Question: What is What's next?

Answer: S e e   t h e   C S I   d r i v e r   d o c u m e n t a t i o n   t o   f i n d   o u t   w h i c h   C S I   d r i v e r s   h a v e   i m p l e m e n t e d   t h i s   f e a t u r e .


Question: What is 14 - Windows Storage?

Answer: T h i s   p a g e   p r o v i d e s   a n   s t o r a g e   o v e r v i e w   s p e c i f i c   t o   t h e   W i n d o w s   o p e r a t i n g   s y s t e m .


Question: What is Persistent storage?

Answer: W i n d o w s   h a s   a   l a y e r e d   f i l e s y s t e m   d r i v e r   t o   m o u n t   c o n t a i n e r   l a y e r s   a n d   c r e a t e   a   c o p y   f i l e s y s t e m   b a s e d   o n   N T F S .   A l l   f i l e   p a t h s   i n   t h e   c o n t a i n e r   a r e   r e s o l v e d   o n l y   w i t h i n   t h e   c o n t e x t   o f   t h a t   c o n t a i n e r .   W i t h   D o c k e r ,   v o l u m e   m o u n t s   c a n   o n l y   t a r g e t   a   d i r e c t o r y   i n   t h e   c o n t a i n e r ,   a n d   n o t   a n   i n d i v i d u a l   f i l e .   T h i s   l i m i t a t i o n   d o e s   n o t   a p p l y   t o   c o n t a i n e r d . V o l u m e   m o u n t s   c a n n o t   p r o j e c t   f i l e s   o r   d i r e c t o r i e s   b a c k   t o   t h e   h o s t   f i l e s y s t e m . R e a d - o n l y   f i l e s y s t e m s   a r e   n o t   s u p p o r t e d   b e c a u s e   w r i t e   a c c e s s   i s   a l w a y s   r e q u i r e d   f o r   t h e   W i n d o w s   r e g i s t r y   a n d   S A M   d a t a b a s e .   H o w e v e r ,   r e a d - o n l y   v o l u m e s   a r e   s u p p o r t e d . V o l u m e   u s e r - m a s k s   a n d   p e r m i s s i o n s   a r e   n o t   a v a i l a b l e .   B e c a u s e   t h e   S A M   i s   n o t   s h a r e d   b e t w e e n   t h e   h o s t   &   c o n t a i n e r ,   t h e r e ' s   n o   m a p p i n g   b e t w e e n   t h e m .   A l l   p e r m i s s i o n s   a r e   r e s o l v e d   w i t h i n   t h e   c o n t e x t   o f   t h e   c o n t a i n e r .   A s   a   r e s u l t ,   t h e   f o l l o w i n g   s t o r a g e   f u n c t i o n a l i t y   i s   n o t   s u p p o r t e d   o n   W i n d o w s   n o d e s :   V o l u m e   s u b p a t h   m o u n t s :   o n l y   t h e   e n t i r e   v o l u m e   c a n   b e   m o u n t e d   i n   a   W i n d o w s   c o n t a i n e r S u b p a t h   v o l u m e   m o u n t i n g   f o r   S e c r e t s


Question: What is In-tree volume plugins?

Answer: T h e   f o l l o w i n g   i n - t r e e   p l u g i n s   s u p p o r t   p e r s i s t e n t   s t o r a g e   o n   W i n d o w s   n o d e s :   a z u r e F i l e v s p h e r e V o l u m e   ©   2 0 2 5   T h e   K u b e r n e t e s   A u t h o r s   |   D o c u m e n t a t i o n   D i s t r i b u t e d   u n d e r   C C   B Y   4 . 0   ©   2 0 2 5   T h e   L i n u x   F o u n d a t i o n   ® .   A l l   r i g h t s   r e s e r v e d .   T h e   L i n u x   F o u n d a t i o n   h a s   r e g i s t e r e d   t r a d e m a r k s   a n d   u s e s   t r a d e m a r k s .   F o r   a   l i s t   o f   t r a d e m a r k s   o f   T h e   L i n u x   F o u n d a t i o n ,   p l e a s e   s e e   o u r   T r a d e m a r k   U s a g e   p a g e   I C P   l i c e n s e :   京 I C P 备 1 7 0 7 4 2 6 6 号 - 3


Question: What is Access Services Running on Clusters?

Answer: Access Services Running on ClustersThis page shows how to connect to services running on the Kubernetes cluster.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesTo check the version, enter kubectl version.Accessing services running on the clusterIn Kubernetes, nodes, pods and services all have their own IPs. In many cases, the node IPs, pod IPs, and some service IPs on a cluster will not be routable, so they will not be reachable from a machine outside the cluster, such as your desktop machine.Ways to connectYou have several options for connecting to nodes, pods and services from outside the cluster:Access services through public IPs.Use a service with type NodePort or LoadBalancer to make the service reachable outside the cluster. See the services and kubectl expose documentation.Depending on your cluster environment, this may only expose the service to your corporate network, or it may expose it to the internet. Think about whether the service being exposed is secure. Does it do its own authentication?Place pods behind services. To access one specific pod from a set of replicas, such as for debugging, place a unique label on the pod and create a new service which selects this label.In most cases, it should not be necessary for application developer to directly access nodes via their nodeIPs.Access services, nodes, or pods using the Proxy Verb.Does apiserver authentication and authorization prior to accessing the remote service. Use this if the services are not secure enough to expose to the internet, or to gain access to ports on the node IP, or for debugging.Proxies may cause problems for some web applications.Only works for HTTP/HTTPS.Described here.Access from a node or pod in the cluster.Run a pod, and then connect to a shell in it using kubectl exec. Connect to other nodes, pods, and services from that shell.Some clusters may allow you to ssh to a node in the cluster. From there you may be able to access cluster services. This is a non-standard method, and will work on some clusters but not others. Browsers and other tools may or may not be installed. Cluster DNS may not work.Discovering builtin servicesTypically, there are several services which are started on a cluster by kube-system. Get a list of these with the kubectl cluster-info command:kubectl cluster-info The output is similar to this:Kubernetes master is running at https://192.0.2.1 elasticsearch-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy kibana-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/kibana-logg


Question: How does Access Services Running on Clusters work?

Answer: Access Services Running on ClustersThis page shows how to connect to services running on the Kubernetes cluster.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesTo check the version, enter kubectl version.Accessing services running on the clusterIn Kubernetes, nodes, pods and services all have their own IPs. In many cases, the node IPs, pod IPs, and some service IPs on a cluster will not be routable, so they will not be reachable from a machine outside the cluster, such as your desktop machine.Ways to connectYou have several options for connecting to nodes, pods and services from outside the cluster:Access services through public IPs.Use a service with type NodePort or LoadBalancer to make the service reachable outside the cluster. See the services and kubectl expose documentation.Depending on your cluster environment, this may only expose the service to your corporate network, or it may expose it to the internet. Think about whether the service being exposed is secure. Does it do its own authentication?Place pods behind services. To access one specific pod from a set of replicas, such as for debugging, place a unique label on the pod and create a new service which selects this label.In most cases, it should not be necessary for application developer to directly access nodes via their nodeIPs.Access services, nodes, or pods using the Proxy Verb.Does apiserver authentication and authorization prior to accessing the remote service. Use this if the services are not secure enough to expose to the internet, or to gain access to ports on the node IP, or for debugging.Proxies may cause problems for some web applications.Only works for HTTP/HTTPS.Described here.Access from a node or pod in the cluster.Run a pod, and then connect to a shell in it using kubectl exec. Connect to other nodes, pods, and services from that shell.Some clusters may allow you to ssh to a node in the cluster. From there you may be able to access cluster services. This is a non-standard method, and will work on some clusters but not others. Browsers and other tools may or may not be installed. Cluster DNS may not work.Discovering builtin servicesTypically, there are several services which are started on a cluster by kube-system. Get a list of these with the kubectl cluster-info command:kubectl cluster-info The output is similar to this:Kubernetes master is running at https://192.0.2.1 elasticsearch-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy kibana-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/kibana-logg


Question: When would you use Access Services Running on Clusters?

Answer: Access Services Running on ClustersThis page shows how to connect to services running on the Kubernetes cluster.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesTo check the version, enter kubectl version.Accessing services running on the clusterIn Kubernetes, nodes, pods and services all have their own IPs. In many cases, the node IPs, pod IPs, and some service IPs on a cluster will not be routable, so they will not be reachable from a machine outside the cluster, such as your desktop machine.Ways to connectYou have several options for connecting to nodes, pods and services from outside the cluster:Access services through public IPs.Use a service with type NodePort or LoadBalancer to make the service reachable outside the cluster. See the services and kubectl expose documentation.Depending on your cluster environment, this may only expose the service to your corporate network, or it may expose it to the internet. Think about whether the service being exposed is secure. Does it do its own authentication?Place pods behind services. To access one specific pod from a set of replicas, such as for debugging, place a unique label on the pod and create a new service which selects this label.In most cases, it should not be necessary for application developer to directly access nodes via their nodeIPs.Access services, nodes, or pods using the Proxy Verb.Does apiserver authentication and authorization prior to accessing the remote service. Use this if the services are not secure enough to expose to the internet, or to gain access to ports on the node IP, or for debugging.Proxies may cause problems for some web applications.Only works for HTTP/HTTPS.Described here.Access from a node or pod in the cluster.Run a pod, and then connect to a shell in it using kubectl exec. Connect to other nodes, pods, and services from that shell.Some clusters may allow you to ssh to a node in the cluster. From there you may be able to access cluster services. This is a non-standard method, and will work on some clusters but not others. Browsers and other tools may or may not be installed. Cluster DNS may not work.Discovering builtin servicesTypically, there are several services which are started on a cluster by kube-system. Get a list of these with the kubectl cluster-info command:kubectl cluster-info The output is similar to this:Kubernetes master is running at https://192.0.2.1 elasticsearch-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy kibana-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/kibana-logg


Question: What are the benefits of Access Services Running on Clusters?

Answer: Access Services Running on ClustersThis page shows how to connect to services running on the Kubernetes cluster.Before you beginYou need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:iximiuz LabsKillercodaKodeKloudPlay with KubernetesTo check the version, enter kubectl version.Accessing services running on the clusterIn Kubernetes, nodes, pods and services all have their own IPs. In many cases, the node IPs, pod IPs, and some service IPs on a cluster will not be routable, so they will not be reachable from a machine outside the cluster, such as your desktop machine.Ways to connectYou have several options for connecting to nodes, pods and services from outside the cluster:Access services through public IPs.Use a service with type NodePort or LoadBalancer to make the service reachable outside the cluster. See the services and kubectl expose documentation.Depending on your cluster environment, this may only expose the service to your corporate network, or it may expose it to the internet. Think about whether the service being exposed is secure. Does it do its own authentication?Place pods behind services. To access one specific pod from a set of replicas, such as for debugging, place a unique label on the pod and create a new service which selects this label.In most cases, it should not be necessary for application developer to directly access nodes via their nodeIPs.Access services, nodes, or pods using the Proxy Verb.Does apiserver authentication and authorization prior to accessing the remote service. Use this if the services are not secure enough to expose to the internet, or to gain access to ports on the node IP, or for debugging.Proxies may cause problems for some web applications.Only works for HTTP/HTTPS.Described here.Access from a node or pod in the cluster.Run a pod, and then connect to a shell in it using kubectl exec. Connect to other nodes, pods, and services from that shell.Some clusters may allow you to ssh to a node in the cluster. From there you may be able to access cluster services. This is a non-standard method, and will work on some clusters but not others. Browsers and other tools may or may not be installed. Cluster DNS may not work.Discovering builtin servicesTypically, there are several services which are started on a cluster by kube-system. Get a list of these with the kubectl cluster-info command:kubectl cluster-info The output is similar to this:Kubernetes master is running at https://192.0.2.1 elasticsearch-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy kibana-logging is running at https://192.0.2.1/api/v1/namespaces/kube-system/services/kibana-logg


Question: What is Access Services Running on Clusters?

Answer: T h i s   p a g e   s h o w s   h o w   t o   c o n n e c t   t o   s e r v i c e s   r u n n i n g   o n   t h e   K u b e r n e t e s   c l u s t e r .


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s : i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s T o   c h e c k   t h e   v e r s i o n ,   e n t e r   k u b e c t l   v e r s i o n .   Y o u   n e e d   t o   h a v e   a   K u b e r n e t e s   c l u s t e r ,   a n d   t h e   k u b e c t l   c o m m a n d - l i n e   t o o l   m u s t   b e   c o n f i g u r e d   t o   c o m m u n i c a t e   w i t h   y o u r   c l u s t e r .   I t   i s   r e c o m m e n d e d   t o   r u n   t h i s   t u t o r i a l   o n   a   c l u s t e r   w i t h   a t   l e a s t   t w o   n o d e s   t h a t   a r e   n o t   a c t i n g   a s   c o n t r o l   p l a n e   h o s t s .   I f   y o u   d o   n o t   a l r e a d y   h a v e   a   c l u s t e r ,   y o u   c a n   c r e a t e   o n e   b y   u s i n g   m i n i k u b e   o r   y o u   c a n   u s e   o n e   o f   t h e s e   K u b e r n e t e s   p l a y g r o u n d s :   i x i m i u z   L a b s K i l l e r c o d a K o d e K l o u d P l a y   w i t h   K u b e r n e t e s   T o   c h e c k   t h e   v e r s i o n ,   e n t e r   k u b e c t l   v e r s i o n .


Question: What is Accessing services running on the cluster?

Answer: I n   K u b e r n e t e s ,   n o d e s ,   p o d s   a n d   s e r v i c e s   a l l   h a v e   t h e i r   o w n   I P s .   I n   m a n y   c a s e s ,   t h e   n o d e   I P s ,   p o d   I P s ,   a n d   s o m e   s e r v i c e   I P s   o n   a   c l u s t e r   w i l l   n o t   b e   r o u t a b l e ,   s o   t h e y   w i l l   n o t   b e   r e a c h a b l e   f r o m   a   m a c h i n e   o u t s i d e   t h e   c l u s t e r ,   s u c h   a s   y o u r   d e s k t o p   m a c h i n e .


Question: What is Ways to connect?

Answer: Y o u   h a v e   s e v e r a l   o p t i o n s   f o r   c o n n e c t i n g   t o   n o d e s ,   p o d s   a n d   s e r v i c e s   f r o m   o u t s i d e   t h e   c l u s t e r :   A c c e s s   s e r v i c e s   t h r o u g h   p u b l i c   I P s . U s e   a   s e r v i c e   w i t h   t y p e   N o d e P o r t   o r   L o a d B a l a n c e r   t o   m a k e   t h e   s e r v i c e   r e a c h a b l e   o u t s i d e   t h e   c l u s t e r .   S e e   t h e   s e r v i c e s   a n d   k u b e c t l   e x p o s e   d o c u m e n t a t i o n . D e p e n d i n g   o n   y o u r   c l u s t e r   e n v i r o n m e n t ,   t h i s   m a y   o n l y   e x p o s e   t h e   s e r v i c e   t o   y o u r   c o r p o r a t e   n e t w o r k ,   o r   i t   m a y   e x p o s e   i t   t o   t h e   i n t e r n e t .   T h i n k   a b o u t   w h e t h e r   t h e   s e r v i c e   b e i n g   e x p o s e d   i s   s e c u r e .   D o e s   i t   d o   i t s   o w n   a u t h e n t i c a t i o n ? P l a c e   p o d s   b e h i n d   s e r v i c e s .   T o   a c c e s s   o n e   s p e c i f i c   p o d   f r o m   a   s e t   o f   r e p l i c a s ,   s u c h   a s   f o r   d e b u g g i n g ,   p l a c e   a   u n i q u e   l a b e l   o n   t h e   p o d   a n d   c r e a t e   a   n e w   s e r v i c e   w h i c h   s e l e c t s   t h i s   l a b e l . I n   m o s t   c a s e s ,   i t   s h o u l d   n o t   b e   n e c e s s a r y   f o r   a p p l i c a t i o n   d e v e l o p e r   t o   d i r e c t l y   a c c e s s   n o d e s   v i a   t h e i r   n o d e I P s . A c c e s s   s e r v i c e s ,   n o d e s ,   o r   p o d s   u s i n g   t h e   P r o x y   V e r b . D o e s   a p i s e r v e r   a u t h e n t i c a t i o n   a n d   a u t h o r i z a t i o n   p r i o r   t o   a c c e s s i n g   t h e   r e m o t e   s e r v i c e .   U s e   t h i s   i f   t h e   s e r v i c e s   a r e   n o t   s e c u r e   e n o u g h   t o   e x p o s e   t o


Question: What is Discovering builtin services?

Answer: T y p i c a l l y ,   t h e r e   a r e   s e v e r a l   s e r v i c e s   w h i c h   a r e   s t a r t e d   o n   a   c l u s t e r   b y   k u b e - s y s t e m .   G e t   a   l i s t   o f   t h e s e   w i t h   t h e   k u b e c t l   c l u s t e r - i n f o   c o m m a n d :   k u b e c t l   c l u s t e r - i n f o   T h e   o u t p u t   i s   s i m i l a r   t o   t h i s :   K u b e r n e t e s   m a s t e r   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1   e l a s t i c s e a r c h - l o g g i n g   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / e l a s t i c s e a r c h - l o g g i n g / p r o x y   k i b a n a - l o g g i n g   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / k i b a n a - l o g g i n g / p r o x y   k u b e - d n s   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / k u b e - d n s / p r o x y   g r a f a n a   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / m o n i t o r i n g - g r a f a n a / p r o x y   h e a p s t e r   i s   r u n n i n g   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / m o n i t o r i n g - h e a p s t e r / p r o x y   T h i s   s h o w s   t h e   p r o x y - v e r b   U R L   f o r   a c c e s s i n g   e a c h   s e r v i c e .   F o r   e x a m p l e ,   t h i s   c l u s t e r   h a s   c l u s t e r - l e v e l   l o g g i n g   e n a b l e d   ( u s i n g   E l a s t i c s e a r c h ) ,   w h i c h   c a n   b e   r e a c h e d   a t   h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s


Question: What is Manually constructing apiserver proxy URLs?

Answer: A s   m e n t i o n e d   a b o v e ,   y o u   u s e   t h e   k u b e c t l   c l u s t e r - i n f o   c o m m a n d   t o   r e t r i e v e   t h e   s e r v i c e ' s   p r o x y   U R L .   T o   c r e a t e   p r o x y   U R L s   t h a t   i n c l u d e   s e r v i c e   e n d p o i n t s ,   s u f f i x e s ,   a n d   p a r a m e t e r s ,   y o u   a p p e n d   t o   t h e   s e r v i c e ' s   p r o x y   U R L :   h t t p : / / k u b e r n e t e s _ m a s t e r _ a d d r e s s / a p i / v 1 / n a m e s p a c e s / n a m e s p a c e _ n a m e / s e r v i c e s / [ h t t p s : ] s e r v i c e _ n a m e [ : p o r t _ n a m e ] / p r o x y   I f   y o u   h a v e n ' t   s p e c i f i e d   a   n a m e   f o r   y o u r   p o r t ,   y o u   d o n ' t   h a v e   t o   s p e c i f y   p o r t _ n a m e   i n   t h e   U R L .   Y o u   c a n   a l s o   u s e   t h e   p o r t   n u m b e r   i n   p l a c e   o f   t h e   p o r t _ n a m e   f o r   b o t h   n a m e d   a n d   u n n a m e d   p o r t s .   B y   d e f a u l t ,   t h e   A P I   s e r v e r   p r o x i e s   t o   y o u r   s e r v i c e   u s i n g   H T T P .   T o   u s e   H T T P S ,   p r e f i x   t h e   s e r v i c e   n a m e   w i t h   h t t p s : :   h t t p : / / < k u b e r n e t e s _ m a s t e r _ a d d r e s s > / a p i / v 1 / n a m e s p a c e s / < n a m e s p a c e _ n a m e > / s e r v i c e s / < s e r v i c e _ n a m e > / p r o x y   T h e   s u p p o r t e d   f o r m a t s   f o r   t h e   < s e r v i c e _ n a m e >   s e g m e n t   o f   t h e   U R L   a r e :   < s e r v i c e _ n a m e >   -   p r o x i e s   t o   t h e   d e f a u l t   o r   u n n a m e d   p o r t   u s i n g   h t t p < s e r v i c e _ n a m e > : < p o r t _ n a m e >   -   p r o x i e s   t o   t h e   s p e c i f i e d   p o r t   n a m e   o r   p o r t   n u m b e r   u s i n g   h t t p h t t p s : < s e r v i c e _ n a m e > :   -   p r o x i e s   t o   t h e   d e f a u


Question: What is Examples?

Answer: T o   a c c e s s   t h e   E l a s t i c s e a r c h   s e r v i c e   e n d p o i n t   _ s e a r c h ? q = u s e r : k i m c h y ,   y o u   w o u l d   u s e : h t t p : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / e l a s t i c s e a r c h - l o g g i n g / p r o x y / _ s e a r c h ? q = u s e r : k i m c h y   T o   a c c e s s   t h e   E l a s t i c s e a r c h   c l u s t e r   h e a l t h   i n f o r m a t i o n   _ c l u s t e r / h e a l t h ? p r e t t y = t r u e ,   y o u   w o u l d   u s e : h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / e l a s t i c s e a r c h - l o g g i n g / p r o x y / _ c l u s t e r / h e a l t h ? p r e t t y = t r u e   T h e   h e a l t h   i n f o r m a t i o n   i s   s i m i l a r   t o   t h i s : {   " c l u s t e r _ n a m e "   :   " k u b e r n e t e s _ l o g g i n g " ,   " s t a t u s "   :   " y e l l o w " ,   " t i m e d _ o u t "   :   f a l s e ,   " n u m b e r _ o f _ n o d e s "   :   1 ,   " n u m b e r _ o f _ d a t a _ n o d e s "   :   1 ,   " a c t i v e _ p r i m a r y _ s h a r d s "   :   5 ,   " a c t i v e _ s h a r d s "   :   5 ,   " r e l o c a t i n g _ s h a r d s "   :   0 ,   " i n i t i a l i z i n g _ s h a r d s "   :   0 ,   " u n a s s i g n e d _ s h a r d s "   :   5   }   T o   a c c e s s   t h e   h t t p s   E l a s t i c s e a r c h   s e r v i c e   h e a l t h   i n f o r m a t i o n   _ c l u s t e r / h e a l t h ? p r e t t y = t r u e ,   y o u   w o u l d   u s e : h t t p s : / / 1 9 2 . 0 . 2 . 1 / a p i / v 1 / n a m e s p a c e s / k u b e - s y s t e m / s e r v i c e s / h t t p s : e l a s t i c s e a r c h - l o g g i n g : / p r o x y / _ c l u s t e r / h e a l t h ? p r e t t y = t r u e   T o   a c c e s s   t h e   E l a s t i c s e a r c h   s e r v i c e   e n d p o i n t   _ s e a r c h ? q = u s e r : k i m c h y ,   y o u   w


Question: What is Using web browsers to access services running on the cluster?

Answer: Y o u   m a y   b e   a b l e   t o   p u t   a n   a p i s e r v e r   p r o x y   U R L   i n t o   t h e   a d d r e s s   b a r   o f   a   b r o w s e r .   H o w e v e r :   W e b   b r o w s e r s   c a n n o t   u s u a l l y   p a s s   t o k e n s ,   s o   y o u   m a y   n e e d   t o   u s e   b a s i c   ( p a s s w o r d )   a u t h .   A p i s e r v e r   c a n   b e   c o n f i g u r e d   t o   a c c e p t   b a s i c   a u t h ,   b u t   y o u r   c l u s t e r   m a y   n o t   b e   c o n f i g u r e d   t o   a c c e p t   b a s i c   a u t h . S o m e   w e b   a p p s   m a y   n o t   w o r k ,   p a r t i c u l a r l y   t h o s e   w i t h   c l i e n t   s i d e   j a v a s c r i p t   t h a t   c o n s t r u c t   U R L s   i n   a   w a y   t h a t   i s   u n a w a r e   o f   t h e   p r o x y   p a t h   p r e f i x .


Question: What is kubectl cluster-info?

Answer: kubectl cluster-infoSynopsisDisplay addresses of the control plane and services with label kubernetes.io/cluster-service=true. To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.kubectl cluster-info [flags] Examples # Print the address of the control plane and cluster services kubectl cluster-info Options-h, --helphelp for cluster-infoParent Options Inherited--as stringUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group stringsGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid stringUID to impersonate for the operation.--cache-dir string Default: "$HOME/.kube/cache"Default cache directory--certificate-authority stringPath to a cert file for the certificate authority--client-certificate stringPath to a client certificate file for TLS--client-key stringPath to a client key file for TLS--cluster stringThe name of the kubeconfig cluster to use--context stringThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig stringPath to the kubeconfig file to use for CLI requests.--kuberc stringPath to the kuberc file to use for preferences. This can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.--match-server-versionRequire server version to match client version-n, --namespace stringIf present, the namespace scope for this CLI request--password stringPassword for basic authentication to the API server--profile string Default: "none"Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output string Default: "profile.pprof"Name of the file to write the profile to--request-timeout string Default: "0"The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.-s, --server stringThe address and port of the Kubernetes API server--storage-driver-buffer-duration duration Default: 1m0sWrites in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction--storage-driver-db string Default: "cadvisor"database name--storage-driver-host string Default: "localhost:8086"database host:port--storage-driver-password string Default: "root"database password--storage-driver-secureuse secure connection with database--storage-driver-table string Default: "stats"table name--storage-driver-user string Default: "root"database username--tls-server-name stringServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token stringBearer token for authentication to the API


Question: How does kubectl cluster-info work?

Answer: kubectl cluster-infoSynopsisDisplay addresses of the control plane and services with label kubernetes.io/cluster-service=true. To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.kubectl cluster-info [flags] Examples # Print the address of the control plane and cluster services kubectl cluster-info Options-h, --helphelp for cluster-infoParent Options Inherited--as stringUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group stringsGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid stringUID to impersonate for the operation.--cache-dir string Default: "$HOME/.kube/cache"Default cache directory--certificate-authority stringPath to a cert file for the certificate authority--client-certificate stringPath to a client certificate file for TLS--client-key stringPath to a client key file for TLS--cluster stringThe name of the kubeconfig cluster to use--context stringThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig stringPath to the kubeconfig file to use for CLI requests.--kuberc stringPath to the kuberc file to use for preferences. This can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.--match-server-versionRequire server version to match client version-n, --namespace stringIf present, the namespace scope for this CLI request--password stringPassword for basic authentication to the API server--profile string Default: "none"Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output string Default: "profile.pprof"Name of the file to write the profile to--request-timeout string Default: "0"The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.-s, --server stringThe address and port of the Kubernetes API server--storage-driver-buffer-duration duration Default: 1m0sWrites in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction--storage-driver-db string Default: "cadvisor"database name--storage-driver-host string Default: "localhost:8086"database host:port--storage-driver-password string Default: "root"database password--storage-driver-secureuse secure connection with database--storage-driver-table string Default: "stats"table name--storage-driver-user string Default: "root"database username--tls-server-name stringServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token stringBearer token for authentication to the API


Question: When would you use kubectl cluster-info?

Answer: kubectl cluster-infoSynopsisDisplay addresses of the control plane and services with label kubernetes.io/cluster-service=true. To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.kubectl cluster-info [flags] Examples # Print the address of the control plane and cluster services kubectl cluster-info Options-h, --helphelp for cluster-infoParent Options Inherited--as stringUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group stringsGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid stringUID to impersonate for the operation.--cache-dir string Default: "$HOME/.kube/cache"Default cache directory--certificate-authority stringPath to a cert file for the certificate authority--client-certificate stringPath to a client certificate file for TLS--client-key stringPath to a client key file for TLS--cluster stringThe name of the kubeconfig cluster to use--context stringThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig stringPath to the kubeconfig file to use for CLI requests.--kuberc stringPath to the kuberc file to use for preferences. This can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.--match-server-versionRequire server version to match client version-n, --namespace stringIf present, the namespace scope for this CLI request--password stringPassword for basic authentication to the API server--profile string Default: "none"Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output string Default: "profile.pprof"Name of the file to write the profile to--request-timeout string Default: "0"The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.-s, --server stringThe address and port of the Kubernetes API server--storage-driver-buffer-duration duration Default: 1m0sWrites in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction--storage-driver-db string Default: "cadvisor"database name--storage-driver-host string Default: "localhost:8086"database host:port--storage-driver-password string Default: "root"database password--storage-driver-secureuse secure connection with database--storage-driver-table string Default: "stats"table name--storage-driver-user string Default: "root"database username--tls-server-name stringServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token stringBearer token for authentication to the API


Question: What are the benefits of kubectl cluster-info?

Answer: kubectl cluster-infoSynopsisDisplay addresses of the control plane and services with label kubernetes.io/cluster-service=true. To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.kubectl cluster-info [flags] Examples # Print the address of the control plane and cluster services kubectl cluster-info Options-h, --helphelp for cluster-infoParent Options Inherited--as stringUsername to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group stringsGroup to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid stringUID to impersonate for the operation.--cache-dir string Default: "$HOME/.kube/cache"Default cache directory--certificate-authority stringPath to a cert file for the certificate authority--client-certificate stringPath to a client certificate file for TLS--client-key stringPath to a client key file for TLS--cluster stringThe name of the kubeconfig cluster to use--context stringThe name of the kubeconfig context to use--disable-compressionIf true, opt-out of response compression for all requests to the server--insecure-skip-tls-verifyIf true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure--kubeconfig stringPath to the kubeconfig file to use for CLI requests.--kuberc stringPath to the kuberc file to use for preferences. This can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.--match-server-versionRequire server version to match client version-n, --namespace stringIf present, the namespace scope for this CLI request--password stringPassword for basic authentication to the API server--profile string Default: "none"Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output string Default: "profile.pprof"Name of the file to write the profile to--request-timeout string Default: "0"The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.-s, --server stringThe address and port of the Kubernetes API server--storage-driver-buffer-duration duration Default: 1m0sWrites in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction--storage-driver-db string Default: "cadvisor"database name--storage-driver-host string Default: "localhost:8086"database host:port--storage-driver-password string Default: "root"database password--storage-driver-secureuse secure connection with database--storage-driver-table string Default: "stats"table name--storage-driver-user string Default: "root"database username--tls-server-name stringServer name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token stringBearer token for authentication to the API


Question: What is Synopsis?

Answer: D i s p l a y   a d d r e s s e s   o f   t h e   c o n t r o l   p l a n e   a n d   s e r v i c e s   w i t h   l a b e l   k u b e r n e t e s . i o / c l u s t e r - s e r v i c e = t r u e .   T o   f u r t h e r   d e b u g   a n d   d i a g n o s e   c l u s t e r   p r o b l e m s ,   u s e   ' k u b e c t l   c l u s t e r - i n f o   d u m p ' .   k u b e c t l   c l u s t e r - i n f o   [ f l a g s ]


Question: What is Examples?

Answer: #   P r i n t   t h e   a d d r e s s   o f   t h e   c o n t r o l   p l a n e   a n d   c l u s t e r   s e r v i c e s   k u b e c t l   c l u s t e r - i n f o


Question: What is Options?

Answer: h e l p   f o r   c l u s t e r - i n f o


Question: What is Parent Options Inherited?

Answer: U s e r n a m e   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n .   U s e r   c o u l d   b e   a   r e g u l a r   u s e r   o r   a   s e r v i c e   a c c o u n t   i n   a   n a m e s p a c e .   G r o u p   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n ,   t h i s   f l a g   c a n   b e   r e p e a t e d   t o   s p e c i f y   m u l t i p l e   g r o u p s .   U I D   t o   i m p e r s o n a t e   f o r   t h e   o p e r a t i o n .   D e f a u l t   c a c h e   d i r e c t o r y   P a t h   t o   a   c e r t   f i l e   f o r   t h e   c e r t i f i c a t e   a u t h o r i t y   P a t h   t o   a   c l i e n t   c e r t i f i c a t e   f i l e   f o r   T L S   P a t h   t o   a   c l i e n t   k e y   f i l e   f o r   T L S   T h e   n a m e   o f   t h e   k u b e c o n f i g   c l u s t e r   t o   u s e   T h e   n a m e   o f   t h e   k u b e c o n f i g   c o n t e x t   t o   u s e   I f   t r u e ,   o p t - o u t   o f   r e s p o n s e   c o m p r e s s i o n   f o r   a l l   r e q u e s t s   t o   t h e   s e r v e r   I f   t r u e ,   t h e   s e r v e r ' s   c e r t i f i c a t e   w i l l   n o t   b e   c h e c k e d   f o r   v a l i d i t y .   T h i s   w i l l   m a k e   y o u r   H T T P S   c o n n e c t i o n s   i n s e c u r e   P a t h   t o   t h e   k u b e c o n f i g   f i l e   t o   u s e   f o r   C L I   r e q u e s t s .   P a t h   t o   t h e   k u b e r c   f i l e   t o   u s e   f o r   p r e f e r e n c e s .   T h i s   c a n   b e   d i s a b l e d   b y   e x p o r t i n g   K U B E C T L _ K U B E R C = f a l s e   f e a t u r e   g a t e   o r   t u r n i n g   o f f   t h e   f e a t u r e   K U B E R C = o f f .   R e q u i r e   s e r v e r   v e r s i o n   t o   m a t c h   c l i e n t   v e r s i o n   I f   p r e s e n t ,   t h e   n a m e s p a c e   s c o p e   f o r   t h i s   C L I   r e q u e s t   P a s s w o r d   f o r   b a s i c   a u t h e n t i c a t


Question: What is See Also?

Answer: k u b e c t l   -   k u b e c t l   c o n t r o l s   t h e   K u b e r n e t e s   c l u s t e r   m a n a g e r k u b e c t l   c l u s t e r - i n f o   d u m p   -   D u m p   r e l e v a n t   i n f o r m a t i o n   f o r   d e b u g g i n g   a n d   d i a g n o s i s   T h i s   p a g e   i s   a u t o m a t i c a l l y   g e n e r a t e d .   I f   y o u   p l a n   t o   r e p o r t   a n   i s s u e   w i t h   t h i s   p a g e ,   m e n t i o n   t h a t   t h e   p a g e   i s   a u t o - g e n e r a t e d   i n   y o u r   i s s u e   d e s c r i p t i o n .   T h e   f i x   m a y   n e e d   t o   h a p p e n   e l s e w h e r e   i n   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is Documentation Content Guide?

Answer: Documentation Content GuideThis page contains guidelines for Kubernetes documentation.If you have questions about what's allowed, join the #sig-docs channel in Kubernetes Slack and ask!You can register for Kubernetes Slack at https://slack.k8s.io/.For information on creating new content for the Kubernetes docs, follow the style guide.OverviewSource for the Kubernetes website, including the docs, resides in the kubernetes/website repository.Located in the kubernetes/website/content/<language_code>/docs folder, the majority of Kubernetes documentation is specific to the Kubernetes project.What's allowedKubernetes docs allow content for third-party projects only when:Content documents software in the Kubernetes projectContent documents software that's out of project but necessary for Kubernetes to functionContent is canonical on kubernetes.io, or links to canonical content elsewhereThird party contentKubernetes documentation includes applied examples of projects in the Kubernetes project—projects that live in the kubernetes and kubernetes-sigs GitHub organizations.Links to active content in the Kubernetes project are always allowed.Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker), networking policy (CNI plugins), Ingress controllers, and logging.Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.Dual sourced contentWherever possible, Kubernetes docs link to canonical sources instead of hosting dual-sourced content.Dual-sourced content requires double the effort (or more!) to maintain and grows stale more quickly.Note:If you're a maintainer for a Kubernetes project and need help hosting your own docs, ask for help in #sig-docs on Kubernetes Slack.More informationIf you have questions about allowed content, join the Kubernetes Slack #sig-docs channel and ask!What's nextRead the Style guide.


Question: How does Documentation Content Guide work?

Answer: Documentation Content GuideThis page contains guidelines for Kubernetes documentation.If you have questions about what's allowed, join the #sig-docs channel in Kubernetes Slack and ask!You can register for Kubernetes Slack at https://slack.k8s.io/.For information on creating new content for the Kubernetes docs, follow the style guide.OverviewSource for the Kubernetes website, including the docs, resides in the kubernetes/website repository.Located in the kubernetes/website/content/<language_code>/docs folder, the majority of Kubernetes documentation is specific to the Kubernetes project.What's allowedKubernetes docs allow content for third-party projects only when:Content documents software in the Kubernetes projectContent documents software that's out of project but necessary for Kubernetes to functionContent is canonical on kubernetes.io, or links to canonical content elsewhereThird party contentKubernetes documentation includes applied examples of projects in the Kubernetes project—projects that live in the kubernetes and kubernetes-sigs GitHub organizations.Links to active content in the Kubernetes project are always allowed.Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker), networking policy (CNI plugins), Ingress controllers, and logging.Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.Dual sourced contentWherever possible, Kubernetes docs link to canonical sources instead of hosting dual-sourced content.Dual-sourced content requires double the effort (or more!) to maintain and grows stale more quickly.Note:If you're a maintainer for a Kubernetes project and need help hosting your own docs, ask for help in #sig-docs on Kubernetes Slack.More informationIf you have questions about allowed content, join the Kubernetes Slack #sig-docs channel and ask!What's nextRead the Style guide.


Question: When would you use Documentation Content Guide?

Answer: Documentation Content GuideThis page contains guidelines for Kubernetes documentation.If you have questions about what's allowed, join the #sig-docs channel in Kubernetes Slack and ask!You can register for Kubernetes Slack at https://slack.k8s.io/.For information on creating new content for the Kubernetes docs, follow the style guide.OverviewSource for the Kubernetes website, including the docs, resides in the kubernetes/website repository.Located in the kubernetes/website/content/<language_code>/docs folder, the majority of Kubernetes documentation is specific to the Kubernetes project.What's allowedKubernetes docs allow content for third-party projects only when:Content documents software in the Kubernetes projectContent documents software that's out of project but necessary for Kubernetes to functionContent is canonical on kubernetes.io, or links to canonical content elsewhereThird party contentKubernetes documentation includes applied examples of projects in the Kubernetes project—projects that live in the kubernetes and kubernetes-sigs GitHub organizations.Links to active content in the Kubernetes project are always allowed.Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker), networking policy (CNI plugins), Ingress controllers, and logging.Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.Dual sourced contentWherever possible, Kubernetes docs link to canonical sources instead of hosting dual-sourced content.Dual-sourced content requires double the effort (or more!) to maintain and grows stale more quickly.Note:If you're a maintainer for a Kubernetes project and need help hosting your own docs, ask for help in #sig-docs on Kubernetes Slack.More informationIf you have questions about allowed content, join the Kubernetes Slack #sig-docs channel and ask!What's nextRead the Style guide.


Question: What are the benefits of Documentation Content Guide?

Answer: Documentation Content GuideThis page contains guidelines for Kubernetes documentation.If you have questions about what's allowed, join the #sig-docs channel in Kubernetes Slack and ask!You can register for Kubernetes Slack at https://slack.k8s.io/.For information on creating new content for the Kubernetes docs, follow the style guide.OverviewSource for the Kubernetes website, including the docs, resides in the kubernetes/website repository.Located in the kubernetes/website/content/<language_code>/docs folder, the majority of Kubernetes documentation is specific to the Kubernetes project.What's allowedKubernetes docs allow content for third-party projects only when:Content documents software in the Kubernetes projectContent documents software that's out of project but necessary for Kubernetes to functionContent is canonical on kubernetes.io, or links to canonical content elsewhereThird party contentKubernetes documentation includes applied examples of projects in the Kubernetes project—projects that live in the kubernetes and kubernetes-sigs GitHub organizations.Links to active content in the Kubernetes project are always allowed.Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker), networking policy (CNI plugins), Ingress controllers, and logging.Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.Dual sourced contentWherever possible, Kubernetes docs link to canonical sources instead of hosting dual-sourced content.Dual-sourced content requires double the effort (or more!) to maintain and grows stale more quickly.Note:If you're a maintainer for a Kubernetes project and need help hosting your own docs, ask for help in #sig-docs on Kubernetes Slack.More informationIf you have questions about allowed content, join the Kubernetes Slack #sig-docs channel and ask!What's nextRead the Style guide.


Question: What is Documentation Content Guide?

Answer: T h i s   p a g e   c o n t a i n s   g u i d e l i n e s   f o r   K u b e r n e t e s   d o c u m e n t a t i o n .   I f   y o u   h a v e   q u e s t i o n s   a b o u t   w h a t ' s   a l l o w e d ,   j o i n   t h e   # s i g - d o c s   c h a n n e l   i n   K u b e r n e t e s   S l a c k   a n d   a s k !   Y o u   c a n   r e g i s t e r   f o r   K u b e r n e t e s   S l a c k   a t   h t t p s : / / s l a c k . k 8 s . i o / .   F o r   i n f o r m a t i o n   o n   c r e a t i n g   n e w   c o n t e n t   f o r   t h e   K u b e r n e t e s   d o c s ,   f o l l o w   t h e   s t y l e   g u i d e .


Question: What is Overview?

Answer: S o u r c e   f o r   t h e   K u b e r n e t e s   w e b s i t e ,   i n c l u d i n g   t h e   d o c s ,   r e s i d e s   i n   t h e   k u b e r n e t e s / w e b s i t e   r e p o s i t o r y .   L o c a t e d   i n   t h e   k u b e r n e t e s / w e b s i t e / c o n t e n t / < l a n g u a g e _ c o d e > / d o c s   f o l d e r ,   t h e   m a j o r i t y   o f   K u b e r n e t e s   d o c u m e n t a t i o n   i s   s p e c i f i c   t o   t h e   K u b e r n e t e s   p r o j e c t .


Question: What is What's allowed?

Answer: K u b e r n e t e s   d o c s   a l l o w   c o n t e n t   f o r   t h i r d - p a r t y   p r o j e c t s   o n l y   w h e n :   C o n t e n t   d o c u m e n t s   s o f t w a r e   i n   t h e   K u b e r n e t e s   p r o j e c t C o n t e n t   d o c u m e n t s   s o f t w a r e   t h a t ' s   o u t   o f   p r o j e c t   b u t   n e c e s s a r y   f o r   K u b e r n e t e s   t o   f u n c t i o n C o n t e n t   i s   c a n o n i c a l   o n   k u b e r n e t e s . i o ,   o r   l i n k s   t o   c a n o n i c a l   c o n t e n t   e l s e w h e r e


Question: What is Third party content?

Answer: K u b e r n e t e s   d o c u m e n t a t i o n   i n c l u d e s   a p p l i e d   e x a m p l e s   o f   p r o j e c t s   i n   t h e   K u b e r n e t e s   p r o j e c t — p r o j e c t s   t h a t   l i v e   i n   t h e   k u b e r n e t e s   a n d   k u b e r n e t e s - s i g s   G i t H u b   o r g a n i z a t i o n s .   L i n k s   t o   a c t i v e   c o n t e n t   i n   t h e   K u b e r n e t e s   p r o j e c t   a r e   a l w a y s   a l l o w e d .   K u b e r n e t e s   r e q u i r e s   s o m e   t h i r d   p a r t y   c o n t e n t   t o   f u n c t i o n .   E x a m p l e s   i n c l u d e   c o n t a i n e r   r u n t i m e s   ( c o n t a i n e r d ,   C R I - O ,   D o c k e r ) ,   n e t w o r k i n g   p o l i c y   ( C N I   p l u g i n s ) ,   I n g r e s s   c o n t r o l l e r s ,   a n d   l o g g i n g .   D o c s   c a n   l i n k   t o   t h i r d - p a r t y   o p e n   s o u r c e   s o f t w a r e   ( O S S )   o u t s i d e   t h e   K u b e r n e t e s   p r o j e c t   o n l y   i f   i t ' s   n e c e s s a r y   f o r   K u b e r n e t e s   t o   f u n c t i o n .


Question: What is Dual sourced content?

Answer: W h e r e v e r   p o s s i b l e ,   K u b e r n e t e s   d o c s   l i n k   t o   c a n o n i c a l   s o u r c e s   i n s t e a d   o f   h o s t i n g   d u a l - s o u r c e d   c o n t e n t .   D u a l - s o u r c e d   c o n t e n t   r e q u i r e s   d o u b l e   t h e   e f f o r t   ( o r   m o r e ! )   t o   m a i n t a i n   a n d   g r o w s   s t a l e   m o r e   q u i c k l y .


Question: What is More information?

Answer: I f   y o u   h a v e   q u e s t i o n s   a b o u t   a l l o w e d   c o n t e n t ,   j o i n   t h e   K u b e r n e t e s   S l a c k   # s i g - d o c s   c h a n n e l   a n d   a s k !


Question: What is What's next?

Answer: R e a d   t h e   S t y l e   g u i d e .


Question: What is Topology Aware Routing?

Answer: Topology Aware RoutingTopology Aware Routing provides a mechanism to help keep network traffic within the zone where it originated. Preferring same-zone traffic between Pods in your cluster can help with reliability, performance (network latency and throughput), or cost.FEATURE STATE: Kubernetes v1.23 [beta]Note:Prior to Kubernetes 1.27, this feature was known as Topology Aware Hints.Topology Aware Routing adjusts routing behavior to prefer keeping traffic in the zone it originated from. In some cases this can help reduce costs or improve network performance.MotivationKubernetes clusters are increasingly deployed in multi-zone environments. Topology Aware Routing provides a mechanism to help keep traffic within the zone it originated from. When calculating the endpoints for a Service, the EndpointSlice controller considers the topology (region and zone) of each endpoint and populates the hints field to allocate it to a zone. Cluster components such as kube-proxy can then consume those hints, and use them to influence how the traffic is routed (favoring topologically closer endpoints).Enabling Topology Aware RoutingNote:Prior to Kubernetes 1.27, this behavior was controlled using the service.kubernetes.io/topology-aware-hints annotation.You can enable Topology Aware Routing for a Service by setting the service.kubernetes.io/topology-mode annotation to Auto. When there are enough endpoints available in each zone, Topology Hints will be populated on EndpointSlices to allocate individual endpoints to specific zones, resulting in traffic being routed closer to where it originated from.When it works bestThis feature works best when:1. Incoming traffic is evenly distributedIf a large proportion of traffic is originating from a single zone, that traffic could overload the subset of endpoints that have been allocated to that zone. This feature is not recommended when incoming traffic is expected to originate from a single zone.2. The Service has 3 or more endpoints per zoneIn a three zone cluster, this means 9 or more endpoints. If there are fewer than 3 endpoints per zone, there is a high (≈50%) probability that the EndpointSlice controller will not be able to allocate endpoints evenly and instead will fall back to the default cluster-wide routing approach.How It WorksThe "Auto" heuristic attempts to proportionally allocate a number of endpoints to each zone. Note that this heuristic works best for Services that have a significant number of endpoints.EndpointSlice controllerThe EndpointSlice controller is responsible for setting hints on EndpointSlices when this heuristic is enabled. The controller allocates a proportional amount of endpoints to each zone. This proportion is based on the allocatable CPU cores for nodes running in that zone. For example, if one zone had 2 CPU cores and another zone only had 1 CPU core, the controller would allocate twice as many endpoints to the zone with 2 CPU cores.The following example shows what an EndpointSlice looks


Question: How does Topology Aware Routing work?

Answer: Topology Aware RoutingTopology Aware Routing provides a mechanism to help keep network traffic within the zone where it originated. Preferring same-zone traffic between Pods in your cluster can help with reliability, performance (network latency and throughput), or cost.FEATURE STATE: Kubernetes v1.23 [beta]Note:Prior to Kubernetes 1.27, this feature was known as Topology Aware Hints.Topology Aware Routing adjusts routing behavior to prefer keeping traffic in the zone it originated from. In some cases this can help reduce costs or improve network performance.MotivationKubernetes clusters are increasingly deployed in multi-zone environments. Topology Aware Routing provides a mechanism to help keep traffic within the zone it originated from. When calculating the endpoints for a Service, the EndpointSlice controller considers the topology (region and zone) of each endpoint and populates the hints field to allocate it to a zone. Cluster components such as kube-proxy can then consume those hints, and use them to influence how the traffic is routed (favoring topologically closer endpoints).Enabling Topology Aware RoutingNote:Prior to Kubernetes 1.27, this behavior was controlled using the service.kubernetes.io/topology-aware-hints annotation.You can enable Topology Aware Routing for a Service by setting the service.kubernetes.io/topology-mode annotation to Auto. When there are enough endpoints available in each zone, Topology Hints will be populated on EndpointSlices to allocate individual endpoints to specific zones, resulting in traffic being routed closer to where it originated from.When it works bestThis feature works best when:1. Incoming traffic is evenly distributedIf a large proportion of traffic is originating from a single zone, that traffic could overload the subset of endpoints that have been allocated to that zone. This feature is not recommended when incoming traffic is expected to originate from a single zone.2. The Service has 3 or more endpoints per zoneIn a three zone cluster, this means 9 or more endpoints. If there are fewer than 3 endpoints per zone, there is a high (≈50%) probability that the EndpointSlice controller will not be able to allocate endpoints evenly and instead will fall back to the default cluster-wide routing approach.How It WorksThe "Auto" heuristic attempts to proportionally allocate a number of endpoints to each zone. Note that this heuristic works best for Services that have a significant number of endpoints.EndpointSlice controllerThe EndpointSlice controller is responsible for setting hints on EndpointSlices when this heuristic is enabled. The controller allocates a proportional amount of endpoints to each zone. This proportion is based on the allocatable CPU cores for nodes running in that zone. For example, if one zone had 2 CPU cores and another zone only had 1 CPU core, the controller would allocate twice as many endpoints to the zone with 2 CPU cores.The following example shows what an EndpointSlice looks


Question: When would you use Topology Aware Routing?

Answer: Topology Aware RoutingTopology Aware Routing provides a mechanism to help keep network traffic within the zone where it originated. Preferring same-zone traffic between Pods in your cluster can help with reliability, performance (network latency and throughput), or cost.FEATURE STATE: Kubernetes v1.23 [beta]Note:Prior to Kubernetes 1.27, this feature was known as Topology Aware Hints.Topology Aware Routing adjusts routing behavior to prefer keeping traffic in the zone it originated from. In some cases this can help reduce costs or improve network performance.MotivationKubernetes clusters are increasingly deployed in multi-zone environments. Topology Aware Routing provides a mechanism to help keep traffic within the zone it originated from. When calculating the endpoints for a Service, the EndpointSlice controller considers the topology (region and zone) of each endpoint and populates the hints field to allocate it to a zone. Cluster components such as kube-proxy can then consume those hints, and use them to influence how the traffic is routed (favoring topologically closer endpoints).Enabling Topology Aware RoutingNote:Prior to Kubernetes 1.27, this behavior was controlled using the service.kubernetes.io/topology-aware-hints annotation.You can enable Topology Aware Routing for a Service by setting the service.kubernetes.io/topology-mode annotation to Auto. When there are enough endpoints available in each zone, Topology Hints will be populated on EndpointSlices to allocate individual endpoints to specific zones, resulting in traffic being routed closer to where it originated from.When it works bestThis feature works best when:1. Incoming traffic is evenly distributedIf a large proportion of traffic is originating from a single zone, that traffic could overload the subset of endpoints that have been allocated to that zone. This feature is not recommended when incoming traffic is expected to originate from a single zone.2. The Service has 3 or more endpoints per zoneIn a three zone cluster, this means 9 or more endpoints. If there are fewer than 3 endpoints per zone, there is a high (≈50%) probability that the EndpointSlice controller will not be able to allocate endpoints evenly and instead will fall back to the default cluster-wide routing approach.How It WorksThe "Auto" heuristic attempts to proportionally allocate a number of endpoints to each zone. Note that this heuristic works best for Services that have a significant number of endpoints.EndpointSlice controllerThe EndpointSlice controller is responsible for setting hints on EndpointSlices when this heuristic is enabled. The controller allocates a proportional amount of endpoints to each zone. This proportion is based on the allocatable CPU cores for nodes running in that zone. For example, if one zone had 2 CPU cores and another zone only had 1 CPU core, the controller would allocate twice as many endpoints to the zone with 2 CPU cores.The following example shows what an EndpointSlice looks


Question: What are the benefits of Topology Aware Routing?

Answer: Topology Aware RoutingTopology Aware Routing provides a mechanism to help keep network traffic within the zone where it originated. Preferring same-zone traffic between Pods in your cluster can help with reliability, performance (network latency and throughput), or cost.FEATURE STATE: Kubernetes v1.23 [beta]Note:Prior to Kubernetes 1.27, this feature was known as Topology Aware Hints.Topology Aware Routing adjusts routing behavior to prefer keeping traffic in the zone it originated from. In some cases this can help reduce costs or improve network performance.MotivationKubernetes clusters are increasingly deployed in multi-zone environments. Topology Aware Routing provides a mechanism to help keep traffic within the zone it originated from. When calculating the endpoints for a Service, the EndpointSlice controller considers the topology (region and zone) of each endpoint and populates the hints field to allocate it to a zone. Cluster components such as kube-proxy can then consume those hints, and use them to influence how the traffic is routed (favoring topologically closer endpoints).Enabling Topology Aware RoutingNote:Prior to Kubernetes 1.27, this behavior was controlled using the service.kubernetes.io/topology-aware-hints annotation.You can enable Topology Aware Routing for a Service by setting the service.kubernetes.io/topology-mode annotation to Auto. When there are enough endpoints available in each zone, Topology Hints will be populated on EndpointSlices to allocate individual endpoints to specific zones, resulting in traffic being routed closer to where it originated from.When it works bestThis feature works best when:1. Incoming traffic is evenly distributedIf a large proportion of traffic is originating from a single zone, that traffic could overload the subset of endpoints that have been allocated to that zone. This feature is not recommended when incoming traffic is expected to originate from a single zone.2. The Service has 3 or more endpoints per zoneIn a three zone cluster, this means 9 or more endpoints. If there are fewer than 3 endpoints per zone, there is a high (≈50%) probability that the EndpointSlice controller will not be able to allocate endpoints evenly and instead will fall back to the default cluster-wide routing approach.How It WorksThe "Auto" heuristic attempts to proportionally allocate a number of endpoints to each zone. Note that this heuristic works best for Services that have a significant number of endpoints.EndpointSlice controllerThe EndpointSlice controller is responsible for setting hints on EndpointSlices when this heuristic is enabled. The controller allocates a proportional amount of endpoints to each zone. This proportion is based on the allocatable CPU cores for nodes running in that zone. For example, if one zone had 2 CPU cores and another zone only had 1 CPU core, the controller would allocate twice as many endpoints to the zone with 2 CPU cores.The following example shows what an EndpointSlice looks


Question: What is Note:?

Answer: T o p o l o g y   A w a r e   R o u t i n g   a d j u s t s   r o u t i n g   b e h a v i o r   t o   p r e f e r   k e e p i n g   t r a f f i c   i n   t h e   z o n e   i t   o r i g i n a t e d   f r o m .   I n   s o m e   c a s e s   t h i s   c a n   h e l p   r e d u c e   c o s t s   o r   i m p r o v e   n e t w o r k   p e r f o r m a n c e .


Question: What is Motivation?

Answer: K u b e r n e t e s   c l u s t e r s   a r e   i n c r e a s i n g l y   d e p l o y e d   i n   m u l t i - z o n e   e n v i r o n m e n t s .   T o p o l o g y   A w a r e   R o u t i n g   p r o v i d e s   a   m e c h a n i s m   t o   h e l p   k e e p   t r a f f i c   w i t h i n   t h e   z o n e   i t   o r i g i n a t e d   f r o m .   W h e n   c a l c u l a t i n g   t h e   e n d p o i n t s   f o r   a   S e r v i c e ,   t h e   E n d p o i n t S l i c e   c o n t r o l l e r   c o n s i d e r s   t h e   t o p o l o g y   ( r e g i o n   a n d   z o n e )   o f   e a c h   e n d p o i n t   a n d   p o p u l a t e s   t h e   h i n t s   f i e l d   t o   a l l o c a t e   i t   t o   a   z o n e .   C l u s t e r   c o m p o n e n t s   s u c h   a s   k u b e - p r o x y   c a n   t h e n   c o n s u m e   t h o s e   h i n t s ,   a n d   u s e   t h e m   t o   i n f l u e n c e   h o w   t h e   t r a f f i c   i s   r o u t e d   ( f a v o r i n g   t o p o l o g i c a l l y   c l o s e r   e n d p o i n t s ) .


Question: What is Note:?

Answer: Y o u   c a n   e n a b l e   T o p o l o g y   A w a r e   R o u t i n g   f o r   a   S e r v i c e   b y   s e t t i n g   t h e   s e r v i c e . k u b e r n e t e s . i o / t o p o l o g y - m o d e   a n n o t a t i o n   t o   A u t o .   W h e n   t h e r e   a r e   e n o u g h   e n d p o i n t s   a v a i l a b l e   i n   e a c h   z o n e ,   T o p o l o g y   H i n t s   w i l l   b e   p o p u l a t e d   o n   E n d p o i n t S l i c e s   t o   a l l o c a t e   i n d i v i d u a l   e n d p o i n t s   t o   s p e c i f i c   z o n e s ,   r e s u l t i n g   i n   t r a f f i c   b e i n g   r o u t e d   c l o s e r   t o   w h e r e   i t   o r i g i n a t e d   f r o m .


Question: What is When it works best?

Answer: T h i s   f e a t u r e   w o r k s   b e s t   w h e n :


Question: What is 1. Incoming traffic is evenly distributed?

Answer: I f   a   l a r g e   p r o p o r t i o n   o f   t r a f f i c   i s   o r i g i n a t i n g   f r o m   a   s i n g l e   z o n e ,   t h a t   t r a f f i c   c o u l d   o v e r l o a d   t h e   s u b s e t   o f   e n d p o i n t s   t h a t   h a v e   b e e n   a l l o c a t e d   t o   t h a t   z o n e .   T h i s   f e a t u r e   i s   n o t   r e c o m m e n d e d   w h e n   i n c o m i n g   t r a f f i c   i s   e x p e c t e d   t o   o r i g i n a t e   f r o m   a   s i n g l e   z o n e .


Question: What is 2. The Service has 3 or more endpoints per zone?

Answer: I n   a   t h r e e   z o n e   c l u s t e r ,   t h i s   m e a n s   9   o r   m o r e   e n d p o i n t s .   I f   t h e r e   a r e   f e w e r   t h a n   3   e n d p o i n t s   p e r   z o n e ,   t h e r e   i s   a   h i g h   ( ≈ 5 0 % )   p r o b a b i l i t y   t h a t   t h e   E n d p o i n t S l i c e   c o n t r o l l e r   w i l l   n o t   b e   a b l e   t o   a l l o c a t e   e n d p o i n t s   e v e n l y   a n d   i n s t e a d   w i l l   f a l l   b a c k   t o   t h e   d e f a u l t   c l u s t e r - w i d e   r o u t i n g   a p p r o a c h .


Question: What is How It Works?

Answer: T h e   " A u t o "   h e u r i s t i c   a t t e m p t s   t o   p r o p o r t i o n a l l y   a l l o c a t e   a   n u m b e r   o f   e n d p o i n t s   t o   e a c h   z o n e .   N o t e   t h a t   t h i s   h e u r i s t i c   w o r k s   b e s t   f o r   S e r v i c e s   t h a t   h a v e   a   s i g n i f i c a n t   n u m b e r   o f   e n d p o i n t s .


Question: What is EndpointSlice controller?

Answer: T h e   E n d p o i n t S l i c e   c o n t r o l l e r   i s   r e s p o n s i b l e   f o r   s e t t i n g   h i n t s   o n   E n d p o i n t S l i c e s   w h e n   t h i s   h e u r i s t i c   i s   e n a b l e d .   T h e   c o n t r o l l e r   a l l o c a t e s   a   p r o p o r t i o n a l   a m o u n t   o f   e n d p o i n t s   t o   e a c h   z o n e .   T h i s   p r o p o r t i o n   i s   b a s e d   o n   t h e   a l l o c a t a b l e   C P U   c o r e s   f o r   n o d e s   r u n n i n g   i n   t h a t   z o n e .   F o r   e x a m p l e ,   i f   o n e   z o n e   h a d   2   C P U   c o r e s   a n d   a n o t h e r   z o n e   o n l y   h a d   1   C P U   c o r e ,   t h e   c o n t r o l l e r   w o u l d   a l l o c a t e   t w i c e   a s   m a n y   e n d p o i n t s   t o   t h e   z o n e   w i t h   2   C P U   c o r e s .   T h e   f o l l o w i n g   e x a m p l e   s h o w s   w h a t   a n   E n d p o i n t S l i c e   l o o k s   l i k e   w h e n   h i n t s   h a v e   b e e n   p o p u l a t e d :   a p i V e r s i o n :   d i s c o v e r y . k 8 s . i o / v 1   k i n d :   E n d p o i n t S l i c e   m e t a d a t a :   n a m e :   e x a m p l e - h i n t s   l a b e l s :   k u b e r n e t e s . i o / s e r v i c e - n a m e :   e x a m p l e - s v c   a d d r e s s T y p e :   I P v 4   p o r t s :   -   n a m e :   h t t p   p r o t o c o l :   T C P   p o r t :   8 0   e n d p o i n t s :   -   a d d r e s s e s :   -   " 1 0 . 1 . 2 . 3 "   c o n d i t i o n s :   r e a d y :   t r u e   h o s t n a m e :   p o d - 1   z o n e :   z o n e - a   h i n t s :   f o r Z o n e s :   -   n a m e :   " z o n e - a "


Question: What is kube-proxy?

Answer: T h e   k u b e - p r o x y   c o m p o n e n t   f i l t e r s   t h e   e n d p o i n t s   i t   r o u t e s   t o   b a s e d   o n   t h e   h i n t s   s e t   b y   t h e   E n d p o i n t S l i c e   c o n t r o l l e r .   I n   m o s t   c a s e s ,   t h i s   m e a n s   t h a t   t h e   k u b e - p r o x y   i s   a b l e   t o   r o u t e   t r a f f i c   t o   e n d p o i n t s   i n   t h e   s a m e   z o n e .   S o m e t i m e s   t h e   c o n t r o l l e r   a l l o c a t e s   e n d p o i n t s   f r o m   a   d i f f e r e n t   z o n e   t o   e n s u r e   m o r e   e v e n   d i s t r i b u t i o n   o f   e n d p o i n t s   b e t w e e n   z o n e s .   T h i s   w o u l d   r e s u l t   i n   s o m e   t r a f f i c   b e i n g   r o u t e d   t o   o t h e r   z o n e s .


Question: What is Safeguards?

Answer: T h e   K u b e r n e t e s   c o n t r o l   p l a n e   a n d   t h e   k u b e - p r o x y   o n   e a c h   n o d e   a p p l y   s o m e   s a f e g u a r d   r u l e s   b e f o r e   u s i n g   T o p o l o g y   A w a r e   H i n t s .   I f   t h e s e   d o n ' t   c h e c k   o u t ,   t h e   k u b e - p r o x y   s e l e c t s   e n d p o i n t s   f r o m   a n y w h e r e   i n   y o u r   c l u s t e r ,   r e g a r d l e s s   o f   t h e   z o n e .   I n s u f f i c i e n t   n u m b e r   o f   e n d p o i n t s :   I f   t h e r e   a r e   l e s s   e n d p o i n t s   t h a n   z o n e s   i n   a   c l u s t e r ,   t h e   c o n t r o l l e r   w i l l   n o t   a s s i g n   a n y   h i n t s . I m p o s s i b l e   t o   a c h i e v e   b a l a n c e d   a l l o c a t i o n :   I n   s o m e   c a s e s ,   i t   w i l l   b e   i m p o s s i b l e   t o   a c h i e v e   a   b a l a n c e d   a l l o c a t i o n   o f   e n d p o i n t s   a m o n g   z o n e s .   F o r   e x a m p l e ,   i f   z o n e - a   i s   t w i c e   a s   l a r g e   a s   z o n e - b ,   b u t   t h e r e   a r e   o n l y   2   e n d p o i n t s ,   a n   e n d p o i n t   a l l o c a t e d   t o   z o n e - a   m a y   r e c e i v e   t w i c e   a s   m u c h   t r a f f i c   a s   z o n e - b .   T h e   c o n t r o l l e r   d o e s   n o t   a s s i g n   h i n t s   i f   i t   c a n ' t   g e t   t h i s   " e x p e c t e d   o v e r l o a d "   v a l u e   b e l o w   a n   a c c e p t a b l e   t h r e s h o l d   f o r   e a c h   z o n e .   I m p o r t a n t l y   t h i s   i s   n o t   b a s e d   o n   r e a l - t i m e


Question: What is Constraints?

Answer: T o p o l o g y   A w a r e   H i n t s   a r e   n o t   u s e d   w h e n   i n t e r n a l T r a f f i c P o l i c y   i s   s e t   t o   L o c a l   o n   a   S e r v i c e .   I t   i s   p o s s i b l e   t o   u s e   b o t h   f e a t u r e s   i n   t h e   s a m e   c l u s t e r   o n   d i f f e r e n t   S e r v i c e s ,   j u s t   n o t   o n   t h e   s a m e   S e r v i c e . T h i s   a p p r o a c h   w i l l   n o t   w o r k   w e l l   f o r   S e r v i c e s   t h a t   h a v e   a   l a r g e   p r o p o r t i o n   o f   t r a f f i c   o r i g i n a t i n g   f r o m   a   s u b s e t   o f   z o n e s .   I n s t e a d   t h i s   a s s u m e s   t h a t   i n c o m i n g   t r a f f i c   w i l l   b e   r o u g h l y   p r o p o r t i o n a l   t o   t h e   c a p a c i t y   o f   t h e   N o d e s   i n   e a c h   z o n e . T h e   E n d p o i n t S l i c e   c o n t r o l l e r   i g n o r e s   u n r e a d y   n o d e s   a s   i t   c a l c u l a t e s   t h e   p r o p o r t i o n s   o f   e a c h   z o n e .   T h i s   c o u l d   h a v e   u n i n t e n d e d   c o n s e q u e n c e s   i f   a   l a r g e   p o r t i o n   o f   n o d e s   a r e   u n r e a d y . T h e   E n d p o i n t S l i c e   c o n t r o l l e r   i g n o r e s   n o d e s   w i t h   t h e   n o d e - r o l e . k u b e r n e t e s . i o / c o n t r o l - p l a n e   o r   n o d e - r o l e . k u b e r n e t e s . i o / m a s t e r   l a b e l   s e t .   T h i s   c o u l d   b e   p r o b l e m a t i c   i f   w o r k l o a d s   a r e   a l s o   r u n n i n g   o n   t h o s e   n o d e s . T h e   E n d p o i n t S l i c e   c o n t r o l l e r   d o e s   n o t   t a k e   i n t o   a c c o u n t   t o l e r a t i o n s   w h e n   d e p l o y i n g   o r   c a l c u l a t i n g   t h e   p r o p o r t i o n s   o f   e a c h   z o n e .   I f   t h e   P o d s   b a c k i n g   a   S e r v i c e   a r e   l i m i t e d   t o   a   s u b s e t


Question: What is Custom heuristics?

Answer: K u b e r n e t e s   i s   d e p l o y e d   i n   m a n y   d i f f e r e n t   w a y s ,   t h e r e   i s   n o   s i n g l e   h e u r i s t i c   f o r   a l l o c a t i n g   e n d p o i n t s   t o   z o n e s   w i l l   w o r k   f o r   e v e r y   u s e   c a s e .   A   k e y   g o a l   o f   t h i s   f e a t u r e   i s   t o   e n a b l e   c u s t o m   h e u r i s t i c s   t o   b e   d e v e l o p e d   i f   t h e   b u i l t   i n   h e u r i s t i c   d o e s   n o t   w o r k   f o r   y o u r   u s e   c a s e .   T h e   f i r s t   s t e p s   t o   e n a b l e   c u s t o m   h e u r i s t i c s   w e r e   i n c l u d e d   i n   t h e   1 . 2 7   r e l e a s e .   T h i s   i s   a   l i m i t e d   i m p l e m e n t a t i o n   t h a t   m a y   n o t   y e t   c o v e r   s o m e   r e l e v a n t   a n d   p l a u s i b l e   s i t u a t i o n s .


Question: What is What's next?

Answer: F o l l o w   t h e   C o n n e c t i n g   A p p l i c a t i o n s   w i t h   S e r v i c e s   t u t o r i a l L e a r n   a b o u t   t h e   t r a f f i c D i s t r i b u t i o n   f i e l d ,   w h i c h   i s   c l o s e l y   r e l a t e d   t o   t h e   s e r v i c e . k u b e r n e t e s . i o / t o p o l o g y - m o d e   a n n o t a t i o n   a n d   p r o v i d e s   f l e x i b l e   o p t i o n s   f o r   t r a f f i c   r o u t i n g   w i t h i n   K u b e r n e t e s .


Question: What is Manage Kubernetes Objects?

Answer: Manage Kubernetes ObjectsDeclarative and imperative paradigms for interacting with the Kubernetes API.Declarative Management of Kubernetes Objects Using Configuration FilesDeclarative Management of Kubernetes Objects Using KustomizeManaging Kubernetes Objects Using Imperative CommandsImperative Management of Kubernetes Objects Using Configuration FilesUpdate API Objects in Place Using kubectl patchUse kubectl patch to update Kubernetes API objects in place. Do a strategic merge patch or a JSON merge patch.Migrate Kubernetes Objects Using Storage Version Migration


Question: How does Manage Kubernetes Objects work?

Answer: Manage Kubernetes ObjectsDeclarative and imperative paradigms for interacting with the Kubernetes API.Declarative Management of Kubernetes Objects Using Configuration FilesDeclarative Management of Kubernetes Objects Using KustomizeManaging Kubernetes Objects Using Imperative CommandsImperative Management of Kubernetes Objects Using Configuration FilesUpdate API Objects in Place Using kubectl patchUse kubectl patch to update Kubernetes API objects in place. Do a strategic merge patch or a JSON merge patch.Migrate Kubernetes Objects Using Storage Version Migration


Question: When would you use Manage Kubernetes Objects?

Answer: Manage Kubernetes ObjectsDeclarative and imperative paradigms for interacting with the Kubernetes API.Declarative Management of Kubernetes Objects Using Configuration FilesDeclarative Management of Kubernetes Objects Using KustomizeManaging Kubernetes Objects Using Imperative CommandsImperative Management of Kubernetes Objects Using Configuration FilesUpdate API Objects in Place Using kubectl patchUse kubectl patch to update Kubernetes API objects in place. Do a strategic merge patch or a JSON merge patch.Migrate Kubernetes Objects Using Storage Version Migration


Question: What are the benefits of Manage Kubernetes Objects?

Answer: Manage Kubernetes ObjectsDeclarative and imperative paradigms for interacting with the Kubernetes API.Declarative Management of Kubernetes Objects Using Configuration FilesDeclarative Management of Kubernetes Objects Using KustomizeManaging Kubernetes Objects Using Imperative CommandsImperative Management of Kubernetes Objects Using Configuration FilesUpdate API Objects in Place Using kubectl patchUse kubectl patch to update Kubernetes API objects in place. Do a strategic merge patch or a JSON merge patch.Migrate Kubernetes Objects Using Storage Version Migration


Question: What is Update API Objects in Place Using kubectl patch?

Answer: U s e   k u b e c t l   p a t c h   t o   u p d a t e   K u b e r n e t e s   A P I   o b j e c t s   i n   p l a c e .   D o   a   s t r a t e g i c   m e r g e   p a t c h   o r   a   J S O N   m e r g e   p a t c h .


Question: What is Extend kubectl with plugins?

Answer: Extend kubectl with pluginsExtend kubectl by creating and installing kubectl plugins.This guide demonstrates how to install and write extensions for kubectl. By thinking of core kubectl commands as essential building blocks for interacting with a Kubernetes cluster, a cluster administrator can think of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend kubectl with new sub-commands, allowing for new and custom features not included in the main distribution of kubectl.Before you beginYou need to have a working kubectl binary installed.Installing kubectl pluginsA plugin is a standalone executable file, whose name begins with kubectl-. To install a plugin, move its executable file to anywhere on your PATH.You can also discover and install kubectl plugins available in the open source using Krew. Krew is a plugin manager maintained by the Kubernetes SIG CLI community.Caution:Kubectl plugins available via the Krew plugin index are not audited for security. You should install and run third-party plugins at your own risk, since they are arbitrary programs running on your machine.Discovering pluginskubectl provides a command kubectl plugin list that searches your PATH for valid plugin executables. Executing this command causes a traversal of all files in your PATH. Any files that are executable, and begin with kubectl- will show up in the order in which they are present in your PATH in this command's output. A warning will be included for any files beginning with kubectl- that are not executable. A warning will also be included for any valid plugin files that overlap each other's name.You can use Krew to discover and install kubectl plugins from a community-curated plugin index.Create pluginskubectl allows plugins to add custom create commands of the shape kubectl create something by providing a kubectl-create-something binary in the PATH.LimitationsIt is currently not possible to create plugins that overwrite existing kubectl commands or extend commands other than create. For example, creating a plugin kubectl-version will cause that plugin to never be executed, as the existing kubectl version command will always take precedence over it. Due to this limitation, it is also not possible to use plugins to add new subcommands to existing kubectl commands. For example, adding a subcommand kubectl attach vm by naming your plugin kubectl-attach-vm will cause that plugin to be ignored.kubectl plugin list shows warnings for any valid plugins that attempt to do this.Writing kubectl pluginsYou can write a plugin in any programming language or script that allows you to write command-line commands.There is no plugin installation or pre-loading required. Plugin executables receive the inherited environment from the kubectl binary. A plugin determines which command path it wishes to implement based on its name. For example, a plugin named kubectl-foo provides a command kubectl foo. You must install the plugin executabl


Question: How does Extend kubectl with plugins work?

Answer: Extend kubectl with pluginsExtend kubectl by creating and installing kubectl plugins.This guide demonstrates how to install and write extensions for kubectl. By thinking of core kubectl commands as essential building blocks for interacting with a Kubernetes cluster, a cluster administrator can think of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend kubectl with new sub-commands, allowing for new and custom features not included in the main distribution of kubectl.Before you beginYou need to have a working kubectl binary installed.Installing kubectl pluginsA plugin is a standalone executable file, whose name begins with kubectl-. To install a plugin, move its executable file to anywhere on your PATH.You can also discover and install kubectl plugins available in the open source using Krew. Krew is a plugin manager maintained by the Kubernetes SIG CLI community.Caution:Kubectl plugins available via the Krew plugin index are not audited for security. You should install and run third-party plugins at your own risk, since they are arbitrary programs running on your machine.Discovering pluginskubectl provides a command kubectl plugin list that searches your PATH for valid plugin executables. Executing this command causes a traversal of all files in your PATH. Any files that are executable, and begin with kubectl- will show up in the order in which they are present in your PATH in this command's output. A warning will be included for any files beginning with kubectl- that are not executable. A warning will also be included for any valid plugin files that overlap each other's name.You can use Krew to discover and install kubectl plugins from a community-curated plugin index.Create pluginskubectl allows plugins to add custom create commands of the shape kubectl create something by providing a kubectl-create-something binary in the PATH.LimitationsIt is currently not possible to create plugins that overwrite existing kubectl commands or extend commands other than create. For example, creating a plugin kubectl-version will cause that plugin to never be executed, as the existing kubectl version command will always take precedence over it. Due to this limitation, it is also not possible to use plugins to add new subcommands to existing kubectl commands. For example, adding a subcommand kubectl attach vm by naming your plugin kubectl-attach-vm will cause that plugin to be ignored.kubectl plugin list shows warnings for any valid plugins that attempt to do this.Writing kubectl pluginsYou can write a plugin in any programming language or script that allows you to write command-line commands.There is no plugin installation or pre-loading required. Plugin executables receive the inherited environment from the kubectl binary. A plugin determines which command path it wishes to implement based on its name. For example, a plugin named kubectl-foo provides a command kubectl foo. You must install the plugin executabl


Question: When would you use Extend kubectl with plugins?

Answer: Extend kubectl with pluginsExtend kubectl by creating and installing kubectl plugins.This guide demonstrates how to install and write extensions for kubectl. By thinking of core kubectl commands as essential building blocks for interacting with a Kubernetes cluster, a cluster administrator can think of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend kubectl with new sub-commands, allowing for new and custom features not included in the main distribution of kubectl.Before you beginYou need to have a working kubectl binary installed.Installing kubectl pluginsA plugin is a standalone executable file, whose name begins with kubectl-. To install a plugin, move its executable file to anywhere on your PATH.You can also discover and install kubectl plugins available in the open source using Krew. Krew is a plugin manager maintained by the Kubernetes SIG CLI community.Caution:Kubectl plugins available via the Krew plugin index are not audited for security. You should install and run third-party plugins at your own risk, since they are arbitrary programs running on your machine.Discovering pluginskubectl provides a command kubectl plugin list that searches your PATH for valid plugin executables. Executing this command causes a traversal of all files in your PATH. Any files that are executable, and begin with kubectl- will show up in the order in which they are present in your PATH in this command's output. A warning will be included for any files beginning with kubectl- that are not executable. A warning will also be included for any valid plugin files that overlap each other's name.You can use Krew to discover and install kubectl plugins from a community-curated plugin index.Create pluginskubectl allows plugins to add custom create commands of the shape kubectl create something by providing a kubectl-create-something binary in the PATH.LimitationsIt is currently not possible to create plugins that overwrite existing kubectl commands or extend commands other than create. For example, creating a plugin kubectl-version will cause that plugin to never be executed, as the existing kubectl version command will always take precedence over it. Due to this limitation, it is also not possible to use plugins to add new subcommands to existing kubectl commands. For example, adding a subcommand kubectl attach vm by naming your plugin kubectl-attach-vm will cause that plugin to be ignored.kubectl plugin list shows warnings for any valid plugins that attempt to do this.Writing kubectl pluginsYou can write a plugin in any programming language or script that allows you to write command-line commands.There is no plugin installation or pre-loading required. Plugin executables receive the inherited environment from the kubectl binary. A plugin determines which command path it wishes to implement based on its name. For example, a plugin named kubectl-foo provides a command kubectl foo. You must install the plugin executabl


Question: What are the benefits of Extend kubectl with plugins?

Answer: Extend kubectl with pluginsExtend kubectl by creating and installing kubectl plugins.This guide demonstrates how to install and write extensions for kubectl. By thinking of core kubectl commands as essential building blocks for interacting with a Kubernetes cluster, a cluster administrator can think of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend kubectl with new sub-commands, allowing for new and custom features not included in the main distribution of kubectl.Before you beginYou need to have a working kubectl binary installed.Installing kubectl pluginsA plugin is a standalone executable file, whose name begins with kubectl-. To install a plugin, move its executable file to anywhere on your PATH.You can also discover and install kubectl plugins available in the open source using Krew. Krew is a plugin manager maintained by the Kubernetes SIG CLI community.Caution:Kubectl plugins available via the Krew plugin index are not audited for security. You should install and run third-party plugins at your own risk, since they are arbitrary programs running on your machine.Discovering pluginskubectl provides a command kubectl plugin list that searches your PATH for valid plugin executables. Executing this command causes a traversal of all files in your PATH. Any files that are executable, and begin with kubectl- will show up in the order in which they are present in your PATH in this command's output. A warning will be included for any files beginning with kubectl- that are not executable. A warning will also be included for any valid plugin files that overlap each other's name.You can use Krew to discover and install kubectl plugins from a community-curated plugin index.Create pluginskubectl allows plugins to add custom create commands of the shape kubectl create something by providing a kubectl-create-something binary in the PATH.LimitationsIt is currently not possible to create plugins that overwrite existing kubectl commands or extend commands other than create. For example, creating a plugin kubectl-version will cause that plugin to never be executed, as the existing kubectl version command will always take precedence over it. Due to this limitation, it is also not possible to use plugins to add new subcommands to existing kubectl commands. For example, adding a subcommand kubectl attach vm by naming your plugin kubectl-attach-vm will cause that plugin to be ignored.kubectl plugin list shows warnings for any valid plugins that attempt to do this.Writing kubectl pluginsYou can write a plugin in any programming language or script that allows you to write command-line commands.There is no plugin installation or pre-loading required. Plugin executables receive the inherited environment from the kubectl binary. A plugin determines which command path it wishes to implement based on its name. For example, a plugin named kubectl-foo provides a command kubectl foo. You must install the plugin executabl


Question: What is Extend kubectl with plugins?

Answer: T h i s   g u i d e   d e m o n s t r a t e s   h o w   t o   i n s t a l l   a n d   w r i t e   e x t e n s i o n s   f o r   k u b e c t l .   B y   t h i n k i n g   o f   c o r e   k u b e c t l   c o m m a n d s   a s   e s s e n t i a l   b u i l d i n g   b l o c k s   f o r   i n t e r a c t i n g   w i t h   a   K u b e r n e t e s   c l u s t e r ,   a   c l u s t e r   a d m i n i s t r a t o r   c a n   t h i n k   o f   p l u g i n s   a s   a   m e a n s   o f   u t i l i z i n g   t h e s e   b u i l d i n g   b l o c k s   t o   c r e a t e   m o r e   c o m p l e x   b e h a v i o r .   P l u g i n s   e x t e n d   k u b e c t l   w i t h   n e w   s u b - c o m m a n d s ,   a l l o w i n g   f o r   n e w   a n d   c u s t o m   f e a t u r e s   n o t   i n c l u d e d   i n   t h e   m a i n   d i s t r i b u t i o n   o f   k u b e c t l .


Question: What is Before you begin?

Answer: Y o u   n e e d   t o   h a v e   a   w o r k i n g   k u b e c t l   b i n a r y   i n s t a l l e d .


Question: What is Installing kubectl plugins?

Answer: A   p l u g i n   i s   a   s t a n d a l o n e   e x e c u t a b l e   f i l e ,   w h o s e   n a m e   b e g i n s   w i t h   k u b e c t l - .   T o   i n s t a l l   a   p l u g i n ,   m o v e   i t s   e x e c u t a b l e   f i l e   t o   a n y w h e r e   o n   y o u r   P A T H .   Y o u   c a n   a l s o   d i s c o v e r   a n d   i n s t a l l   k u b e c t l   p l u g i n s   a v a i l a b l e   i n   t h e   o p e n   s o u r c e   u s i n g   K r e w .   K r e w   i s   a   p l u g i n   m a n a g e r   m a i n t a i n e d   b y   t h e   K u b e r n e t e s   S I G   C L I   c o m m u n i t y .


Question: What is Discovering plugins?

Answer: k u b e c t l   p r o v i d e s   a   c o m m a n d   k u b e c t l   p l u g i n   l i s t   t h a t   s e a r c h e s   y o u r   P A T H   f o r   v a l i d   p l u g i n   e x e c u t a b l e s .   E x e c u t i n g   t h i s   c o m m a n d   c a u s e s   a   t r a v e r s a l   o f   a l l   f i l e s   i n   y o u r   P A T H .   A n y   f i l e s   t h a t   a r e   e x e c u t a b l e ,   a n d   b e g i n   w i t h   k u b e c t l -   w i l l   s h o w   u p   i n   t h e   o r d e r   i n   w h i c h   t h e y   a r e   p r e s e n t   i n   y o u r   P A T H   i n   t h i s   c o m m a n d ' s   o u t p u t .   A   w a r n i n g   w i l l   b e   i n c l u d e d   f o r   a n y   f i l e s   b e g i n n i n g   w i t h   k u b e c t l -   t h a t   a r e   n o t   e x e c u t a b l e .   A   w a r n i n g   w i l l   a l s o   b e   i n c l u d e d   f o r   a n y   v a l i d   p l u g i n   f i l e s   t h a t   o v e r l a p   e a c h   o t h e r ' s   n a m e .   Y o u   c a n   u s e   K r e w   t o   d i s c o v e r   a n d   i n s t a l l   k u b e c t l   p l u g i n s   f r o m   a   c o m m u n i t y - c u r a t e d   p l u g i n   i n d e x .


Question: What is Create plugins?

Answer: k u b e c t l   a l l o w s   p l u g i n s   t o   a d d   c u s t o m   c r e a t e   c o m m a n d s   o f   t h e   s h a p e   k u b e c t l   c r e a t e   s o m e t h i n g   b y   p r o v i d i n g   a   k u b e c t l - c r e a t e - s o m e t h i n g   b i n a r y   i n   t h e   P A T H .


Question: What is Limitations?

Answer: I t   i s   c u r r e n t l y   n o t   p o s s i b l e   t o   c r e a t e   p l u g i n s   t h a t   o v e r w r i t e   e x i s t i n g   k u b e c t l   c o m m a n d s   o r   e x t e n d   c o m m a n d s   o t h e r   t h a n   c r e a t e .   F o r   e x a m p l e ,   c r e a t i n g   a   p l u g i n   k u b e c t l - v e r s i o n   w i l l   c a u s e   t h a t   p l u g i n   t o   n e v e r   b e   e x e c u t e d ,   a s   t h e   e x i s t i n g   k u b e c t l   v e r s i o n   c o m m a n d   w i l l   a l w a y s   t a k e   p r e c e d e n c e   o v e r   i t .   D u e   t o   t h i s   l i m i t a t i o n ,   i t   i s   a l s o   n o t   p o s s i b l e   t o   u s e   p l u g i n s   t o   a d d   n e w   s u b c o m m a n d s   t o   e x i s t i n g   k u b e c t l   c o m m a n d s .   F o r   e x a m p l e ,   a d d i n g   a   s u b c o m m a n d   k u b e c t l   a t t a c h   v m   b y   n a m i n g   y o u r   p l u g i n   k u b e c t l - a t t a c h - v m   w i l l   c a u s e   t h a t   p l u g i n   t o   b e   i g n o r e d .   k u b e c t l   p l u g i n   l i s t   s h o w s   w a r n i n g s   f o r   a n y   v a l i d   p l u g i n s   t h a t   a t t e m p t   t o   d o   t h i s .