[zh] sync 1.2 kube-apiserver
Zhuzhenghao
parent
586bf092f8
commit
c76cbc8ffe
|
|
@ -782,9 +782,9 @@ CIDRs opened in GCE firewall for L7 LB traffic proxy & health checks
|
|||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<!--
|
||||
Enable lock contention profiling, if profiling is enabled
|
||||
Enable block profiling, if profiling is enabled
|
||||
-->
|
||||
如果启用了性能分析，则启用锁争用性能分析。
|
||||
如果启用了性能分析，则启用阻塞分析。
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
|
|
@ -793,17 +793,33 @@ Enable lock contention profiling, if profiling is enabled
|
|||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
List of allowed origins for CORS, comma separated.
|
||||
An allowed origin can be a regular expression to support subdomain matching.
|
||||
If this list is empty CORS will not be enabled.
|
||||
If this list is empty CORS will not be enabled. Please ensure each expression matches the entire hostname by anchoring to the start with '^' or including the '//' prefix, and by anchoring to the end with '$' or including the ':' port separator suffix. Examples of valid expressions are '//example.com(:|$)' and '^https://example.com(:|$)'
|
||||
-->
|
||||
CORS 允许的来源清单，以逗号分隔。
|
||||
允许的来源可以是支持子域匹配的正则表达式。
|
||||
如果此列表为空，则不会启用 CORS。
|
||||
请确保每个表达式与整个主机名相匹配，方法是用'^'锚定开始或包括'//'前缀，同时用'$'锚定结束或包括':'端口分隔符后缀。
|
||||
有效表达式的例子是'//example.com(:|$)'和'^https://example.com(:|$)'。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--debug-socket-path string</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>
|
||||
<!--
|
||||
Use an unprotected (no authn/authz) unix-domain socket for profiling with the given path
|
||||
-->
|
||||
使用位于给定路径的、未受保护的（无身份认证或鉴权的）UNIX 域套接字执行性能分析。
|
||||
</p></td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--default-not-ready-toleration-seconds int <!--Default: -->默认值：300</td>
|
||||
</tr>
|
||||
|
|
@ -853,13 +869,11 @@ Number of workers spawned for DeleteCollection call. These are used to speed up
|
|||
</td>
|
||||
<td style="line-height: 130%; word-wrap: break-word;">
|
||||
<!--
|
||||
admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, PodSecurity, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook, ResourceQuota).
|
||||
Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurity, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook.
|
||||
The order of plugins in this flag does not matter.
|
||||
admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, PodSecurity, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, ClusterTrustBundleAttest, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, ClusterTrustBundleAttest, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurity, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.
|
||||
-->
|
||||
<p>
|
||||
尽管位于默认启用的插件列表中，仍须被禁用的准入插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）。
|
||||
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。
|
||||
尽管位于默认启用的插件列表中，仍须被禁用的准入插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、ClusterTrustBundleAttest、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）。
|
||||
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、ClusterTrustBundleAttest、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。
|
||||
该标志中插件的顺序无关紧要。
|
||||
</p>
|
||||
</td>
|
||||
|
|
@ -900,11 +914,11 @@ File with apiserver egress selector configuration.
|
|||
</td>
|
||||
<td style="line-height: 130%; word-wrap: break-word;">
|
||||
<!--
|
||||
admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, PodSecurity, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurity, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.
|
||||
admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, PodSecurity, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, ClusterTrustBundleAttest, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, ClusterTrustBundleAttest, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurity, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionPolicy, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.
|
||||
-->
|
||||
<p>
|
||||
除了默认启用的插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）之外要启用的准入插件。
|
||||
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。该标志中插件的顺序无关紧要。
|
||||
除了默认启用的插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、ClusterTrustBundleAttest、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）之外要启用的准入插件。
|
||||
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、ClusterTrustBundleAttest、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。该标志中插件的顺序无关紧要。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
|
@ -1185,16 +1199,16 @@ comma-separated 'key=True|False' pairs
|
|||
<tr>
|
||||
<td>
|
||||
</td>
|
||||
<td style="line-height: 130%; word-wrap: break-word;">
|
||||
<td style="line-height: 130%; word-wrap: break-word;"><p>
|
||||
<!--
|
||||
A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>
|
||||
APIListChunking=true|false (BETA - default=true)<br/>
|
||||
A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>
|
||||
APIPriorityAndFairness=true|false (BETA - default=true)<br/>
|
||||
APIResponseCompression=true|false (BETA - default=true)<br/>
|
||||
APISelfSubjectReview=true|false (ALPHA - default=false)<br/>
|
||||
APISelfSubjectReview=true|false (BETA - default=true)<br/>
|
||||
APIServerIdentity=true|false (BETA - default=true)<br/>
|
||||
APIServerTracing=true|false (ALPHA - default=false)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (ALPHA - default=false)<br/>
|
||||
APIServerTracing=true|false (BETA - default=true)<br/>
|
||||
AdmissionWebhookMatchConditions=true|false (ALPHA - default=false)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (BETA - default=true)<br/>
|
||||
AllAlpha=true|false (ALPHA - default=false)<br/>
|
||||
AllBeta=true|false (BETA - default=false)<br/>
|
||||
AnyVolumeDataSource=true|false (BETA - default=true)<br/>
|
||||
|
|
@ -1204,29 +1218,31 @@ CPUManagerPolicyBetaOptions=true|false (BETA - default=true)<br/>
|
|||
CPUManagerPolicyOptions=true|false (BETA - default=true)<br/>
|
||||
CSIMigrationPortworx=true|false (BETA - default=false)<br/>
|
||||
CSIMigrationRBD=true|false (ALPHA - default=false)<br/>
|
||||
CSINodeExpandSecret=true|false (ALPHA - default=false)<br/>
|
||||
CSINodeExpandSecret=true|false (BETA - default=true)<br/>
|
||||
CSIVolumeHealth=true|false (ALPHA - default=false)<br/>
|
||||
ComponentSLIs=true|false (ALPHA - default=false)<br/>
|
||||
CloudControllerManagerWebhook=true|false (ALPHA - default=false)<br/>
|
||||
CloudDualStackNodeIPs=true|false (ALPHA - default=false)<br/>
|
||||
ClusterTrustBundle=true|false (ALPHA - default=false)<br/>
|
||||
ComponentSLIs=true|false (BETA - default=true)<br/>
|
||||
ContainerCheckpoint=true|false (ALPHA - default=false)<br/>
|
||||
ContextualLogging=true|false (ALPHA - default=false)<br/>
|
||||
CronJobTimeZone=true|false (BETA - default=true)<br/>
|
||||
CrossNamespaceVolumeDataSource=true|false (ALPHA - default=false)<br/>
|
||||
CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>
|
||||
CustomResourceValidationExpressions=true|false (BETA - default=true)<br/>
|
||||
DisableCloudProviders=true|false (ALPHA - default=false)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (ALPHA - default=false)<br/>
|
||||
DownwardAPIHugePages=true|false (BETA - default=true)<br/>
|
||||
DynamicResourceAllocation=true|false (ALPHA - default=false)<br/>
|
||||
EventedPLEG=true|false (ALPHA - default=false)<br/>
|
||||
ElasticIndexedJob=true|false (BETA - default=true)<br/>
|
||||
EventedPLEG=true|false (BETA - default=false)<br/>
|
||||
ExpandedDNSConfig=true|false (BETA - default=true)<br/>
|
||||
ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>
|
||||
GRPCContainerProbe=true|false (BETA - default=true)<br/>
|
||||
GracefulNodeShutdown=true|false (BETA - default=true)
|
||||
GracefulNodeShutdown=true|false (BETA - default=true)<br/>
|
||||
GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - default=true)<br/>
|
||||
HPAContainerMetrics=true|false (ALPHA - default=false)<br/>
|
||||
HPAContainerMetrics=true|false (BETA - default=true)<br/>
|
||||
HPAScaleToZero=true|false (ALPHA - default=false)<br/>
|
||||
HonorPVReclaimPolicy=true|false (ALPHA - default=false)<br/>
|
||||
IPTablesOwnershipCleanup=true|false (ALPHA - default=false)<br/>
|
||||
IPTablesOwnershipCleanup=true|false (BETA - default=true)<br/>
|
||||
InPlacePodVerticalScaling=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginAzureFileUnregister=true|false (ALPHA - default=false)<br/>
|
||||
|
|
@ -1235,76 +1251,80 @@ InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>
|
|||
InTreePluginPortworxUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginRBDUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>
|
||||
JobMutableNodeSchedulingDirectives=true|false (BETA - default=true)<br/>
|
||||
JobPodFailurePolicy=true|false (BETA - default=true)<br/>
|
||||
JobReadyPods=true|false (BETA - default=true)<br/>
|
||||
KMSv2=true|false (ALPHA - default=false)<br/>
|
||||
KMSv2=true|false (BETA - default=true)<br/>
|
||||
KubeletInUserNamespace=true|false (ALPHA - default=false)<br/>
|
||||
KubeletPodResources=true|false (BETA - default=true)<br/>
|
||||
KubeletPodResourcesDynamicResources=true|false (ALPHA - default=false)<br/>
|
||||
KubeletPodResourcesGet=true|false (ALPHA - default=false)<br/>
|
||||
KubeletPodResourcesGetAllocatable=true|false (BETA - default=true)<br/>
|
||||
KubeletTracing=true|false (ALPHA - default=false)<br/>
|
||||
LegacyServiceAccountTokenTracking=true|false (ALPHA - default=false)<br/>
|
||||
KubeletTracing=true|false (BETA - default=true)<br/>
|
||||
LegacyServiceAccountTokenTracking=true|false (BETA - default=true)<br/>
|
||||
LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>
|
||||
LogarithmicScaleDown=true|false (BETA - default=true)<br/>
|
||||
LoggingAlphaOptions=true|false (ALPHA - default=false)<br/>
|
||||
LoggingBetaOptions=true|false (BETA - default=true)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (ALPHA - default=false)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
MaxUnavailableStatefulSet=true|false (ALPHA - default=false)<br/>
|
||||
MemoryManager=true|false (BETA - default=true)<br/>
|
||||
MemoryQoS=true|false (ALPHA - default=false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - default=false)<br/>
|
||||
MinimizeIPTablesRestore=true|false (ALPHA - default=false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
MinimizeIPTablesRestore=true|false (BETA - default=true)<br/>
|
||||
MultiCIDRRangeAllocator=true|false (ALPHA - default=false)<br/>
|
||||
MultiCIDRServiceAllocator=true|false (ALPHA - default=false)<br/>
|
||||
NetworkPolicyStatus=true|false (ALPHA - default=false)<br/>
|
||||
NewVolumeManagerReconstruction=true|false (BETA - default=true)<br/>
|
||||
NodeInclusionPolicyInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
NodeLogQuery=true|false (ALPHA - default=false)<br/>
|
||||
NodeOutOfServiceVolumeDetach=true|false (BETA - default=true)<br/>
|
||||
NodeSwap=true|false (ALPHA - default=false)<br/>
|
||||
OpenAPIEnums=true|false (BETA - default=true)<br/>
|
||||
OpenAPIV3=true|false (BETA - default=true)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (ALPHA - default=false)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (BETA - default=true)<br/>
|
||||
PodAndContainerStatsFromCRI=true|false (ALPHA - default=false)<br/>
|
||||
PodDeletionCost=true|false (BETA - default=true)<br/>
|
||||
PodDisruptionConditions=true|false (BETA - default=true)<br/>
|
||||
PodHasNetworkCondition=true|false (ALPHA - default=false)<br/>
|
||||
PodSchedulingReadiness=true|false (ALPHA - default=false)<br/>
|
||||
PodSchedulingReadiness=true|false (BETA - default=true)<br/>
|
||||
ProbeTerminationGracePeriod=true|false (BETA - default=true)<br/>
|
||||
ProcMountType=true|false (ALPHA - default=false)<br/>
|
||||
ProxyTerminatingEndpoints=true|false (BETA - default=true)<br/>
|
||||
QOSReserved=true|false (ALPHA - default=false)<br/>
|
||||
ReadWriteOncePod=true|false (ALPHA - default=false)<br/>
|
||||
ReadWriteOncePod=true|false (BETA - default=true)<br/>
|
||||
RecoverVolumeExpansionFailure=true|false (ALPHA - default=false)<br/>
|
||||
RemainingItemCount=true|false (BETA - default=true)<br/>
|
||||
RetroactiveDefaultStorageClass=true|false (BETA - default=true)<br/>
|
||||
RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (ALPHA - default=false)<br/>
|
||||
SeccompDefault=true|false (BETA - default=true)<br/>
|
||||
ServerSideFieldValidation=true|false (BETA - default=true)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (BETA - default=true)<br/>
|
||||
SecurityContextDeny=true|false (ALPHA - default=false)<br/>
|
||||
ServiceNodePortStaticSubrange=true|false (ALPHA - default=false)<br/>
|
||||
SizeMemoryBackedVolumes=true|false (BETA - default=true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (ALPHA - default=false)<br/>
|
||||
StatefulSetStartOrdinal=true|false (ALPHA - default=false)<br/>
|
||||
StableLoadBalancerNodeSet=true|false (BETA - default=true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (BETA - default=true)<br/>
|
||||
StatefulSetStartOrdinal=true|false (BETA - default=true)<br/>
|
||||
StorageVersionAPI=true|false (ALPHA - default=false)<br/>
|
||||
StorageVersionHash=true|false (BETA - default=true)<br/>
|
||||
TopologyAwareHints=true|false (BETA - default=true)<br/>
|
||||
TopologyManager=true|false (BETA - default=true)<br/>
|
||||
TopologyManagerPolicyAlphaOptions=true|false (ALPHA - default=false)<br/>
|
||||
TopologyManagerPolicyBetaOptions=true|false (BETA - default=false)<br/>
|
||||
TopologyManagerPolicyOptions=true|false (ALPHA - default=false)<br/>
|
||||
UserNamespacesStatelessPodsSupport=true|false (ALPHA - default=false)<br/>
|
||||
ValidatingAdmissionPolicy=true|false (ALPHA - default=false)<br/>
|
||||
VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>
|
||||
WatchList=true|false (ALPHA - default=false)<br/>
|
||||
WinDSR=true|false (ALPHA - default=false)<br/>
|
||||
WinOverlay=true|false (BETA - default=true)<br/>
|
||||
WindowsHostNetwork=true|false (ALPHA - default=true)
|
||||
-->
|
||||
<p>
|
||||
一组 key=value 对，用来描述测试性/试验性功能的特性门控。可选项有：<br/>
|
||||
APIListChunking=true|false (BETA - 默认值=true)<br/>
|
||||
APIPriorityAndFairness=true|false (BETA - 默认值=true)<br/>
|
||||
APIResponseCompression=true|false (BETA - 默认值=true)<br/>
|
||||
APISelfSubjectReview=true|false (ALPHA - 默认值=false)<br/>
|
||||
APISelfSubjectReview=true|false (BETA - 默认值=true)<br/>
|
||||
APIServerIdentity=true|false (BETA - 默认值=true)<br/>
|
||||
APIServerTracing=true|false (ALPHA - 默认值=false)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (ALPHA - 默认值=false)<br/>
|
||||
APIServerTracing=true|false (BETA - 默认值=true)<br/>
|
||||
AdmissionWebhookMatchConditions=true|false (ALPHA - 默认值=false)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (BETA - 默认值=true)<br/>
|
||||
AllAlpha=true|false (ALPHA - 默认值=false)<br/>
|
||||
AllBeta=true|false (BETA - 默认值=false)<br/>
|
||||
AnyVolumeDataSource=true|false (BETA - 默认值=true)<br/>
|
||||
|
|
@ -1314,29 +1334,31 @@ CPUManagerPolicyBetaOptions=true|false (BETA - 默认值=true)<br/>
|
|||
CPUManagerPolicyOptions=true|false (BETA - 默认值=true)<br/>
|
||||
CSIMigrationPortworx=true|false (BETA - 默认值=false)<br/>
|
||||
CSIMigrationRBD=true|false (ALPHA - 默认值=false)<br/>
|
||||
CSINodeExpandSecret=true|false (ALPHA - 默认值=false)<br/>
|
||||
CSINodeExpandSecret=true|false (BETA - 默认值=true)<br/>
|
||||
CSIVolumeHealth=true|false (ALPHA - 默认值=false)<br/>
|
||||
ComponentSLIs=true|false (ALPHA - 默认值=false)<br/>
|
||||
CloudControllerManagerWebhook=true|false (ALPHA - 默认值=false)<br/>
|
||||
CloudDualStackNodeIPs=true|false (ALPHA - 默认值=false)<br/>
|
||||
ClusterTrustBundle=true|false (ALPHA - 默认值=false)<br/>
|
||||
ComponentSLIs=true|false (BETA - 默认值=true)<br/>
|
||||
ContainerCheckpoint=true|false (ALPHA - 默认值=false)<br/>
|
||||
ContextualLogging=true|false (ALPHA - 默认值=false)<br/>
|
||||
CronJobTimeZone=true|false (BETA - 默认值=true)<br/>
|
||||
CrossNamespaceVolumeDataSource=true|false (ALPHA - 默认值=false)<br/>
|
||||
CustomCPUCFSQuotaPeriod=true|false (ALPHA - 默认值=false)<br/>
|
||||
CustomResourceValidationExpressions=true|false (BETA - 默认值=true)<br/>
|
||||
DisableCloudProviders=true|false (ALPHA - 默认值=false)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (ALPHA - 默认值=false)<br/>
|
||||
DownwardAPIHugePages=true|false (BETA - 默认值=true)<br/>
|
||||
DynamicResourceAllocation=true|false (ALPHA - 默认值=false)<br/>
|
||||
EventedPLEG=true|false (ALPHA - 默认值=false)<br/>
|
||||
ElasticIndexedJob=true|false (BETA - 默认值=true)<br/>
|
||||
EventedPLEG=true|false (BETA - 默认值=false)<br/>
|
||||
ExpandedDNSConfig=true|false (BETA - 默认值=true)<br/>
|
||||
ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 默认值=false)<br/>
|
||||
GRPCContainerProbe=true|false (BETA - 默认值=true)<br/>
|
||||
GracefulNodeShutdown=true|false (BETA - 默认值=true)
|
||||
GracefulNodeShutdown=true|false (BETA - 默认值=true)<br/>
|
||||
GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - 默认值=true)<br/>
|
||||
HPAContainerMetrics=true|false (ALPHA - 默认值=false)<br/>
|
||||
HPAContainerMetrics=true|false (BETA - 默认值=true)<br/>
|
||||
HPAScaleToZero=true|false (ALPHA - 默认值=false)<br/>
|
||||
HonorPVReclaimPolicy=true|false (ALPHA - 默认值=false)<br/>
|
||||
IPTablesOwnershipCleanup=true|false (ALPHA - 默认值=false)<br/>
|
||||
IPTablesOwnershipCleanup=true|false (BETA - 默认值=true)<br/>
|
||||
InPlacePodVerticalScaling=true|false (ALPHA - 默认值=false)<br/>
|
||||
InTreePluginAWSUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
InTreePluginAzureDiskUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
InTreePluginAzureFileUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
|
|
@ -1345,63 +1367,67 @@ InTreePluginOpenStackUnregister=true|false (ALPHA - 默认值=false)<br/>
|
|||
InTreePluginPortworxUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
InTreePluginRBDUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
InTreePluginvSphereUnregister=true|false (ALPHA - 默认值=false)<br/>
|
||||
JobMutableNodeSchedulingDirectives=true|false (BETA - 默认值=true)<br/>
|
||||
JobPodFailurePolicy=true|false (BETA - 默认值=true)<br/>
|
||||
JobReadyPods=true|false (BETA - 默认值=true)<br/>
|
||||
KMSv2=true|false (ALPHA - 默认值=false)<br/>
|
||||
KMSv2=true|false (BETA - 默认值=true)<br/>
|
||||
KubeletInUserNamespace=true|false (ALPHA - 默认值=false)<br/>
|
||||
KubeletPodResources=true|false (BETA - 默认值=true)<br/>
|
||||
KubeletPodResourcesDynamicResources=true|false (ALPHA - 默认值=false)<br/>
|
||||
KubeletPodResourcesGet=true|false (ALPHA - 默认值=false)<br/>
|
||||
KubeletPodResourcesGetAllocatable=true|false (BETA - 默认值=true)<br/>
|
||||
KubeletTracing=true|false (ALPHA - 默认值=false)<br/>
|
||||
LegacyServiceAccountTokenTracking=true|false (ALPHA - 默认值=false)<br/>
|
||||
KubeletTracing=true|false (BETA - 默认值=true)<br/>
|
||||
LegacyServiceAccountTokenTracking=true|false (BETA - 默认值=true)<br/>
|
||||
LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 默认值=false)<br/>
|
||||
LogarithmicScaleDown=true|false (BETA - 默认值=true)<br/>
|
||||
LoggingAlphaOptions=true|false (ALPHA - 默认值=false)<br/>
|
||||
LoggingBetaOptions=true|false (BETA - 默认值=true)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (ALPHA - 默认值=false)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (BETA - 默认值=true)<br/>
|
||||
MaxUnavailableStatefulSet=true|false (ALPHA - 默认值=false)<br/>
|
||||
MemoryManager=true|false (BETA - 默认值=true)<br/>
|
||||
MemoryQoS=true|false (ALPHA - 默认值=false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - 默认值=false)<br/>
|
||||
MinimizeIPTablesRestore=true|false (ALPHA - 默认值=false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - 默认值=true)<br/>
|
||||
MinimizeIPTablesRestore=true|false (BETA - 默认值=true)<br/>
|
||||
MultiCIDRRangeAllocator=true|false (ALPHA - 默认值=false)<br/>
|
||||
MultiCIDRServiceAllocator=true|false (ALPHA - 默认值=false)<br/>
|
||||
NetworkPolicyStatus=true|false (ALPHA - 默认值=false)<br/>
|
||||
NewVolumeManagerReconstruction=true|false (BETA - 默认值=true)<br/>
|
||||
NodeInclusionPolicyInPodTopologySpread=true|false (BETA - 默认值=true)<br/>
|
||||
NodeLogQuery=true|false (ALPHA - 默认值=false)<br/>
|
||||
NodeOutOfServiceVolumeDetach=true|false (BETA - 默认值=true)<br/>
|
||||
NodeSwap=true|false (ALPHA - 默认值=false)<br/>
|
||||
OpenAPIEnums=true|false (BETA - 默认值=true)<br/>
|
||||
OpenAPIV3=true|false (BETA - 默认值=true)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (ALPHA - 默认值=false)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (BETA - 默认值=true)<br/>
|
||||
PodAndContainerStatsFromCRI=true|false (ALPHA - 默认值=false)<br/>
|
||||
PodDeletionCost=true|false (BETA - 默认值=true)<br/>
|
||||
PodDisruptionConditions=true|false (BETA - 默认值=true)<br/>
|
||||
PodHasNetworkCondition=true|false (ALPHA - 默认值=false)<br/>
|
||||
PodSchedulingReadiness=true|false (ALPHA - 默认值=false)<br/>
|
||||
PodSchedulingReadiness=true|false (BETA - 默认值=true)<br/>
|
||||
ProbeTerminationGracePeriod=true|false (BETA - 默认值=true)<br/>
|
||||
ProcMountType=true|false (ALPHA - 默认值=false)<br/>
|
||||
ProxyTerminatingEndpoints=true|false (BETA - 默认值=true)<br/>
|
||||
QOSReserved=true|false (ALPHA - 默认值=false)<br/>
|
||||
ReadWriteOncePod=true|false (ALPHA - 默认值=false)<br/>
|
||||
ReadWriteOncePod=true|false (BETA - 默认值=true)<br/>
|
||||
RecoverVolumeExpansionFailure=true|false (ALPHA - 默认值=false)<br/>
|
||||
RemainingItemCount=true|false (BETA - 默认值=true)<br/>
|
||||
RetroactiveDefaultStorageClass=true|false (BETA - 默认值=true)<br/>
|
||||
RotateKubeletServerCertificate=true|false (BETA - 默认值=true)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (ALPHA - 默认值=false)<br/>
|
||||
SeccompDefault=true|false (BETA - 默认值=true)<br/>
|
||||
ServerSideFieldValidation=true|false (BETA - 默认值=true)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (BETA - 默认值=true)<br/>
|
||||
SecurityContextDeny=true|false (ALPHA - 默认值=false)<br/>
|
||||
ServiceNodePortStaticSubrange=true|false (ALPHA - 默认值=false)<br/>
|
||||
SizeMemoryBackedVolumes=true|false (BETA - 默认值=true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (ALPHA - 默认值=false)<br/>
|
||||
StatefulSetStartOrdinal=true|false (ALPHA - 默认值=false)<br/>
|
||||
StableLoadBalancerNodeSet=true|false (BETA - 默认值=true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (BETA - 默认值=true)<br/>
|
||||
StatefulSetStartOrdinal=true|false (BETA - 默认值=true)<br/>
|
||||
StorageVersionAPI=true|false (ALPHA - 默认值=false)<br/>
|
||||
StorageVersionHash=true|false (BETA - 默认值=true)<br/>
|
||||
TopologyAwareHints=true|false (BETA - 默认值=true)<br/>
|
||||
TopologyManager=true|false (BETA - 默认值=true)<br/>
|
||||
TopologyManagerPolicyAlphaOptions=true|false (ALPHA - 默认值=false)<br/>
|
||||
TopologyManagerPolicyBetaOptions=true|false (BETA - 默认值=false)<br/>
|
||||
TopologyManagerPolicyOptions=true|false (ALPHA - 默认值=false)<br/>
|
||||
UserNamespacesStatelessPodsSupport=true|false (ALPHA - 默认值=false)<br/>
|
||||
ValidatingAdmissionPolicy=true|false (ALPHA - 默认值=false)<br/>
|
||||
VolumeCapacityPriority=true|false (ALPHA - 默认值=false)<br/>
|
||||
WatchList=true|false (ALPHA - 默认值=false)<br/>
|
||||
WinDSR=true|false (ALPHA - 默认值=false)<br/>
|
||||
WinOverlay=true|false (BETA - 默认值=true)<br/>
|
||||
WindowsHostNetwork=true|false (ALPHA - 默认值=true)
|
||||
|
|
@ -2214,6 +2240,18 @@ in addition 'Connection: close' response header is set in order to tear down the
|
|||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--shutdown-watch-termination-grace-period duration</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>
|
||||
<!--
|
||||
This option, if set, represents the maximum amount of grace period the apiserver will wait for active watch request(s) to drain during the graceful server shutdown window.
|
||||
-->
|
||||
此选项如果被设置了，则表示 API 服务器体面关闭服务器窗口内，等待活跃的监听请求耗尽的最长宽限期。
|
||||
</p></td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--storage-backend string</td>
|
||||
</tr>
|
||||
|
|
|
|||
Loading…
Reference in New Issue