From 380dd8d611b43aa8267d789b3f7eb64b147c71f7 Mon Sep 17 00:00:00 2001 From: "xin.li" Date: Thu, 18 May 2023 21:51:06 +0800 Subject: [PATCH] [zh-cn] sync cluster-resources authentication-resources Signed-off-by: xin.li --- .../certificate-signing-request-v1.md | 20 ++++++- .../service-account-v1.md | 57 +++++++++++++------ .../cluster-resources/flow-schema-v1beta3.md | 10 ++++ .../cluster-resources/namespace-v1.md | 13 ++++- .../cluster-resources/runtime-class-v1.md | 20 +++++-- 5 files changed, 92 insertions(+), 28 deletions(-) diff --git a/content/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md b/content/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md index 9c9d6131af3..0d468717b7e 100644 --- a/content/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md +++ b/content/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md @@ -53,8 +53,8 @@ Kubelets 使用 CertificateSigningRequest API 来获取： This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers. --> -此 API 可用于请求客户端证书以向 kube-apiserver 进行身份验证（使用 “kubernetes.io/kube-apiserver-client” 签名者名称）， -或从自定义非 Kubernetes 签名者那里获取证书。 +此 API 可用于请求客户端证书以向 kube-apiserver 进行身份验证（使用 “kubernetes.io/kube-apiserver-client” +签名者名称），或从自定义非 Kubernetes 签名者那里获取证书。 - **pretty** (**查询参数**): string @@ -771,6 +775,10 @@ GET /apis/certificates.k8s.io/v1/certificatesigningrequests }}">resourceVersionMatch +- **sendInitialEvents** (**查询参数**): boolean + + }}">sendInitialEvents + - AutomountServiceAccountToken 指示作为此服务帐户运行的 pod 是否应自动挂载 API 令牌， - 可以在 pod 级别覆盖。 + AutomountServiceAccountToken 指示作为此服务帐户运行的 Pod 是否应自动挂载 API 令牌， + 可以在 Pod 级别覆盖。 - **imagePullSecrets** ([]}}">LocalObjectReference) @@ -94,11 +94,11 @@ ServiceAccount 将以下内容绑定在一起： --> **补丁策略：基于键 `name` 合并** - Secrets 是允许使用此 ServiceAccount 运行的 pod 使用的同一命名空间中的秘密列表。 + Secrets 是允许使用此 ServiceAccount 运行的 Pod 使用的同一命名空间中的秘密列表。 仅当此服务帐户的 “kubernetes.io/enforce-mountable-secrets” 注释设置为 “true” 时，Pod 才限于此列表。 - 此字段不应用于查找自动生成的服务帐户令牌机密以在 pod 之外使用。 - 相反，可以使用 TokenRequest API 直接请求令牌，或者可以手动创建服务帐户令牌 secret。 - 更多信息： https://kubernetes.io/docs/concepts/configuration/secret + 此字段不应用于查找自动生成的服务帐户令牌机密以在 Pod 之外使用。 + 相反，可以使用 TokenRequest API 直接请求令牌，或者可以手动创建服务帐户令牌 Secret。 + 更多信息： https://kubernetes.io/zh-cn/docs/concepts/configuration/secret ## ServiceAccountList {#ServiceAccountList} @@ -125,7 +125,7 @@ ServiceAccountList 是 ServiceAccount 对象的列表 -- **items** ([]}}">ServiceAccount), 必需 +- **items** ([]}}">ServiceAccount)，必需 -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -207,7 +207,7 @@ GET /api/v1/namespaces/{namespace}/serviceaccounts -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -269,6 +269,13 @@ GET /api/v1/namespaces/{namespace}/serviceaccounts }}">resourceVersionMatch + +- **sendInitialEvents** (**查询参数**): boolean + +}}">sendInitialEvents + @@ -366,6 +373,13 @@ GET /api/v1/serviceaccounts }}">resourceVersionMatch + +- **sendInitialEvents** (**查询参数**): boolean + +}}">sendInitialEvents + @@ -409,7 +423,7 @@ POST /api/v1/namespaces/{namespace}/serviceaccounts -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -488,7 +502,7 @@ PUT /api/v1/namespaces/{namespace}/serviceaccounts/{name} -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -556,7 +570,7 @@ PATCH /api/v1/namespaces/{namespace}/serviceaccounts/{name} -- **name** (**路径参数**): string, 必需 +- **name** (**路径参数**): string，必需 -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -642,7 +656,7 @@ DELETE /api/v1/namespaces/{namespace}/serviceaccounts/{name} -- **name** (**路径参数**): string, 必需 +- **name** (**路径参数**): string，必需 -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -718,7 +732,7 @@ DELETE /api/v1/namespaces/{namespace}/serviceaccounts -- **namespace** (**路径参数**): string, 必需 +- **namespace** (**路径参数**): string，必需 }}">namespace @@ -798,6 +812,13 @@ DELETE /api/v1/namespaces/{namespace}/serviceaccounts }}">resourceVersionMatch + +- **sendInitialEvents** (**查询参数**): boolean + +}}">sendInitialEvents + diff --git a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3.md b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3.md index eb9409ad00d..727ea12e38d 100644 --- a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3.md +++ b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3.md @@ -652,6 +652,7 @@ GET /apis/flowcontrol.apiserver.k8s.io/v1beta3/flowschemas - **pretty** (*in query*): string - **resourceVersion** (*in query*): string - **resourceVersionMatch** (*in query*): string +- **sendInitialEvents** (*in query*): boolean - **timeoutSeconds** (*in query*): integer - **watch** (*in query*): boolean --> @@ -689,6 +690,10 @@ GET /apis/flowcontrol.apiserver.k8s.io/v1beta3/flowschemas }}">resourceVersionMatch +- **sendInitialEvents** (**查询参数**): boolean + + }}">sendInitialEvents + - **timeoutSeconds** (**查询参数**): integer }}">timeoutSeconds @@ -1065,6 +1070,7 @@ DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta3/flowschemas - **propagationPolicy** (*in query*): string - **resourceVersion** (*in query*): string - **resourceVersionMatch** (*in query*): string +- **sendInitialEvents** (*in query*): boolean - **timeoutSeconds** (*in query*): integer --> #### 参数 @@ -1111,6 +1117,10 @@ DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta3/flowschemas }}">resourceVersionMatch +- **sendInitialEvents** (**查询参数**): boolean + + }}">sendInitialEvents + - **timeoutSeconds** (**查询参数**): integer }}">timeoutSeconds diff --git a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md index dc0e8d4ef2e..6573a682254 100644 --- a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md +++ b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md @@ -67,7 +67,7 @@ NamespaceSpec 用于描述 Namespace 的属性。 Finalizers is an opaque list of values that must be empty to permanently remove object from storage. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/ --> - finalizers 是一个不透明的值列表，只有此列表为空时才能从存储中永久删除对象。 更多信息： https://kubernetes.io/docs/tasks/administer-cluster/namespaces/ + finalizers 是一个不透明的值列表，只有此列表为空时才能从存储中永久删除对象。 更多信息： https://kubernetes.io/zh-cn/docs/tasks/administer-cluster/namespaces/ ## NamespaceStatus {#NamespaceStatus} - phase 是命名空间的当前生命周期阶段。更多信息： https://kubernetes.io/docs/tasks/administer-cluster/namespaces/ + phase 是命名空间的当前生命周期阶段。更多信息： https://kubernetes.io/zh-cn/docs/tasks/administer-cluster/namespaces/ ## NamespaceList {#NamespaceList} - items 是列表中的 Namespace 对象列表。更多信息： https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/ + items 是列表中的 Namespace 对象列表。更多信息： https://kubernetes.io/zh-cn/docs/concepts/overview/working-with-objects/namespaces/ +- **resourceVersionMatch** (**查询参数**): string + + }}">resourceVersionMatch + diff --git a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md index 9054b8a6926..395d425f060 100644 --- a/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md +++ b/content/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md @@ -45,7 +45,7 @@ https://kubernetes.io/zh-cn/docs/concepts/containers/runtime-class/ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata - **handler** (string), required - Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node & CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called "runc" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable. + handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node & CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called "runc" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable. --> - **metadata** (}}">ObjectMeta) @@ -62,7 +62,7 @@ https://kubernetes.io/zh-cn/docs/concepts/containers/runtime-class/ - **overhead.podFixed** (map[string]}}">Quantity) @@ -88,7 +88,7 @@ https://kubernetes.io/zh-cn/docs/concepts/containers/runtime-class/ - **metadata** (}}">ListMeta) @@ -258,6 +258,7 @@ GET /apis/node.k8s.io/v1/runtimeclasses - **pretty** (*in query*): string - **resourceVersion** (*in query*): string - **resourceVersionMatch** (*in query*): string +- **sendInitialEvents** (*in query*): boolean - **timeoutSeconds** (*in query*): integer - **watch** (*in query*): boolean --> @@ -294,6 +295,10 @@ GET /apis/node.k8s.io/v1/runtimeclasses }}">resourceVersionMatch +- **sendInitialEvents** (**查询参数**): boolean + + }}">sendInitialEvents + - **timeoutSeconds** (**查询参数**): integer }}">timeoutSeconds @@ -535,6 +540,7 @@ DELETE /apis/node.k8s.io/v1/runtimeclasses - **propagationPolicy** (*in query*): string - **resourceVersion** (*in query*): string - **resourceVersionMatch** (*in query*): string +- **sendInitialEvents** (*in query*): boolean - **timeoutSeconds** (*in query*): integer --> ##### 参数 @@ -580,6 +586,10 @@ DELETE /apis/node.k8s.io/v1/runtimeclasses }}">resourceVersionMatch +- **sendInitialEvents** (**查询参数**): boolean + + }}">sendInitialEvents + - **timeoutSeconds** (**查询参数**): integer }}">timeoutSeconds