Merge pull request #46209 from windsonsea/conger
[zh] Sync command-line-tools-reference/kube-controller-manager.mdpull/46231/head
Kubernetes Prow Robot
GitHub
commit
f690da1a15
|
|
@ -64,6 +64,21 @@ metric2,label='v1,v2,v3'</code>。
|
|||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--allow-metric-labels-manifest string</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
The path to the manifest file that contains the allow-list mapping. The format of the file is the same as the flag --allow-metric-labels. Note that the flag --allow-metric-labels will override the manifest file.
|
||||
-->
|
||||
包含允许列表映射的清单文件的路径。此文件的格式与 <code>--allow-metric-labels</code> 标志相同。
|
||||
请注意，<code>--allow-metric-labels</code> 标志将覆盖此清单文件。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--attach-detach-reconcile-sync-period duration <!--Default:-->默认值：1m0s</td>
|
||||
</tr>
|
||||
|
|
@ -182,18 +197,6 @@ The duration to cache 'unauthorized' responses from the webhook authorizer.
|
|||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--azure-container-registry-config string</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<!--
|
||||
Path to the file containing Azure container registry configuration information.
|
||||
-->
|
||||
指向包含 Azure 容器仓库配置信息的文件的路径名。
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--bind-address string <!--Default:-->默认值：0.0.0.0</td>
|
||||
</tr>
|
||||
|
|
@ -709,25 +712,32 @@ Interval between starting controller managers.
|
|||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.<br/>All controllers: bootstrap-signer-controller, certificatesigningrequest-approving-controller, certificatesigningrequest-cleaner-controller, certificatesigningrequest-signing-controller, cloud-node-lifecycle-controller, clusterrole-aggregation-controller, cronjob-controller, daemonset-controller, deployment-controller, disruption-controller, endpoints-controller, endpointslice-controller, endpointslice-mirroring-controller, ephemeral-volume-controller, garbage-collector-controller, horizontal-pod-autoscaler-controller, job-controller, namespace-controller, node-ipam-controller, node-lifecycle-controller, node-route-controller, persistentvolume-attach-detach-controller, persistentvolume-binder-controller, persistentvolume-expander-controller, persistentvolume-protection-controller, persistentvolumeclaim-protection-controller, pod-garbage-collector-controller, replicaset-controller, replicationcontroller-controller, resourcequota-controller, root-ca-certificate-publisher-controller, service-lb-controller, serviceaccount-controller, serviceaccount-token-controller, statefulset-controller, token-cleaner-controller, ttl-after-finished-controller, ttl-controller<br/>Disabled-by-default controllers: bootstrap-signer-controller, token-cleaner-controller
|
||||
A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.<br/>All controllers: bootstrap-signer-controller, certificatesigningrequest-approving-controller, certificatesigningrequest-cleaner-controller, certificatesigningrequest-signing-controller, cloud-node-lifecycle-controller, clusterrole-aggregation-controller, cronjob-controller, daemonset-controller, deployment-controller, disruption-controller, endpoints-controller, endpointslice-controller, endpointslice-mirroring-controller, ephemeral-volume-controller, garbage-collector-controller, horizontal-pod-autoscaler-controller, job-controller, legacy-serviceaccount-token-cleaner-controller, namespace-controller, node-ipam-controller, node-lifecycle-controller, node-route-controller, persistentvolume-attach-detach-controller, persistentvolume-binder-controller, persistentvolume-expander-controller, persistentvolume-protection-controller, persistentvolumeclaim-protection-controller, pod-garbage-collector-controller, replicaset-controller, replicationcontroller-controller, resourceclaim-controller, resourcequota-controller, root-ca-certificate-publisher-controller, service-cidr-controller, service-lb-controller, serviceaccount-controller, serviceaccount-token-controller, statefulset-controller, storage-version-migrator-controller, storageversion-garbage-collector-controller, taint-eviction-controller, token-cleaner-controller, ttl-after-finished-controller, ttl-controller, validatingadmissionpolicy-status-controller<br/>Disabled-by-default controllers: bootstrap-signer-controller, token-cleaner-controller
|
||||
-->
|
||||
要启用的控制器列表。<code>*</code> 表示启用所有默认启用的控制器；
|
||||
<code>foo</code> 启用名为 foo 的控制器；
|
||||
<code>-foo</code> 表示禁用名为 foo 的控制器。<br/>
|
||||
控制器的全集：bootstrap-signer-controller、certificatesigningrequest-approving-controller、
|
||||
certificatesigningrequest-cleaner-controller、certificatesigningrequest-signing-controller、
|
||||
cloud-node-lifecycle-controller、clusterrole-aggregation-controller、cronjob-controller、daemonset-controller、
|
||||
deployment-controller、disruption-controller、endpoints-controller、endpointslice-controller、
|
||||
endpointslice-mirroring-controller、ephemeral-volume-controller、garbage-collector-controller、
|
||||
horizontal-pod-autoscaler-controller、job-controller、namespace-controller、node-ipam-controller、
|
||||
cloud-node-lifecycle-controller、clusterrole-aggregation-controller、cronjob-controller、
|
||||
daemonset-controller、deployment-controller、disruption-controller、endpoints-controller、
|
||||
endpointslice-controller、endpointslice-mirroring-controller、ephemeral-volume-controller、
|
||||
garbage-collector-controller、horizontal-pod-autoscaler-controller、job-controller、
|
||||
legacy-serviceaccount-token-cleaner-controller、namespace-controller、node-ipam-controller、
|
||||
node-lifecycle-controller、node-route-controller、persistentvolume-attach-detach-controller、
|
||||
persistentvolume-binder-controller、persistentvolume-expander-controller、persistentvolume-protection-controller、
|
||||
persistentvolumeclaim-protection-controller、pod-garbage-collector-controller、replicaset-controller、
|
||||
replicationcontroller-controller、resourcequota-controller、root-ca-certificate-publisher-controller、
|
||||
service-lb-controller、serviceaccount-controller、serviceaccount-token-controller、statefulset-controller、
|
||||
token-cleaner-controller、ttl-after-finished-controller、ttl-controller<br/>
|
||||
默认禁用的控制器有：bootstrap-signer-controller、token-cleaner-controller。</td>
|
||||
persistentvolume-binder-controller、persistentvolume-expander-controller、
|
||||
persistentvolume-protection-controller、persistentvolumeclaim-protection-controller、
|
||||
pod-garbage-collector-controller、replicaset-controller、replicationcontroller-controller、
|
||||
resourceclaim-controller、resourcequota-controller、root-ca-certificate-publisher-controller、
|
||||
service-cidr-controller、service-lb-controller、serviceaccount-controller、serviceaccount-token-controller、
|
||||
statefulset-controller、storage-version-migrator-controller、storageversion-garbage-collector-controller、
|
||||
taint-eviction-controller、token-cleaner-controller、ttl-after-finished-controller、ttl-controller、
|
||||
validatingadmissionpolicy-status-controller<br/>
|
||||
默认禁用的控制器有： bootstrap-signer-controller、token-cleaner-controller。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
|
|
@ -743,6 +753,22 @@ Disable volume attach detach reconciler sync. Disabling this may cause volumes t
|
|||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--disable-force-detach-on-timeout</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
Prevent force detaching volumes based on maximum unmount time and node status. If this flag is set to true, the non-graceful node shutdown feature must be used to recover from node failure. See https://k8s.io/docs/storage-disable-force-detach-on-timeout/.
|
||||
-->
|
||||
基于最长卸载时间和节点状态防止强制解除挂接卷。
|
||||
如果将此标志设置为 true，则必须使用非体面节点关闭特性来从节点故障中恢复。
|
||||
参阅 https://k8s.io/zh-cn/docs/storage-disable-force-detach-on-timeout/
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--disabled-metrics strings</td>
|
||||
</tr>
|
||||
|
|
@ -856,48 +882,47 @@ The plugin to use when cloud provider is set to external. Can be empty, should o
|
|||
<tr>
|
||||
<td></td>
|
||||
<td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>
|
||||
APIListChunking=true|false (BETA - default=true)<br/>
|
||||
APIPriorityAndFairness=true|false (BETA - default=true)<br/>
|
||||
APIResponseCompression=true|false (BETA - default=true)<br/>
|
||||
APIServerIdentity=true|false (BETA - default=true)<br/>
|
||||
APIServerTracing=true|false (BETA - default=true)<br/>
|
||||
AdmissionWebhookMatchConditions=true|false (BETA - default=true)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (BETA - default=true)<br/>
|
||||
APIServingWithRoutine=true|false (BETA - default=true)<br/>
|
||||
AllAlpha=true|false (ALPHA - default=false)<br/>
|
||||
AllBeta=true|false (BETA - default=false)<br/>
|
||||
AnyVolumeDataSource=true|false (BETA - default=true)<br/>
|
||||
AppArmor=true|false (BETA - default=true)<br/>
|
||||
AppArmorFields=true|false (BETA - default=true)<br/>
|
||||
CPUManagerPolicyAlphaOptions=true|false (ALPHA - default=false)<br/>
|
||||
CPUManagerPolicyBetaOptions=true|false (BETA - default=true)<br/>
|
||||
CPUManagerPolicyOptions=true|false (BETA - default=true)<br/>
|
||||
CRDValidationRatcheting=true|false (ALPHA - default=false)<br/>
|
||||
CRDValidationRatcheting=true|false (BETA - default=true)<br/>
|
||||
CSIMigrationPortworx=true|false (BETA - default=false)<br/>
|
||||
CSINodeExpandSecret=true|false (BETA - default=true)<br/>
|
||||
CSIVolumeHealth=true|false (ALPHA - default=false)<br/>
|
||||
CloudControllerManagerWebhook=true|false (ALPHA - default=false)<br/>
|
||||
CloudDualStackNodeIPs=true|false (ALPHA - default=false)<br/>
|
||||
ClusterTrustBundle=true|false (ALPHA - default=false)<br/>
|
||||
ClusterTrustBundleProjection=true|false (ALPHA - default=false)<br/>
|
||||
ComponentSLIs=true|false (BETA - default=true)<br/>
|
||||
ConsistentListFromCache=true|false (ALPHA - default=false)<br/>
|
||||
ContainerCheckpoint=true|false (ALPHA - default=false)<br/>
|
||||
ContextualLogging=true|false (ALPHA - default=false)<br/>
|
||||
ContainerCheckpoint=true|false (BETA - default=true)<br/>
|
||||
ContextualLogging=true|false (BETA - default=true)<br/>
|
||||
CronJobsScheduledAnnotation=true|false (BETA - default=true)<br/>
|
||||
CrossNamespaceVolumeDataSource=true|false (ALPHA - default=false)<br/>
|
||||
CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>
|
||||
CustomResourceValidationExpressions=true|false (BETA - default=true)<br/>
|
||||
DevicePluginCDIDevices=true|false (ALPHA - default=false)<br/>
|
||||
DisableCloudProviders=true|false (ALPHA - default=false)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (ALPHA - default=false)<br/>
|
||||
CustomResourceFieldSelectors=true|false (ALPHA - default=false)<br/>
|
||||
DevicePluginCDIDevices=true|false (BETA - default=true)<br/>
|
||||
DisableCloudProviders=true|false (BETA - default=true)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (BETA - default=true)<br/>
|
||||
DisableNodeKubeProxyVersion=true|false (ALPHA - default=false)<br/>
|
||||
DynamicResourceAllocation=true|false (ALPHA - default=false)<br/>
|
||||
ElasticIndexedJob=true|false (BETA - default=true)<br/>
|
||||
EventedPLEG=true|false (BETA - default=false)<br/>
|
||||
EventedPLEG=true|false (ALPHA - default=false)<br/>
|
||||
GracefulNodeShutdown=true|false (BETA - default=true)<br/>
|
||||
GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - default=true)<br/>
|
||||
HPAContainerMetrics=true|false (BETA - default=true)<br/>
|
||||
HPAScaleToZero=true|false (ALPHA - default=false)<br/>
|
||||
HonorPVReclaimPolicy=true|false (ALPHA - default=false)<br/>
|
||||
ImageMaximumGCAge=true|false (BETA - default=true)<br/>
|
||||
InPlacePodVerticalScaling=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>
|
||||
|
|
@ -906,117 +931,130 @@ InTreePluginGCEUnregister=true|false (ALPHA - default=false)<br/>
|
|||
InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginPortworxUnregister=true|false (ALPHA - default=false)<br/>
|
||||
InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>
|
||||
JobBackoffLimitPerIndex=true|false (ALPHA - default=false)<br/>
|
||||
InformerResourceVersion=true|false (ALPHA - default=false)<br/>
|
||||
JobBackoffLimitPerIndex=true|false (BETA - default=true)<br/>
|
||||
JobManagedBy=true|false (ALPHA - default=false)<br/>
|
||||
JobPodFailurePolicy=true|false (BETA - default=true)<br/>
|
||||
JobPodReplacementPolicy=true|false (ALPHA - default=false)<br/>
|
||||
JobReadyPods=true|false (BETA - default=true)<br/>
|
||||
KMSv2=true|false (BETA - default=true)<br/>
|
||||
KMSv2KDF=true|false (BETA - default=false)<br/>
|
||||
KubeProxyDrainingTerminatingNodes=true|false (ALPHA - default=false)<br/>
|
||||
JobPodReplacementPolicy=true|false (BETA - default=true)<br/>
|
||||
JobSuccessPolicy=true|false (ALPHA - default=false)<br/>
|
||||
KubeProxyDrainingTerminatingNodes=true|false (BETA - default=true)<br/>
|
||||
KubeletCgroupDriverFromCRI=true|false (ALPHA - default=false)<br/>
|
||||
KubeletInUserNamespace=true|false (ALPHA - default=false)<br/>
|
||||
KubeletPodResourcesDynamicResources=true|false (ALPHA - default=false)<br/>
|
||||
KubeletPodResourcesGet=true|false (ALPHA - default=false)<br/>
|
||||
KubeletSeparateDiskGC=true|false (ALPHA - default=false)<br/>
|
||||
KubeletTracing=true|false (BETA - default=true)<br/>
|
||||
LegacyServiceAccountTokenCleanUp=true|false (ALPHA - default=false)<br/>
|
||||
LoadBalancerIPMode=true|false (BETA - default=true)<br/>
|
||||
LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>
|
||||
LogarithmicScaleDown=true|false (BETA - default=true)<br/>
|
||||
LoggingAlphaOptions=true|false (ALPHA - default=false)<br/>
|
||||
LoggingBetaOptions=true|false (BETA - default=true)<br/>
|
||||
MatchLabelKeysInPodAffinity=true|false (ALPHA - default=false)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
MaxUnavailableStatefulSet=true|false (ALPHA - default=false)<br/>
|
||||
MemoryManager=true|false (BETA - default=true)<br/>
|
||||
MemoryQoS=true|false (ALPHA - default=false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
MultiCIDRRangeAllocator=true|false (ALPHA - default=false)<br/>
|
||||
MultiCIDRServiceAllocator=true|false (ALPHA - default=false)<br/>
|
||||
NewVolumeManagerReconstruction=true|false (BETA - default=true)<br/>
|
||||
MutatingAdmissionPolicy=true|false (ALPHA - default=false)<br/>
|
||||
NFTablesProxyMode=true|false (ALPHA - default=false)<br/>
|
||||
NodeInclusionPolicyInPodTopologySpread=true|false (BETA - default=true)<br/>
|
||||
NodeLogQuery=true|false (ALPHA - default=false)<br/>
|
||||
NodeSwap=true|false (BETA - default=false)<br/>
|
||||
NodeLogQuery=true|false (BETA - default=false)<br/>
|
||||
NodeSwap=true|false (BETA - default=true)<br/>
|
||||
OpenAPIEnums=true|false (BETA - default=true)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (BETA - default=true)<br/>
|
||||
PersistentVolumeLastPhaseTransitionTime=true|false (ALPHA - default=false)<br/>
|
||||
PersistentVolumeLastPhaseTransitionTime=true|false (BETA - default=true)<br/>
|
||||
PodAndContainerStatsFromCRI=true|false (ALPHA - default=false)<br/>
|
||||
PodDeletionCost=true|false (BETA - default=true)<br/>
|
||||
PodDisruptionConditions=true|false (BETA - default=true)<br/>
|
||||
PodHostIPs=true|false (ALPHA - default=false)<br/>
|
||||
PodIndexLabel=true|false (BETA - default=true)<br/>
|
||||
PodReadyToStartContainersCondition=true|false (ALPHA - default=false)<br/>
|
||||
PodSchedulingReadiness=true|false (BETA - default=true)<br/>
|
||||
PodLifecycleSleepAction=true|false (BETA - default=true)<br/>
|
||||
PodReadyToStartContainersCondition=true|false (BETA - default=true)<br/>
|
||||
PortForwardWebsockets=true|false (ALPHA - default=false)<br/>
|
||||
ProcMountType=true|false (ALPHA - default=false)<br/>
|
||||
QOSReserved=true|false (ALPHA - default=false)<br/>
|
||||
ReadWriteOncePod=true|false (BETA - default=true)<br/>
|
||||
RecoverVolumeExpansionFailure=true|false (ALPHA - default=false)<br/>
|
||||
RemainingItemCount=true|false (BETA - default=true)<br/>
|
||||
RecursiveReadOnlyMounts=true|false (ALPHA - default=false)<br/>
|
||||
RelaxedEnvironmentVariableValidation=true|false (ALPHA - default=false)<br/>
|
||||
RetryGenerateName=true|false (ALPHA - default=false)<br/>
|
||||
RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>
|
||||
RuntimeClassInImageCriApi=true|false (ALPHA - default=false)<br/>
|
||||
SELinuxMount=true|false (ALPHA - default=false)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (BETA - default=true)<br/>
|
||||
SchedulerQueueingHints=true|false (BETA - default=true)<br/>
|
||||
SecurityContextDeny=true|false (ALPHA - default=false)<br/>
|
||||
ServiceNodePortStaticSubrange=true|false (BETA - default=true)<br/>
|
||||
SidecarContainers=true|false (ALPHA - default=false)<br/>
|
||||
SchedulerQueueingHints=true|false (BETA - default=false)<br/>
|
||||
SeparateCacheWatchRPC=true|false (BETA - default=true)<br/>
|
||||
SeparateTaintEvictionController=true|false (BETA - default=true)<br/>
|
||||
ServiceAccountTokenJTI=true|false (BETA - default=true)<br/>
|
||||
ServiceAccountTokenNodeBinding=true|false (ALPHA - default=false)<br/>
|
||||
ServiceAccountTokenNodeBindingValidation=true|false (BETA - default=true)<br/>
|
||||
ServiceAccountTokenPodNodeInfo=true|false (BETA - default=true)<br/>
|
||||
ServiceTrafficDistribution=true|false (ALPHA - default=false)<br/>
|
||||
SidecarContainers=true|false (BETA - default=true)<br/>
|
||||
SizeMemoryBackedVolumes=true|false (BETA - default=true)<br/>
|
||||
SkipReadOnlyValidationGCE=true|false (ALPHA - default=false)<br/>
|
||||
StableLoadBalancerNodeSet=true|false (BETA - default=true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (BETA - default=true)<br/>
|
||||
StatefulSetStartOrdinal=true|false (BETA - default=true)<br/>
|
||||
StorageNamespaceIndex=true|false (BETA - default=true)<br/>
|
||||
StorageVersionAPI=true|false (ALPHA - default=false)<br/>
|
||||
StorageVersionHash=true|false (BETA - default=true)<br/>
|
||||
StorageVersionMigrator=true|false (ALPHA - default=false)<br/>
|
||||
StructuredAuthenticationConfiguration=true|false (BETA - default=true)<br/>
|
||||
StructuredAuthorizationConfiguration=true|false (BETA - default=true)<br/>
|
||||
TopologyAwareHints=true|false (BETA - default=true)<br/>
|
||||
TopologyManagerPolicyAlphaOptions=true|false (ALPHA - default=false)<br/>
|
||||
TopologyManagerPolicyBetaOptions=true|false (BETA - default=true)<br/>
|
||||
TopologyManagerPolicyOptions=true|false (BETA - default=true)<br/>
|
||||
TranslateStreamCloseWebsocketRequests=true|false (BETA - default=true)<br/>
|
||||
UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true)<br/>
|
||||
UnknownVersionInteroperabilityProxy=true|false (ALPHA - default=false)<br/>
|
||||
UserNamespacesSupport=true|false (ALPHA - default=false)<br/>
|
||||
ValidatingAdmissionPolicy=true|false (BETA - default=false)<br/>
|
||||
UserNamespacesPodSecurityStandards=true|false (ALPHA - default=false)<br/>
|
||||
UserNamespacesSupport=true|false (BETA - default=false)<br/>
|
||||
VolumeAttributesClass=true|false (ALPHA - default=false)<br/>
|
||||
VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>
|
||||
WatchFromStorageWithoutResourceVersion=true|false (BETA - default=false)<br/>
|
||||
WatchList=true|false (ALPHA - default=false)<br/>
|
||||
WatchListClient=true|false (BETA - default=false)<br/>
|
||||
WinDSR=true|false (ALPHA - default=false)<br/>
|
||||
WinOverlay=true|false (BETA - default=true)<br/>
|
||||
WindowsHostNetwork=true|false (ALPHA - default=true)
|
||||
-->
|
||||
<p>
|
||||
一组 key=value 对，用来描述测试性/试验性功能的特性门控。可选项有：<br/>
|
||||
APIListChunking=true|false (BETA - 默认值为 true)<br/>
|
||||
APIPriorityAndFairness=true|false (BETA - 默认值为 true)<br/>
|
||||
APIResponseCompression=true|false (BETA - 默认值为 true)<br/>
|
||||
APIServerIdentity=true|false (BETA - 默认值为 true)<br/>
|
||||
APIServerTracing=true|false (BETA - 默认值为 true)<br/>
|
||||
AdmissionWebhookMatchConditions=true|false (BETA - 默认值为 true)<br/>
|
||||
AggregatedDiscoveryEndpoint=true|false (BETA - 默认值为 true)<br/>
|
||||
APIServingWithRoutine=true|false (BETA - 默认值为 true)<br/>
|
||||
AllAlpha=true|false (ALPHA - 默认值为 false)<br/>
|
||||
AllBeta=true|false (BETA - 默认值为 false)<br/>
|
||||
AnyVolumeDataSource=true|false (BETA - 默认值为 true)<br/>
|
||||
AppArmor=true|false (BETA - 默认值为 true)<br/>
|
||||
AppArmorFields=true|false (BETA - 默认值为 true)<br/>
|
||||
CPUManagerPolicyAlphaOptions=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CPUManagerPolicyBetaOptions=true|false (BETA - 默认值为 true)<br/>
|
||||
CPUManagerPolicyOptions=true|false (BETA - 默认值为 true)<br/>
|
||||
CRDValidationRatcheting=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CRDValidationRatcheting=true|false (BETA - 默认值为 true)<br/>
|
||||
CSIMigrationPortworx=true|false (BETA - 默认值为 false)<br/>
|
||||
CSINodeExpandSecret=true|false (BETA - 默认值为 true)<br/>
|
||||
CSIVolumeHealth=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CloudControllerManagerWebhook=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CloudDualStackNodeIPs=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ClusterTrustBundle=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ClusterTrustBundleProjection=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ComponentSLIs=true|false (BETA - 默认值为 true)<br/>
|
||||
ConsistentListFromCache=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ContainerCheckpoint=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ContextualLogging=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ContainerCheckpoint=true|false (BETA - 默认值为 true)<br/>
|
||||
ContextualLogging=true|false (BETA - 默认值为 true)<br/>
|
||||
CronJobsScheduledAnnotation=true|false (BETA - 默认值为 true)<br/>
|
||||
CrossNamespaceVolumeDataSource=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CustomCPUCFSQuotaPeriod=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CustomResourceValidationExpressions=true|false (BETA - 默认值为 true)<br/>
|
||||
DevicePluginCDIDevices=true|false (ALPHA - 默认值为 false)<br/>
|
||||
DisableCloudProviders=true|false (ALPHA - 默认值为 false)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (ALPHA - 默认值为 false)<br/>
|
||||
CustomResourceFieldSelectors=true|false (ALPHA - 默认值为 false)<br/>
|
||||
DevicePluginCDIDevices=true|false (BETA - 默认值为 true)<br/>
|
||||
DisableCloudProviders=true|false (BETA - 默认值为 true)<br/>
|
||||
DisableKubeletCloudCredentialProviders=true|false (BETA - 默认值为 true)<br/>
|
||||
DisableNodeKubeProxyVersion=true|false (ALPHA - 默认值为 false)<br/>
|
||||
DynamicResourceAllocation=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ElasticIndexedJob=true|false (BETA - 默认值为 true)<br/>
|
||||
EventedPLEG=true|false (BETA - 默认值为 false)<br/>
|
||||
EventedPLEG=true|false (ALPHA - 默认值为 false)<br/>
|
||||
GracefulNodeShutdown=true|false (BETA - 默认值为 true)<br/>
|
||||
GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - 默认值为 true)<br/>
|
||||
HPAContainerMetrics=true|false (BETA - 默认值为 true)<br/>
|
||||
HPAScaleToZero=true|false (ALPHA - 默认值为 false)<br/>
|
||||
HonorPVReclaimPolicy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ImageMaximumGCAge=true|false (BETA - 默认值为 true)<br/>
|
||||
InPlacePodVerticalScaling=true|false (ALPHA - 默认值为 false)<br/>
|
||||
InTreePluginAWSUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
||||
InTreePluginAzureDiskUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
||||
|
|
@ -1025,71 +1063,87 @@ InTreePluginGCEUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
|||
InTreePluginOpenStackUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
||||
InTreePluginPortworxUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
||||
InTreePluginvSphereUnregister=true|false (ALPHA - 默认值为 false)<br/>
|
||||
JobBackoffLimitPerIndex=true|false (ALPHA - 默认值为 false)<br/>
|
||||
InformerResourceVersion=true|false (ALPHA - 默认值为 false)<br/>
|
||||
JobBackoffLimitPerIndex=true|false (BETA - 默认值为 true)<br/>
|
||||
JobManagedBy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
JobPodFailurePolicy=true|false (BETA - 默认值为 true)<br/>
|
||||
JobPodReplacementPolicy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
JobReadyPods=true|false (BETA - 默认值为 true)<br/>
|
||||
KMSv2=true|false (BETA - 默认值为 true)<br/>
|
||||
KMSv2KDF=true|false (BETA - 默认值为 false)<br/>
|
||||
KubeProxyDrainingTerminatingNodes=true|false (ALPHA - 默认值为 false)<br/>
|
||||
JobPodReplacementPolicy=true|false (BETA - 默认值为 true)<br/>
|
||||
JobSuccessPolicy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeProxyDrainingTerminatingNodes=true|false (BETA - 默认值为 true)<br/>
|
||||
KubeletCgroupDriverFromCRI=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeletInUserNamespace=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeletPodResourcesDynamicResources=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeletPodResourcesGet=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeletSeparateDiskGC=true|false (ALPHA - 默认值为 false)<br/>
|
||||
KubeletTracing=true|false (BETA - 默认值为 true)<br/>
|
||||
LegacyServiceAccountTokenCleanUp=true|false (ALPHA - 默认值为 false)<br/>
|
||||
LoadBalancerIPMode=true|false (BETA - 默认值为 true)<br/>
|
||||
LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 默认值为 false)<br/>
|
||||
LogarithmicScaleDown=true|false (BETA - 默认值为 true)<br/>
|
||||
LoggingAlphaOptions=true|false (ALPHA - 默认值为 false)<br/>
|
||||
LoggingBetaOptions=true|false (BETA - 默认值为 true)<br/>
|
||||
MatchLabelKeysInPodAffinity=true|false (ALPHA - 默认值为 false)<br/>
|
||||
MatchLabelKeysInPodTopologySpread=true|false (BETA - 默认值为 true)<br/>
|
||||
MaxUnavailableStatefulSet=true|false (ALPHA - 默认值为 false)<br/>
|
||||
MemoryManager=true|false (BETA - 默认值为 true)<br/>
|
||||
MemoryQoS=true|false (ALPHA - 默认值为 false)<br/>
|
||||
MinDomainsInPodTopologySpread=true|false (BETA - 默认值为 true)<br/>
|
||||
MultiCIDRRangeAllocator=true|false (ALPHA - 默认值为 false)<br/>
|
||||
MultiCIDRServiceAllocator=true|false (ALPHA - 默认值为 false)<br/>
|
||||
NewVolumeManagerReconstruction=true|false (BETA - 默认值为 true)<br/>
|
||||
MutatingAdmissionPolicy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
NFTablesProxyMode=true|false (ALPHA - 默认值为 false)<br/>
|
||||
NodeInclusionPolicyInPodTopologySpread=true|false (BETA - 默认值为 true)<br/>
|
||||
NodeLogQuery=true|false (ALPHA - 默认值为 false)<br/>
|
||||
NodeSwap=true|false (BETA - 默认值为 false)<br/>
|
||||
NodeLogQuery=true|false (BETA - 默认值为 false)<br/>
|
||||
NodeSwap=true|false (BETA - 默认值为 true)<br/>
|
||||
OpenAPIEnums=true|false (BETA - 默认值为 true)<br/>
|
||||
PDBUnhealthyPodEvictionPolicy=true|false (BETA - 默认值为 true)<br/>
|
||||
PersistentVolumeLastPhaseTransitionTime=true|false (ALPHA - 默认值为 false)<br/>
|
||||
PersistentVolumeLastPhaseTransitionTime=true|false (BETA - 默认值为 true)<br/>
|
||||
PodAndContainerStatsFromCRI=true|false (ALPHA - 默认值为 false)<br/>
|
||||
PodDeletionCost=true|false (BETA - 默认值为 true)<br/>
|
||||
PodDisruptionConditions=true|false (BETA - 默认值为 true)<br/>
|
||||
PodHostIPs=true|false (ALPHA - 默认值为 false)<br/>
|
||||
PodIndexLabel=true|false (BETA - 默认值为 true)<br/>
|
||||
PodReadyToStartContainersCondition=true|false (ALPHA - 默认值为 false)<br/>
|
||||
PodSchedulingReadiness=true|false (BETA - 默认值为 true)<br/>
|
||||
PodLifecycleSleepAction=true|false (BETA - 默认值为 true)<br/>
|
||||
PodReadyToStartContainersCondition=true|false (BETA - 默认值为 true)<br/>
|
||||
PortForwardWebsockets=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ProcMountType=true|false (ALPHA - 默认值为 false)<br/>
|
||||
QOSReserved=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ReadWriteOncePod=true|false (BETA - 默认值为 true)<br/>
|
||||
RecoverVolumeExpansionFailure=true|false (ALPHA - 默认值为 false)<br/>
|
||||
RemainingItemCount=true|false (BETA - 默认值为 true)<br/>
|
||||
RecursiveReadOnlyMounts=true|false (ALPHA - 默认值为 false)<br/>
|
||||
RelaxedEnvironmentVariableValidation=true|false (ALPHA - 默认值为 false)<br/>
|
||||
RetryGenerateName=true|false (ALPHA - 默认值为 false)<br/>
|
||||
RotateKubeletServerCertificate=true|false (BETA - 默认值为 true)<br/>
|
||||
RuntimeClassInImageCriApi=true|false (ALPHA - 默认值为 false)<br/>
|
||||
SELinuxMount=true|false (ALPHA - 默认值为 false)<br/>
|
||||
SELinuxMountReadWriteOncePod=true|false (BETA - 默认值为 true)<br/>
|
||||
SchedulerQueueingHints=true|false (BETA - 默认值为 true)<br/>
|
||||
SecurityContextDeny=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ServiceNodePortStaticSubrange=true|false (BETA - 默认值为 true)<br/>
|
||||
SidecarContainers=true|false (ALPHA - 默认值为 false)<br/>
|
||||
SchedulerQueueingHints=true|false (BETA - 默认值为 false)<br/>
|
||||
SeparateCacheWatchRPC=true|false (BETA - 默认值为 true)<br/>
|
||||
SeparateTaintEvictionController=true|false (BETA - 默认值为 true)<br/>
|
||||
ServiceAccountTokenJTI=true|false (BETA - 默认值为 true)<br/>
|
||||
ServiceAccountTokenNodeBinding=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ServiceAccountTokenNodeBindingValidation=true|false (BETA - 默认值为 true)<br/>
|
||||
ServiceAccountTokenPodNodeInfo=true|false (BETA - 默认值为 true)<br/>
|
||||
ServiceTrafficDistribution=true|false (ALPHA - 默认值为 false)<br/>
|
||||
SidecarContainers=true|false (BETA - 默认值为 true)<br/>
|
||||
SizeMemoryBackedVolumes=true|false (BETA - 默认值为 true)<br/>
|
||||
SkipReadOnlyValidationGCE=true|false (ALPHA - 默认值为 false)<br/>
|
||||
StableLoadBalancerNodeSet=true|false (BETA - 默认值为 true)<br/>
|
||||
StatefulSetAutoDeletePVC=true|false (BETA - 默认值为 true)<br/>
|
||||
StatefulSetStartOrdinal=true|false (BETA - 默认值为 true)<br/>
|
||||
StorageNamespaceIndex=true|false (BETA - 默认值为 true)<br/>
|
||||
StorageVersionAPI=true|false (ALPHA - 默认值为 false)<br/>
|
||||
StorageVersionHash=true|false (BETA - 默认值为 true)<br/>
|
||||
StorageVersionMigrator=true|false (ALPHA - 默认值为 false)<br/>
|
||||
StructuredAuthenticationConfiguration=true|false (BETA - 默认值为 true)<br/>
|
||||
StructuredAuthorizationConfiguration=true|false (BETA - 默认值为 true)<br/>
|
||||
TopologyAwareHints=true|false (BETA - 默认值为 true)<br/>
|
||||
TopologyManagerPolicyAlphaOptions=true|false (ALPHA - 默认值为 false)<br/>
|
||||
TopologyManagerPolicyBetaOptions=true|false (BETA - 默认值为 true)<br/>
|
||||
TopologyManagerPolicyOptions=true|false (BETA - 默认值为 true)<br/>
|
||||
TranslateStreamCloseWebsocketRequests=true|false (BETA - 默认值为 true)<br/>
|
||||
UnauthenticatedHTTP2DOSMitigation=true|false (BETA - 默认值为 true)<br/>
|
||||
UnknownVersionInteroperabilityProxy=true|false (ALPHA - 默认值为 false)<br/>
|
||||
UserNamespacesSupport=true|false (ALPHA - 默认值为 false)<br/>
|
||||
ValidatingAdmissionPolicy=true|false (BETA - 默认值为 false)<br/>
|
||||
UserNamespacesPodSecurityStandards=true|false (ALPHA - 默认值为 false)<br/>
|
||||
UserNamespacesSupport=true|false (BETA - 默认值为 false)<br/>
|
||||
VolumeAttributesClass=true|false (ALPHA - 默认值为 false)<br/>
|
||||
VolumeCapacityPriority=true|false (ALPHA - 默认值为 false)<br/>
|
||||
WatchFromStorageWithoutResourceVersion=true|false (BETA - 默认值为 false)<br/>
|
||||
WatchList=true|false (ALPHA - 默认值为 false)<br/>
|
||||
WatchListClient=true|false (BETA - 默认值为 false)<br/>
|
||||
WinDSR=true|false (ALPHA - 默认值为 false)<br/>
|
||||
WinOverlay=true|false (BETA - 默认值为 true)<br/>
|
||||
WindowsHostNetwork=true|false (ALPHA - 默认值为 true)
|
||||
|
|
@ -1250,12 +1304,13 @@ Path to kubeconfig file with authorization and master location information.
|
|||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<!--
|
||||
Number of nodes from which node-lifecycle-controller treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller.
|
||||
Number of nodes from which node-lifecycle-controller treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller. Notice: If nodes reside in multiple zones, this threshold will be considered as zone node size threshold for each zone to determine node eviction rate independently.
|
||||
-->
|
||||
node-lifecycle-controller 在执行 Pod 驱逐操作逻辑时，
|
||||
基于此标志所设置的节点个数阈值来判断所在集群是否为大规模集群。
|
||||
当集群规模小于等于此规模时，
|
||||
<code>--secondary-node-eviction-rate</code> 会被隐式重设为 0。
|
||||
注意：如果节点位于多个区域中，则此阈值将被每个区域视为区域节点大小阈值，以独立确定节点驱逐率。
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
|
|
@ -1392,6 +1447,39 @@ Maximum number of seconds between log flushes
|
|||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--log-text-info-buffer-size quantity</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
[Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
|
||||
-->
|
||||
[Alpha] 在具有分割输出流的文本格式中，信息消息可以被缓冲一段时间以提高性能。
|
||||
默认值零字节表示禁用缓冲区机制。
|
||||
大小可以指定为字节数（512）、1000 的倍数（1K）、1024 的倍数（2Ki）或它们的幂（3M、4G、5Mi、6Gi）。
|
||||
启用 LoggingAlphaOptions 特性门控以使用此功能。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--log-text-split-stream</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
[Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
|
||||
-->
|
||||
[Alpha] 以文本格式，将错误消息写入 stderr，将信息消息写入 stdout。
|
||||
默认是将单个流写入标准输出。
|
||||
启用 LoggingAlphaOptions 特性门控以使用此功能。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr>
|
||||
<td colspan="2">--logging-format string <!--Default:-->默认值："text"</td>
|
||||
</tr>
|
||||
|
|
@ -1922,12 +2010,21 @@ File containing the default x509 Certificate for HTTPS. (CA cert, if any, concat
|
|||
</tr>
|
||||
<tr>
|
||||
<td></td><td style="line-height: 130%; word-wrap: break-word;">
|
||||
<p>
|
||||
<!--
|
||||
Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.<br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.
|
||||
Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.<br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
|
||||
-->
|
||||
供服务器使用的加密包的逗号分隔列表。若忽略此标志，则使用 Go 语言默认的加密包。<br/>
|
||||
可选值包括：TLS_AES_128_GCM_SHA256、TLS_AES_256_GCM_SHA384、TLS_CHACHA20_POLY1305_SHA256、TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA、TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256、TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA、TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384、TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305、TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256、TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA、TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256、TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA、TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384、TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305、TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256、TLS_RSA_WITH_AES_128_CBC_SHA、TLS_RSA_WITH_AES_128_GCM_SHA256、TLS_RSA_WITH_AES_256_CBC_SHA、TLS_RSA_WITH_AES_256_GCM_SHA384。
|
||||
<br/>不安全的值: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256、TLS_ECDHE_ECDSA_WITH_RC4_128_SHA、TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA、TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256、TLS_ECDHE_RSA_WITH_RC4_128_SHA、TLS_RSA_WITH_3DES_EDE_CBC_SHA、TLS_RSA_WITH_AES_128_CBC_SHA256、TLS_RSA_WITH_RC4_128_SHA。
|
||||
可选值包括：TLS_AES_128_GCM_SHA256、TLS_AES_256_GCM_SHA384、TLS_CHACHA20_POLY1305_SHA256、TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA、
|
||||
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256、TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA、TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384、
|
||||
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305、TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256、TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA、
|
||||
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256、TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA、TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384、
|
||||
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305、TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256。
|
||||
<br/>不安全的值：TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256、TLS_ECDHE_ECDSA_WITH_RC4_128_SHA、TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA、
|
||||
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256、TLS_ECDHE_RSA_WITH_RC4_128_SHA、TLS_RSA_WITH_3DES_EDE_CBC_SHA、TLS_RSA_WITH_AES_128_CBC_SHA、
|
||||
TLS_RSA_WITH_AES_128_CBC_SHA256、TLS_RSA_WITH_AES_128_GCM_SHA256、TLS_RSA_WITH_AES_256_CBC_SHA、TLS_RSA_WITH_AES_256_GCM_SHA384、
|
||||
TLS_RSA_WITH_RC4_128_SHA。
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue