From c01b8a7a2bd6cf6498b2d96cf2eb3e3234df5dfb Mon Sep 17 00:00:00 2001
From: Qiming Teng --cloud-config string
-
The path to the cloud provider configuration file. Empty string for no configuration file. (DEPRECATED: will be removed in 1.24 or later, in favor of removing cloud providers code from kubelet.)
+The path to the cloud provider configuration file. Empty string for no configuration file. (DEPRECATED: will be removed in 1.25 or later, in favor of removing cloud providers code from kubelet.)
--cloud-provider string
-
The provider for cloud services. Set to empty string for running with no cloud provider. If set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used). (DEPRECATED: will be removed in 1.24 or later, in favor of removing cloud provider code from kubelet.)
+The provider for cloud services. Set to empty string for running with no cloud provider. Set to 'external' for running with an external cloud provider. If set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used).
@@ -193,10 +193,10 @@ kubelet [flags]
-
--container-runtime-endpoint string
+--container-runtime-endpoint string Default:
"unix:///run/containerd/containerd.sock"
-
The endpoint of remote runtime service. UNIX domain sockets are supported on Linux, while 'npipe' and 'tcp' endpoints are supported on windows. Examples:
+unix:///path/to/runtime.sock
, npipe:////./pipe/runtime
.The endpoint of remote runtime service. UNIX domain sockets are supported on Linux, while 'npipe' and 'tcp' endpoints are supported on windows. Examples:
'unix:///path/to/runtime.sock'
, 'npipe:////./pipe/runtime'
. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)
@@ -298,7 +298,7 @@ kubelet [flags]
-
--eviction-minimum-reclaim string
+--eviction-minimum-reclaim strings
A set of minimum reclaims (e.g. "
@@ -312,14 +312,14 @@ kubelet [flags]
imagefs.available=2Gi
") that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)
-
--eviction-soft string
+--eviction-soft strings
A set of eviction thresholds (e.g. "
memory.available<1.5Gi
") that if met over a corresponding grace period would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)
-
--eviction-soft-grace-period string
+--eviction-soft-grace-period strings
A set of eviction grace periods (e.g. "
@@ -336,7 +336,7 @@ kubelet [flags]
memory.available=1m30s
") that correspond to how long a soft eviction threshold must hold before triggering a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)--experimental-allocatable-ignore-eviction Default:
false
-
When set to
+true
, hard eviction thresholds will be ignored while calculating node allocatable. See here for more details. (DEPRECATED: will be removed in 1.24 or later)When set to
true
, hard eviction thresholds will be ignored while calculating node allocatable. See here for more details. (DEPRECATED: will be removed in 1.25 or later)
@@ -358,12 +358,10 @@ kubelet [flags]
@@ -558,7 +567,7 @@ WindowsHostNetwork=true|false (ALPHA - default=true)A set of
key=value
pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIPriorityAndFairness=true|false (BETA - default=true)
APIResponseCompression=true|false (BETA - default=true)
APIServerIdentity=true|false (BETA - default=true)
APIServerTracing=true|false (BETA - default=true)
-AdmissionWebhookMatchConditions=true|false (BETA- default=true)
+AdmissionWebhookMatchConditions=true|false (BETA - default=true)
AggregatedDiscoveryEndpoint=true|false (BETA - default=true)
AllAlpha=true|false (ALPHA - default=false)
AllBeta=true|false (BETA - default=false)
@@ -374,11 +372,11 @@ CPUManagerPolicyBetaOptions=true|false (BETA - default=true)
CPUManagerPolicyOptions=true|false (BETA - default=true)
CRDValidationRatcheting=true|false (ALPHA - default=false)
CSIMigrationPortworx=true|false (BETA - default=false)
-CSINodeExpandSecret=true|false (BETA - default=true)
CSIVolumeHealth=true|false (ALPHA - default=false)
CloudControllerManagerWebhook=true|false (ALPHA - default=false)
-CloudDualStackNodeIPs=true|false (ALPHA - default=false)
+CloudDualStackNodeIPs=true|false (BETA - default=true)
ClusterTrustBundle=true|false (ALPHA - default=false)
+ClusterTrustBundleProjection=true|false (ALPHA - default=false)
ComponentSLIs=true|false (BETA - default=true)
ConsistentListFromCache=true|false (ALPHA - default=false)
ContainerCheckpoint=true|false (ALPHA - default=false)
@@ -386,10 +384,10 @@ ContextualLogging=true|false (ALPHA - default=false)
CronJobsScheduledAnnotation=true|false (BETA - default=true)
CrossNamespaceVolumeDataSource=true|false (ALPHA - default=false)
CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)
-CustomResourceValidationExpressions=true|false (BETA - default=true)
-DevicePluginCDIDevices=true|false (ALPHA - default=false)
-DisableCloudProviders=true|false (ALPHA - default=false)
-DisableKubeletCloudCredentialProviders=true|false (ALPHA - default=false)
+DevicePluginCDIDevices=true|false (BETA - default=true)
+DisableCloudProviders=true|false (BETA - default=true)
+DisableKubeletCloudCredentialProviders=true|false (BETA - default=true)
+DisableNodeKubeProxyVersion=true|false (ALPHA - default=false)
DynamicResourceAllocation=true|false (ALPHA - default=false)
ElasticIndexedJob=true|false (BETA - default=true)
EventedPLEG=true|false (BETA - default=false)
@@ -398,6 +396,7 @@ GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - default=true)
HPAContainerMetrics=true|false (BETA - default=true)
HPAScaleToZero=true|false (ALPHA - default=false)
HonorPVReclaimPolicy=true|false (ALPHA - default=false)
+ImageMaximumGCAge=true|false (ALPHA - default=false)
InPlacePodVerticalScaling=true|false (ALPHA - default=false)
InTreePluginAWSUnregister=true|false (ALPHA - default=false)
InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)
@@ -406,74 +405,84 @@ InTreePluginGCEUnregister=true|false (ALPHA - default=false)
InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)
InTreePluginPortworxUnregister=true|false (ALPHA - default=false)
InTreePluginvSphereUnregister=true|false (ALPHA - default=false)
-JobBackoffLimitPerIndex=true|false (ALPHA - default=false)
+JobBackoffLimitPerIndex=true|false (BETA - default=true)
JobPodFailurePolicy=true|false (BETA - default=true)
-JobPodReplacementPolicy=true|false (ALPHA - default=false)
-JobReadyPods=true|false (BETA - default=true)
-KMSv2=true|false (BETA - default=true)
-KMSv2KDF=true|false (BETA - default=false)
+JobPodReplacementPolicy=true|false (BETA - default=true)
KubeProxyDrainingTerminatingNodes=true|false (ALPHA - default=false)
KubeletCgroupDriverFromCRI=true|false (ALPHA - default=false)
KubeletInUserNamespace=true|false (ALPHA - default=false)
KubeletPodResourcesDynamicResources=true|false (ALPHA - default=false)
KubeletPodResourcesGet=true|false (ALPHA - default=false)
+KubeletSeparateDiskGC=true|false (ALPHA - default=false)
KubeletTracing=true|false (BETA - default=true)
-LegacyServiceAccountTokenCleanUp=true|false (ALPHA - default=false)
+LegacyServiceAccountTokenCleanUp=true|false (BETA - default=true)
+LoadBalancerIPMode=true|false (ALPHA - default=false)
LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)
LogarithmicScaleDown=true|false (BETA - default=true)
LoggingAlphaOptions=true|false (ALPHA - default=false)
LoggingBetaOptions=true|false (BETA - default=true)
+MatchLabelKeysInPodAffinity=true|false (ALPHA - default=false)
MatchLabelKeysInPodTopologySpread=true|false (BETA - default=true)
MaxUnavailableStatefulSet=true|false (ALPHA - default=false)
MemoryManager=true|false (BETA - default=true)
MemoryQoS=true|false (ALPHA - default=false)
MinDomainsInPodTopologySpread=true|false (BETA - default=true)
-MultiCIDRRangeAllocator=true|false (ALPHA - default=false)
MultiCIDRServiceAllocator=true|false (ALPHA - default=false)
+NFTablesProxyMode=true|false (ALPHA - default=false)
NewVolumeManagerReconstruction=true|false (BETA - default=true)
NodeInclusionPolicyInPodTopologySpread=true|false (BETA - default=true)
NodeLogQuery=true|false (ALPHA - default=false)
NodeSwap=true|false (BETA - default=false)
OpenAPIEnums=true|false (BETA - default=true)
PDBUnhealthyPodEvictionPolicy=true|false (BETA - default=true)
-PersistentVolumeLastPhaseTransitionTime=true|false (ALPHA - default=false)
+PersistentVolumeLastPhaseTransitionTime=true|false (BETA - default=true)
PodAndContainerStatsFromCRI=true|false (ALPHA - default=false)
PodDeletionCost=true|false (BETA - default=true)
PodDisruptionConditions=true|false (BETA - default=true)
-PodHostIPs=true|false (ALPHA - default=false)
+PodHostIPs=true|false (BETA - default=true)
PodIndexLabel=true|false (BETA - default=true)
-PodReadyToStartContainersCondition=true|false (ALPHA - default=false)
+PodLifecycleSleepAction=true|false (ALPHA - default=false)
+PodReadyToStartContainersCondition=true|false (BETA - default=true)
PodSchedulingReadiness=true|false (BETA - default=true)
ProcMountType=true|false (ALPHA - default=false)
QOSReserved=true|false (ALPHA - default=false)
-ReadWriteOncePod=true|false (BETA - default=true)
RecoverVolumeExpansionFailure=true|false (ALPHA - default=false)
-RemainingItemCount=true|false (BETA - default=true)
RotateKubeletServerCertificate=true|false (BETA - default=true)
+RuntimeClassInImageCriApi=true|false (ALPHA - default=false)
SELinuxMountReadWriteOncePod=true|false (BETA - default=true)
-SchedulerQueueingHints=true|false (BETA - default=true)
+SchedulerQueueingHints=true|false (BETA - default=false)
SecurityContextDeny=true|false (ALPHA - default=false)
-ServiceNodePortStaticSubrange=true|false (BETA - default=true)
-SidecarContainers=true|false (ALPHA - default=false)
+SeparateTaintEvictionController=true|false (BETA - default=true)
+ServiceAccountTokenJTI=true|false (ALPHA - default=false)
+ServiceAccountTokenNodeBinding=true|false (ALPHA - default=false)
+ServiceAccountTokenNodeBindingValidation=true|false (ALPHA - default=false)
+ServiceAccountTokenPodNodeInfo=true|false (ALPHA - default=false)
+SidecarContainers=true|false (BETA - default=true)
SizeMemoryBackedVolumes=true|false (BETA - default=true)
-SkipReadOnlyValidationGCE=true|false (ALPHA - default=false)
StableLoadBalancerNodeSet=true|false (BETA - default=true)
StatefulSetAutoDeletePVC=true|false (BETA - default=true)
StatefulSetStartOrdinal=true|false (BETA - default=true)
StorageVersionAPI=true|false (ALPHA - default=false)
StorageVersionHash=true|false (BETA - default=true)
+StructuredAuthenticationConfiguration=true|false (ALPHA - default=false)
+StructuredAuthorizationConfiguration=true|false (ALPHA - default=false)
TopologyAwareHints=true|false (BETA - default=true)
TopologyManagerPolicyAlphaOptions=true|false (ALPHA - default=false)
-TopologyManagerPolicyBetaOptions=true|false (BETA - default=false)
+TopologyManagerPolicyBetaOptions=true|false (BETA - default=true)
TopologyManagerPolicyOptions=true|false (BETA - default=true)
+TranslateStreamCloseWebsocketRequests=true|false (ALPHA - default=false)
+UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true)
UnknownVersionInteroperabilityProxy=true|false (ALPHA - default=false)
-UserNamespacesStatelessPodsSupport=true|false (ALPHA - default=false)
+UserNamespacesPodSecurityStandards=true|false (ALPHA - default=false)
+UserNamespacesSupport=true|false (ALPHA - default=false)
ValidatingAdmissionPolicy=true|false (BETA - default=false)
+VolumeAttributesClass=true|false (ALPHA - default=false)
VolumeCapacityPriority=true|false (ALPHA - default=false)
WatchList=true|false (ALPHA - default=false)
WinDSR=true|false (ALPHA - default=false)
WinOverlay=true|false (BETA - default=true)
-WindowsHostNetwork=true|false (ALPHA - default=true)
+WindowsHostNetwork=true|false (ALPHA - default=true)
+ZeroLimitedNominalConcurrencyShares=true|false (BETA - default=false)
(DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)
--container-runtime-endpoint
by default. UNIX domain socket are supported on Linux, while `npipe` and `tcp` endpoints are supported on Windows. Examples: unix:///var/run/dockershim.sock
, npipe:////./pipe/dockershim
--container-runtime-endpoint
by default. UNIX domain socket are supported on Linux, while `npipe` and `tcp` endpoints are supported on Windows. Examples: unix:///path/to/runtime.sock
, npipe:////./pipe/runtime
. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)--config
flag. See kubelet-config-file for more information.)--config
flag. See kubelet-config-file for more information.)<resource name>=<resource quantity>
(e.g. "cpu=200m,memory=500Mi,ephemeral-storage=1Gi,pid='100'
&auot;) pairs that describe resources reserved for kubernetes system components. Currently cpu
, memory
and local ephemeral-storage
for root file system are supported. See here for more detail. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)--manifest-url
. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful'
(DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)--config
flag. See kubelet-config-file for more information.)false
RuntimeDefault
as the default seccomp profile for all workloads.--version=vX.Y.Z...
sets the reported version.1m0s
0
. (DEPRECATED: This parameter should be set via the config file specified by the kubelet's --config
flag. See kubelet-config-file for more information.)--config
flag. See kubelet-config-file for more information.)