Kubelet Configuration (v1beta1)
KubeletConfiguration
SerializedNodeConfigSource
SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource. This type is used internally by the Kubelet for tracking checkpointed dynamic configs. It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
Field | Description |
---|---|
apiVersion string | kubelet.config.k8s.io/v1beta1 |
kind string | SerializedNodeConfigSource |
source core/v1.NodeConfigSource | source is the source that we are serializing. |
HairpinMode
(Alias of string
)
HairpinMode denotes how the kubelet should configure networking to handle hairpin packets.
KubeletAnonymousAuthentication
Appears in:
Field | Description |
---|---|
enabled bool | enabled allows anonymous requests to the kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous , and a group name of system:unauthenticated . |
KubeletAuthentication
Field | Description |
---|---|
x509 KubeletX509Authentication | x509 contains settings related to x509 client certificate authentication. |
webhook | webhook contains settings related to webhook bearer token authentication. |
anonymous KubeletAnonymousAuthentication | anonymous contains settings related to anonymous authentication. |
Appears in:
KubeletAuthorizationMode
(Alias of string
)
Appears in:
KubeletWebhookAuthentication
Appears in:
Field | Description |
---|---|
enabled bool | enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API. |
cacheTTL meta/v1.Duration | cacheTTL enables caching of authentication results |
KubeletWebhookAuthorization
Appears in:
Field | Description |
---|---|
cacheAuthorizedTTL | cacheAuthorizedTTL is the duration to cache ‘authorized’ responses from the webhook authorizer. |
cacheUnauthorizedTTL meta/v1.Duration | cacheUnauthorizedTTL is the duration to cache ‘unauthorized’ responses from the webhook authorizer. |
KubeletX509Authentication
Appears in:
Field | Description |
---|---|
clientCAFile string | clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName, and groups corresponding to the Organization in the client certificate. |
MemoryReservation
Appears in:
MemoryReservation specifies the memory reservation of different types for each NUMA node
Appears in:
Field | Description |
---|---|
swapBehavior string | swapBehavior configures swap memory available to container workloads. May be one of “”, “LimitedSwap”: workload combined memory and swap usage cannot exceed pod memory limit “UnlimitedSwap”: workloads can use unlimited swap, up to the allocatable limit. |
ResourceChangeDetectionStrategy
(Alias of string
)
Appears in:
ShutdownGracePeriodByPodPriority
Appears in:
ShutdownGracePeriodByPodPriority specifies the shutdown grace period for Pods based on their associated priority class value
Field | Description |
---|---|
priority [Required]int32 | priority is the priority value associated with the shutdown grace period |
shutdownGracePeriodSeconds [Required]int64 | shutdownGracePeriodSeconds is the shutdown grace period in seconds |
FormatOptions
Appears in:
FormatOptions contains options for the different logging formats.
Field | Description |
---|---|
json [Required]JSONOptions | [Experimental] JSON contains options for logging format “json”. |
JSONOptions
Appears in:
JSONOptions contains options for logging format “json”.
LoggingConfiguration
Appears in:
LoggingConfiguration contains logging options Refer Logs Options for more information.
Field | Description |
---|---|
format [Required]string | Format Flag specifies the structure of log messages. default value of format is text |
flushFrequency [Required] | Maximum number of seconds between log flushes. Ignored if the selected logging backend writes log messages without buffering. |
verbosity [Required]uint32 | Verbosity is the threshold that determines which log messages are logged. Default is zero which logs only the most important messages. Higher values enable additional messages. Error messages are always logged. |
vmodule [Required]VModuleConfiguration | VModule overrides the verbosity threshold for individual files. Only supported for “text” log format. |
sanitization [Required]bool | [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens). Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`) |
options [Required] | [Experimental] Options holds additional parameters that are specific to the different logging formats. Only the options for the selected format get used, but all of them get validated. |
(Alias of []k8s.io/component-base/config/v1alpha1.VModuleItem
)
Appears in:
VModuleConfiguration is a collection of individual file names or patterns and the corresponding verbosity threshold.