l a s t S c h e d u l e T i m e   ( T i m e )   I n f o r m a t i o n   w h e n   w a s   t h e   l a s t   t i m e   t h e   j o b   w a s   s u c c e s s f u l l y   s c h e d u l e d .   T i m e   i s   a   w r a p p e r   a r o u n d   t i m e . T i m e   w h i c h   s u p p o r t s   c o r r e c t   m a r s h a l i n g   t o   Y A M L   a n d   J S O N .   W r a p p e r s   a r e


Question: What is CronJobList?

Answer: C r o n J o b L i s t   i s   a   c o l l e c t i o n   o f   c r o n   j o b s .   a p i V e r s i o n :   b a t c h / v 1 k i n d :   C r o n J o b L i s t m e t a d a t a   ( L i s t M e t a ) S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a i t e m s   ( [ ] C r o n J o b ) ,   r e q u i r e d i t e m s   i s   t h e   l i s t   o f   C r o n J o b s .   a p i V e r s i o n :   b a t c h / v 1   k i n d :   C r o n J o b L i s t   m e t a d a t a   ( L i s t M e t a )   S t a n d a r d   l i s t   m e t a d a t a .   M o r e   i n f o :   h t t p s : / / g i t . k 8 s . i o / c o m m u n i t y / c o n t r i b u t o r s / d e v e l / s i g - a r c h i t e c t u r e / a p i - c o n v e n t i o n s . m d # m e t a d a t a   i t e m s   ( [ ] C r o n J o b ) ,   r e q u i r e d   i t e m s   i s   t h e   l i s t   o f   C r o n J o b s .


Question: What is HTTP Request?

Answer: G E T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: G E T   / a p i s / b a t c h / v 1 / c r o n j o b s


Question: What is Parameters?

Answer: a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n a l l o w W a t c h B o o k m a r k s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s w a t c h   ( i n   q u e r y ) :   b o o l e a n w a t c h   a l l o w W a t c h B o o k m a r k s   ( i n   q u e r y ) :   b o o l e a n   a l l o w W a t c h B o o k m a r k s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   l a b e l S e l e c t o r   l i m i t   ( i n   q u e r y ) :   i n t e g e r   l i m i t   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n   r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g   r e s o u r c e V e r s i o n M a t c h   s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n   s e n d I n i t i a l E v e n t s   t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   t i m e o u t S e c o n d s   w a t c h   ( i n   q u e r y ) :   b o o l e a n   w a t c h


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b L i s t ) :   O K   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P O S T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   C r o n J o b ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   C r o n J o b ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   2 0 1   ( C r o n J o b ) :   C r e a t e d   2 0 2   ( C r o n J o b ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   C r o n J o b ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   C r o n J o b ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   2 0 1   ( C r o n J o b ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P U T   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   C r o n J o b ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   C r o n J o b ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   2 0 1   ( C r o n J o b ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   2 0 1   ( C r o n J o b ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: P A T C H   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e } / s t a t u s


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   P a t c h ,   r e q u i r e d d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g f i e l d M a n a g e r f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g f i e l d V a l i d a t i o n f o r c e   ( i n   q u e r y ) :   b o o l e a n f o r c e p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   P a t c h ,   r e q u i r e d   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d M a n a g e r   ( i n   q u e r y ) :   s t r i n g   f i e l d M a n a g e r   f i e l d V a l i d a t i o n   ( i n   q u e r y ) :   s t r i n g   f i e l d V a l i d a t i o n   f o r c e   ( i n   q u e r y ) :   b o o l e a n   f o r c e   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y


Question: What is Response?

Answer: 2 0 0   ( C r o n J o b ) :   O K   2 0 1   ( C r o n J o b ) :   C r e a t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s / { n a m e }


Question: What is Parameters?

Answer: n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e   o f   t h e   C r o n J o b n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   D e l e t e O p t i o n s d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y   n a m e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e   o f   t h e   C r o n J o b   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   D e l e t e O p t i o n s   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   p r e t t y   ( i n   q u e r y ) :   s t r i n g   p r e t t y   p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g   p r o p a g a t i o n P o l i c y


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   2 0 2   ( S t a t u s ) :   A c c e p t e d   4 0 1 :   U n a u t h o r i z e d


Question: What is HTTP Request?

Answer: D E L E T E   / a p i s / b a t c h / v 1 / n a m e s p a c e s / { n a m e s p a c e } / c r o n j o b s


Question: What is Parameters?

Answer: n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d n a m e s p a c e b o d y :   D e l e t e O p t i o n s c o n t i n u e   ( i n   q u e r y ) :   s t r i n g c o n t i n u e d r y R u n   ( i n   q u e r y ) :   s t r i n g d r y R u n f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g f i e l d S e l e c t o r g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r g r a c e P e r i o d S e c o n d s i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l   ( i n   q u e r y ) :   b o o l e a n i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g P o t e n t i a l l a b e l S e l e c t o r   ( i n   q u e r y ) :   s t r i n g l a b e l S e l e c t o r l i m i t   ( i n   q u e r y ) :   i n t e g e r l i m i t p r e t t y   ( i n   q u e r y ) :   s t r i n g p r e t t y p r o p a g a t i o n P o l i c y   ( i n   q u e r y ) :   s t r i n g p r o p a g a t i o n P o l i c y r e s o u r c e V e r s i o n   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n r e s o u r c e V e r s i o n M a t c h   ( i n   q u e r y ) :   s t r i n g r e s o u r c e V e r s i o n M a t c h s e n d I n i t i a l E v e n t s   ( i n   q u e r y ) :   b o o l e a n s e n d I n i t i a l E v e n t s t i m e o u t S e c o n d s   ( i n   q u e r y ) :   i n t e g e r t i m e o u t S e c o n d s   n a m e s p a c e   ( i n   p a t h ) :   s t r i n g ,   r e q u i r e d   n a m e s p a c e   b o d y :   D e l e t e O p t i o n s   c o n t i n u e   ( i n   q u e r y ) :   s t r i n g   c o n t i n u e   d r y R u n   ( i n   q u e r y ) :   s t r i n g   d r y R u n   f i e l d S e l e c t o r   ( i n   q u e r y ) :   s t r i n g   f i e l d S e l e c t o r   g r a c e P e r i o d S e c o n d s   ( i n   q u e r y ) :   i n t e g e r   g r a c e P e r i o d S e c o n d s   i g n o r e S t o r e R e a d E r r o r W i t h C l u s t e r B r e a k i n g


Question: What is Response?

Answer: 2 0 0   ( S t a t u s ) :   O K   4 0 1 :   U n a u t h o r i z e d   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is SelfSubjectReview?

Answer: SelfSubjectReviewSelfSubjectReview contains the user information that the kube-apiserver has about the user making this request.apiVersion: authentication.k8s.io/v1import "k8s.io/api/authentication/v1"SelfSubjectReviewSelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.apiVersion: authentication.k8s.io/v1kind: SelfSubjectReviewmetadata (ObjectMeta)Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadatastatus (SelfSubjectReviewStatus)Status is filled in by the server with the user attributes.SelfSubjectReviewStatusSelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.userInfo (UserInfo)User attributes of the user making this request.UserInfo holds the information about the user needed to implement the user.Info interface.userInfo.extra (map[string][]string)Any additional information provided by the authenticator.userInfo.groups ([]string)Atomic: will be replaced during a mergeThe names of groups this user is a part of.userInfo.uid (string)A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.userInfo.username (string)The name that uniquely identifies this user among all active users.Operationscreate create a SelfSubjectReviewHTTP RequestPOST /apis/authentication.k8s.io/v1/selfsubjectreviewsParametersbody: SelfSubjectReview, requireddryRun (in query): stringdryRunfieldManager (in query): stringfieldManagerfieldValidation (in query): stringfieldValidationpretty (in query): stringprettyResponse200 (SelfSubjectReview): OK201 (SelfSubjectReview): Created202 (SelfSubjectReview): Accepted401: UnauthorizedThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.