CINXE.COM
为 Pod 或容器配置安全上下文 | Kubernetes
<!doctype html> <html lang="zh-cn" class="no-js"> <head> <meta name="robots" content="noindex, nofollow"> <link rel="alternate" hreflang="en" href="https://kubernetes.io/docs/tasks/configure-pod-container/security-context/"> <link rel="alternate" hreflang="id" href="https://kubernetes.io/id/docs/tasks/configure-pod-container/security-context/"> <link rel="alternate" hreflang="ja" href="https://kubernetes.io/ja/docs/tasks/configure-pod-container/security-context/"> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="generator" content="Hugo 0.121.2"> <link rel="shortcut icon" type="image/png" href="/images/favicon.png"> <link rel="apple-touch-icon" href="/favicons/apple-touch-icon-180x180.png" sizes="180x180"> <link rel="manifest" href="/manifest.webmanifest"> <link rel="apple-touch-icon" href="/images/kubernetes-192x192.png"> <title>为 Pod 或容器配置安全上下文 | Kubernetes</title><meta property="og:title" content="为 Pod 或容器配置安全上下文" /> <meta property="og:description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:" /> <meta property="og:type" content="article" /> <meta property="og:url" content="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/" /><meta property="article:section" content="docs" /> <meta property="article:modified_time" content="2023-09-12T18:31:39+08:00" /> <meta itemprop="name" content="为 Pod 或容器配置安全上下文"> <meta itemprop="description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:"> <meta itemprop="dateModified" content="2023-09-12T18:31:39+08:00" /> <meta itemprop="wordCount" content="991"> <meta itemprop="keywords" content="" /><meta name="twitter:card" content="summary"/><meta name="twitter:title" content="为 Pod 或容器配置安全上下文"/> <meta name="twitter:description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:"/> <link href="/scss/main.css" rel="stylesheet"> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "url": "https://kubernetes.io", "logo": "https://kubernetes.io/images/favicon.png", } </script> <meta name="theme-color" content="#326ce5"> <style> .gutter { background-color: #eee; background-repeat: no-repeat; background-position: 50%; } .gutter.gutter-horizontal { background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAeCAYAAADkftS9AAAAIklEQVQoU2M4c+bMfxAGAgYYmwGrIIiDjrELjpo5aiZeMwF+yNnOs5KSvgAAAABJRU5ErkJggg=='); cursor: col-resize; } #sidebarnav, #maindoc { max-width: 100%; } #maindoc { overflow-wrap: break-word; } @media (max-width: 768px) { #sidebarnav { padding-left: 15px; padding-right: 15px; } } </style> <link rel="stylesheet" href="/css/feature-states.css"> <meta name="description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:"> <meta property="og:description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:"> <meta name="twitter:description" content="安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于: 自主访问控制(Discretionary Access Control): 基于用户 ID(UID)和组 ID(GID) 来判定对对象(例如文件)的访问权限。 安全性增强的 Linux(SELinux): 为对象赋予安全性标签。 以特权模式或者非特权模式运行。 Linux 权能: 为进程赋予 root 用户的部分特权而非全部特权。 AppArmor:使用程序配置来限制个别程序的权能。 Seccomp:过滤进程的系统调用。 allowPrivilegeEscalation:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 no_new_privs标志。 当容器满足一下条件之一时,allowPrivilegeEscalation 总是为 true: 以特权模式运行,或者 具有 CAP_SYS_ADMIN 权能 readOnlyRootFilesystem:以只读方式加载容器的根文件系统。 以上条目不是安全上下文设置的完整列表 -- 请参阅 SecurityContext 了解其完整列表。 准备开始 你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 Minikube 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一: Killercoda 玩转 Kubernetes 要获知版本信息,请输入 kubectl version. 为 Pod 设置安全性上下文 要为 Pod 设置安全性设置,可在 Pod 规约中包含 securityContext 字段。securityContext 字段值是一个 PodSecurityContext 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 securityContext 和一个 emptyDir 卷:"> <meta property="og:url" content="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/"> <meta property="og:title" content="为 Pod 或容器配置安全上下文"> <meta name="twitter:title" content="为 Pod 或容器配置安全上下文"> <meta name="twitter:image" content="https://kubernetes.io/images/favicon.png" /> <meta name="twitter:image:alt" content="Kubernetes"> <meta property="og:image" content="/images/kubernetes-horizontal-color.png"> <meta property="og:type" content="article"> <script src="/js/jquery-3.6.0.min.js" intregrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <script src="/js/split-1.6.0.js" intregrity="sha384-0blL3GqHy6+9fw0cyY2Aoiwg4onHAtslAs4OkqZY7UQBrR65/K4gI+hxLdWDrjpz"></script> <script defer src="/js/dismiss_banner.js"></script> <title>为 Pod 或容器配置安全上下文 | Kubernetes</title> </head> <body class="td-page td-documentation"> <header> <nav class="js-navbar-scroll navbar navbar-expand navbar-dark flex-column flex-md-row td-navbar" data-auto-burger="primary"> <a class="navbar-brand img-fluid" href="/zh-cn/"></a> <div class="td-navbar-nav-scroll ml-md-auto" id="main_navbar"> <ul class="navbar-nav mt-2 mt-lg-0"> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link active" href="/zh-cn/docs/" >文档</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/blog/" >Kubernetes 博客</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/training/" >培训</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/partners/" >合作伙伴</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/community/" >社区</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/case-studies/" >案例分析</a> </li> <li class="nav-item mr-n3 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> 版本列表 </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/zh-cn/releases">发布信息</a> <a class="dropdown-item" href="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">v1.31</a> <a class="dropdown-item" href="https://v1-30.docs.kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">v1.30</a> <a class="dropdown-item" href="https://v1-29.docs.kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">v1.29</a> <a class="dropdown-item" href="https://v1-28.docs.kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">v1.28</a> <a class="dropdown-item" href="https://v1-27.docs.kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">v1.27</a> </div> </li> <li class="nav-item mr-n4 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdownMenuLink" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> 中文 (Chinese) </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/docs/tasks/configure-pod-container/security-context/">English</a> <a class="dropdown-item" href="/id/docs/tasks/configure-pod-container/security-context/">Bahasa Indonesia (Indonesian)</a> <a class="dropdown-item" href="/ja/docs/tasks/configure-pod-container/security-context/">日本語 (Japanese)</a> </div> </li> <li class="search-item nav-item mr-n4 mr-lg-0"> <div class="search-bar"> <i class="search-icon fas fa-search"></i> <input type="search" name="q" class="search-input td-search-input" placeholder="搜索" aria-label="搜索" autocomplete="off" > </div> </li> </ul> </div> <button id="hamburger" onclick="kub.toggleMenu()" data-auto-burger-exclude><div></div></button> </nav> <section class="header-hero filler"> </section> </header> <div class="container-fluid td-outer"> <div class="td-main"> <div class="row flex-column flex-md-row"> <div id="sidebarnav" class="split td-sidebar d-print-none"> <script> $(function() { $("#td-section-nav a").removeClass("active"); $("#td-section-nav #m-zh-cn-docs-tasks-configure-pod-container-security-context").addClass("active"); $("#td-section-nav #m-zh-cn-docs-tasks-configure-pod-container-security-context-li span").addClass("td-sidebar-nav-active-item"); $("#td-section-nav #m-zh-cn-docs-tasks-configure-pod-container-security-context").parents("li").addClass("active-path"); $("#td-section-nav li.active-path").addClass("show"); $("#td-section-nav li.active-path").children("input").prop('checked', true); $("#td-section-nav #m-zh-cn-docs-tasks-configure-pod-container-security-context-li").siblings("li").addClass("show"); $("#td-section-nav #m-zh-cn-docs-tasks-configure-pod-container-security-context-li").children("ul").children("li").addClass("show"); $("#td-sidebar-menu").toggleClass("d-none"); }); </script> <div id="td-sidebar-menu" class="td-sidebar__inner d-none"> <form class="td-sidebar__search d-flex align-items-center"> <div class="search-bar"> <i class="search-icon fas fa-search"></i> <input type="search" name="q" class="search-input td-search-input" placeholder="搜索" aria-label="搜索" autocomplete="off" > </div> <button class="btn btn-link td-sidebar__toggle d-md-none p-0 ml-3 fas fa-bars" type="button" data-toggle="collapse" data-target="#td-section-nav" aria-controls="td-docs-nav" aria-expanded="false" aria-label="Toggle section navigation"> </button> </form> <nav class="collapse td-sidebar-nav foldable-nav" id="td-section-nav"> <ul class="td-sidebar-nav__section pr-md-3 ul-0"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-li"> <ul class="ul-1"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-home-li"> <input type="checkbox" id="m-zh-cn-docs-home-check"/> <label for="m-zh-cn-docs-home-check"><a href="/zh-cn/docs/home/" title="Kubernetes 文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-home"><span class="">文档</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-home-supported-doc-versions-li"> <input type="checkbox" id="m-zh-cn-docs-home-supported-doc-versions-check"/> <label for="m-zh-cn-docs-home-supported-doc-versions-check"><a href="/zh-cn/docs/home/supported-doc-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-home-supported-doc-versions"><span class="">Kubernetes 文档支持的版本</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-li"> <input type="checkbox" id="m-zh-cn-docs-setup-check"/> <label for="m-zh-cn-docs-setup-check"><a href="/zh-cn/docs/setup/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup"><span class="">入门</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-learning-environment-li"> <input type="checkbox" id="m-zh-cn-docs-setup-learning-environment-check"/> <label for="m-zh-cn-docs-setup-learning-environment-check"><a href="/zh-cn/docs/setup/learning-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-learning-environment"><span class="">学习环境</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-check"/> <label for="m-zh-cn-docs-setup-production-environment-check"><a href="/zh-cn/docs/setup/production-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment"><span class="">生产环境</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-container-runtimes-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-container-runtimes-check"/> <label for="m-zh-cn-docs-setup-production-environment-container-runtimes-check"><a href="/zh-cn/docs/setup/production-environment/container-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-container-runtimes"><span class="">容器运行时</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-tools-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-check"><a href="/zh-cn/docs/setup/production-environment/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment-tools"><span class="">使用部署工具安装 Kubernetes</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm"><span class="">使用 kubeadm 引导集群</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm"><span class="">安装 kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm"><span class="">对 kubeadm 进行故障排查</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm"><span class="">使用 kubeadm 创建集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/control-plane-flags/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags"><span class="">使用 kubeadm API 定制组件</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/ha-topology/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology"><span class="">高可用拓扑选项</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/high-availability/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability"><span class="">利用 kubeadm 创建高可用集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm"><span class="">使用 kubeadm 创建一个高可用 etcd 集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/kubelet-integration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration"><span class="">使用 kubeadm 配置集群中的每个 kubelet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/dual-stack-support/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support"><span class="">使用 kubeadm 支持双协议栈</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions-check"/> <label for="m-zh-cn-docs-setup-production-environment-turnkey-solutions-check"><a href="/zh-cn/docs/setup/production-environment/turnkey-solutions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions"><span class="">Turnkey 云解决方案</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-best-practices-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-check"/> <label for="m-zh-cn-docs-setup-best-practices-check"><a href="/zh-cn/docs/setup/best-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-best-practices"><span class="">最佳实践</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-cluster-large-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-cluster-large-check"/> <label for="m-zh-cn-docs-setup-best-practices-cluster-large-check"><a href="/zh-cn/docs/setup/best-practices/cluster-large/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-cluster-large"><span class="">大规模集群的注意事项</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-multiple-zones-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-multiple-zones-check"/> <label for="m-zh-cn-docs-setup-best-practices-multiple-zones-check"><a href="/zh-cn/docs/setup/best-practices/multiple-zones/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-multiple-zones"><span class="">运行于多可用区环境</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-node-conformance-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-node-conformance-check"/> <label for="m-zh-cn-docs-setup-best-practices-node-conformance-check"><a href="/zh-cn/docs/setup/best-practices/node-conformance/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-node-conformance"><span class="">校验节点设置</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-check"/> <label for="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-check"><a href="/zh-cn/docs/setup/best-practices/enforcing-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards"><span class="">强制实施 Pod 安全性标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-certificates-check"/> <label for="m-zh-cn-docs-setup-best-practices-certificates-check"><a href="/zh-cn/docs/setup/best-practices/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-certificates"><span class="">PKI 证书和要求</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-check"/> <label for="m-zh-cn-docs-concepts-check"><a href="/zh-cn/docs/concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts"><span class="">概念</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-overview-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-check"/> <label for="m-zh-cn-docs-concepts-overview-check"><a href="/zh-cn/docs/concepts/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-overview"><span class="">概述</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-overview-working-with-objects"><span class="">Kubernetes 对象</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/object-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management"><span class="">Kubernetes 对象管理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-names-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-names-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-names-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/names/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-names"><span class="">对象名称和 ID</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-labels-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels"><span class="">标签和选择算符</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces"><span class="">名字空间</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations"><span class="">注解</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/field-selectors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors"><span class="">字段选择器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/finalizers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers"><span class="">Finalizers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/owners-dependents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents"><span class="">属主与附属</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/common-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels"><span class="">推荐使用的标签</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-components-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-components-check"/> <label for="m-zh-cn-docs-concepts-overview-components-check"><a href="/zh-cn/docs/concepts/overview/components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-components"><span class="">Kubernetes 组件</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-kubernetes-api-check"/> <label for="m-zh-cn-docs-concepts-overview-kubernetes-api-check"><a href="/zh-cn/docs/concepts/overview/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-kubernetes-api"><span class="">Kubernetes API</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-architecture-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-check"/> <label for="m-zh-cn-docs-concepts-architecture-check"><a href="/zh-cn/docs/concepts/architecture/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-architecture"><span class="">Kubernetes 架构</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-nodes-check"/> <label for="m-zh-cn-docs-concepts-architecture-nodes-check"><a href="/zh-cn/docs/concepts/architecture/nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-nodes"><span class="">节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-check"/> <label for="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-check"><a href="/zh-cn/docs/concepts/architecture/control-plane-node-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication"><span class="">节点与控制面之间的通信</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-controller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-controller-check"/> <label for="m-zh-cn-docs-concepts-architecture-controller-check"><a href="/zh-cn/docs/concepts/architecture/controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-controller"><span class="">控制器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-leases-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-leases-check"/> <label for="m-zh-cn-docs-concepts-architecture-leases-check"><a href="/zh-cn/docs/concepts/architecture/leases/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-leases"><span class="">租约(Lease)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cloud-controller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cloud-controller-check"/> <label for="m-zh-cn-docs-concepts-architecture-cloud-controller-check"><a href="/zh-cn/docs/concepts/architecture/cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cloud-controller"><span class="">云控制器管理器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cgroups-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cgroups-check"/> <label for="m-zh-cn-docs-concepts-architecture-cgroups-check"><a href="/zh-cn/docs/concepts/architecture/cgroups/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cgroups"><span class="">关于 cgroup v2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cri-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cri-check"/> <label for="m-zh-cn-docs-concepts-architecture-cri-check"><a href="/zh-cn/docs/concepts/architecture/cri/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cri"><span class="">容器运行时接口(CRI)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-garbage-collection-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-garbage-collection-check"/> <label for="m-zh-cn-docs-concepts-architecture-garbage-collection-check"><a href="/zh-cn/docs/concepts/architecture/garbage-collection/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-garbage-collection"><span class="">垃圾收集</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-check"/> <label for="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-check"><a href="/zh-cn/docs/concepts/architecture/mixed-version-proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy"><span class="">混合版本代理</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-check"/> <label for="m-zh-cn-docs-concepts-containers-check"><a href="/zh-cn/docs/concepts/containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-containers"><span class="">容器</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-images-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-images-check"/> <label for="m-zh-cn-docs-concepts-containers-images-check"><a href="/zh-cn/docs/concepts/containers/images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-images"><span class="">镜像</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-container-environment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-container-environment-check"/> <label for="m-zh-cn-docs-concepts-containers-container-environment-check"><a href="/zh-cn/docs/concepts/containers/container-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-container-environment"><span class="">容器环境</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-runtime-class-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-runtime-class-check"/> <label for="m-zh-cn-docs-concepts-containers-runtime-class-check"><a href="/zh-cn/docs/concepts/containers/runtime-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-runtime-class"><span class="">容器运行时类(Runtime Class)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-check"/> <label for="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-check"><a href="/zh-cn/docs/concepts/containers/container-lifecycle-hooks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks"><span class="">容器生命周期回调</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-check"/> <label for="m-zh-cn-docs-concepts-workloads-check"><a href="/zh-cn/docs/concepts/workloads/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads"><span class="">工作负载</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-pods-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-check"><a href="/zh-cn/docs/concepts/workloads/pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads-pods"><span class="">Pod</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-check"><a href="/zh-cn/docs/concepts/workloads/pods/pod-lifecycle/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle"><span class="">Pod 的生命周期</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-init-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-init-containers-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-init-containers-check"><a href="/zh-cn/docs/concepts/workloads/pods/init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-init-containers"><span class="">Init 容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-sidecar-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-sidecar-containers-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-sidecar-containers-check"><a href="/zh-cn/docs/concepts/workloads/pods/sidecar-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-sidecar-containers"><span class="">边车容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-disruptions-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-disruptions-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-disruptions-check"><a href="/zh-cn/docs/concepts/workloads/pods/disruptions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-disruptions"><span class="">干扰(Disruptions)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-check"><a href="/zh-cn/docs/concepts/workloads/pods/ephemeral-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers"><span class="">临时容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-pod-qos-check"><a href="/zh-cn/docs/concepts/workloads/pods/pod-qos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos"><span class="">Pod QoS 类</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-check"><a href="/zh-cn/docs/concepts/workloads/pods/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces"><span class="">用户命名空间</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-downward-api-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-downward-api-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-downward-api-check"><a href="/zh-cn/docs/concepts/workloads/pods/downward-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-downward-api"><span class="">Downward API</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-check"><a href="/zh-cn/docs/concepts/workloads/controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads-controllers"><span class="">工作负载管理</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-deployment-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-deployment-check"><a href="/zh-cn/docs/concepts/workloads/controllers/deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-deployment"><span class="">Deployments</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-replicaset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/replicaset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset"><span class="">ReplicaSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-statefulset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset"><span class="">StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-daemonset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/daemonset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset"><span class="">DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-job-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-job-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-job-check"><a href="/zh-cn/docs/concepts/workloads/controllers/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-job"><span class="">Job</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-check"><a href="/zh-cn/docs/concepts/workloads/controllers/ttlafterfinished/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished"><span class="">已完成 Job 的自动清理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-check"><a href="/zh-cn/docs/concepts/workloads/controllers/cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs"><span class="">CronJob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-check"><a href="/zh-cn/docs/concepts/workloads/controllers/replicationcontroller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller"><span class="">ReplicationController</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-management-li"> <input type="checkbox" id="m-docs-concepts-workloads-management-check"/> <label for="m-docs-concepts-workloads-management-check"><a href="/docs/concepts/workloads/management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-management"><span class="">Managing Workloads</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-autoscaling-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-autoscaling-check"/> <label for="m-zh-cn-docs-concepts-workloads-autoscaling-check"><a href="/zh-cn/docs/concepts/workloads/autoscaling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-autoscaling"><span class="">自动扩缩工作负载</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-services-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-check"/> <label for="m-zh-cn-docs-concepts-services-networking-check"><a href="/zh-cn/docs/concepts/services-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-services-networking"><span class="">服务、负载均衡和联网</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-service-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-service-check"/> <label for="m-zh-cn-docs-concepts-services-networking-service-check"><a href="/zh-cn/docs/concepts/services-networking/service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-service"><span class="">服务(Service)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-ingress-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-ingress-check"/> <label for="m-zh-cn-docs-concepts-services-networking-ingress-check"><a href="/zh-cn/docs/concepts/services-networking/ingress/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-ingress"><span class="">Ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers-check"/> <label for="m-zh-cn-docs-concepts-services-networking-ingress-controllers-check"><a href="/zh-cn/docs/concepts/services-networking/ingress-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers"><span class="">Ingress 控制器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-gateway-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-gateway-check"/> <label for="m-zh-cn-docs-concepts-services-networking-gateway-check"><a href="/zh-cn/docs/concepts/services-networking/gateway/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-gateway"><span class="">Gateway API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices-check"/> <label for="m-zh-cn-docs-concepts-services-networking-endpoint-slices-check"><a href="/zh-cn/docs/concepts/services-networking/endpoint-slices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices"><span class="">EndpointSlice</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-network-policies-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-network-policies-check"/> <label for="m-zh-cn-docs-concepts-services-networking-network-policies-check"><a href="/zh-cn/docs/concepts/services-networking/network-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-network-policies"><span class="">网络策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service-check"/> <label for="m-zh-cn-docs-concepts-services-networking-dns-pod-service-check"><a href="/zh-cn/docs/concepts/services-networking/dns-pod-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service"><span class="">Service 与 Pod 的 DNS</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-dual-stack-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-dual-stack-check"/> <label for="m-zh-cn-docs-concepts-services-networking-dual-stack-check"><a href="/zh-cn/docs/concepts/services-networking/dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-dual-stack"><span class="">IPv4/IPv6 双协议栈</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-check"/> <label for="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-check"><a href="/zh-cn/docs/concepts/services-networking/topology-aware-routing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing"><span class="">拓扑感知路由</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-windows-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-windows-networking-check"/> <label for="m-zh-cn-docs-concepts-services-networking-windows-networking-check"><a href="/zh-cn/docs/concepts/services-networking/windows-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-windows-networking"><span class="">Windows 网络</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-check"/> <label for="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-check"><a href="/zh-cn/docs/concepts/services-networking/cluster-ip-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation"><span class="">Service ClusterIP 分配</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-check"/> <label for="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-check"><a href="/zh-cn/docs/concepts/services-networking/service-traffic-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy"><span class="">服务内部流量策略</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-storage-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-check"/> <label for="m-zh-cn-docs-concepts-storage-check"><a href="/zh-cn/docs/concepts/storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-storage"><span class="">存储</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-volumes-check"><a href="/zh-cn/docs/concepts/storage/volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volumes"><span class="">卷</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-persistent-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-persistent-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-persistent-volumes-check"><a href="/zh-cn/docs/concepts/storage/persistent-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-persistent-volumes"><span class="">持久卷</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-projected-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-projected-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-projected-volumes-check"><a href="/zh-cn/docs/concepts/storage/projected-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-projected-volumes"><span class="">投射卷</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-ephemeral-volumes-check"><a href="/zh-cn/docs/concepts/storage/ephemeral-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes"><span class="">临时卷</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volume-attributes-classes-li"> <input type="checkbox" id="m-docs-concepts-storage-volume-attributes-classes-check"/> <label for="m-docs-concepts-storage-volume-attributes-classes-check"><a href="/docs/concepts/storage/volume-attributes-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volume-attributes-classes"><span class="">Volume Attributes Classes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-classes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-classes-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-classes-check"><a href="/zh-cn/docs/concepts/storage/storage-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-classes"><span class="">存储类</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning-check"/> <label for="m-zh-cn-docs-concepts-storage-dynamic-provisioning-check"><a href="/zh-cn/docs/concepts/storage/dynamic-provisioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning"><span class="">动态卷制备</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-snapshots-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-snapshots-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-snapshots-check"><a href="/zh-cn/docs/concepts/storage/volume-snapshots/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-snapshots"><span class="">卷快照</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-check"><a href="/zh-cn/docs/concepts/storage/volume-snapshot-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes"><span class="">卷快照类</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-check"><a href="/zh-cn/docs/concepts/storage/volume-pvc-datasource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource"><span class="">CSI 卷克隆</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-capacity-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-capacity-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-capacity-check"><a href="/zh-cn/docs/concepts/storage/storage-capacity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-capacity"><span class="">存储容量</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-limits-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-limits-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-limits-check"><a href="/zh-cn/docs/concepts/storage/storage-limits/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-limits"><span class="">特定于节点的卷数限制</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-health-monitoring-check"><a href="/zh-cn/docs/concepts/storage/volume-health-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring"><span class="">卷健康监测</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-windows-storage-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-windows-storage-check"/> <label for="m-zh-cn-docs-concepts-storage-windows-storage-check"><a href="/zh-cn/docs/concepts/storage/windows-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-windows-storage"><span class="">Windows 存储</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-configuration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-check"/> <label for="m-zh-cn-docs-concepts-configuration-check"><a href="/zh-cn/docs/concepts/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-configuration"><span class="">配置</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-overview-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-overview-check"/> <label for="m-zh-cn-docs-concepts-configuration-overview-check"><a href="/zh-cn/docs/concepts/configuration/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-overview"><span class="">配置最佳实践</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-configmap-check"/> <label for="m-zh-cn-docs-concepts-configuration-configmap-check"><a href="/zh-cn/docs/concepts/configuration/configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-configmap"><span class="">ConfigMaps</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-secret-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-secret-check"/> <label for="m-zh-cn-docs-concepts-configuration-secret-check"><a href="/zh-cn/docs/concepts/configuration/secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-secret"><span class="">Secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers-check"/> <label for="m-zh-cn-docs-concepts-configuration-manage-resources-containers-check"><a href="/zh-cn/docs/concepts/configuration/manage-resources-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers"><span class="">为 Pod 和容器管理资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"/> <label for="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"><a href="/zh-cn/docs/concepts/configuration/organize-cluster-access-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig"><span class="">使用 kubeconfig 文件组织集群访问</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-windows-resource-management-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-windows-resource-management-check"/> <label for="m-zh-cn-docs-concepts-configuration-windows-resource-management-check"><a href="/zh-cn/docs/concepts/configuration/windows-resource-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-windows-resource-management"><span class="">Windows 节点的资源管理</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-security-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-check"/> <label for="m-zh-cn-docs-concepts-security-check"><a href="/zh-cn/docs/concepts/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-security"><span class="">安全</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-cloud-native-security-li"> <input type="checkbox" id="m-docs-concepts-security-cloud-native-security-check"/> <label for="m-docs-concepts-security-cloud-native-security-check"><a href="/docs/concepts/security/cloud-native-security/" title="Cloud Native Security and Kubernetes" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-cloud-native-security"><span class="">Cloud Native Security</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-standards-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-standards-check"><a href="/zh-cn/docs/concepts/security/pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-standards"><span class="">Pod 安全性标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-service-accounts-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-service-accounts-check"/> <label for="m-zh-cn-docs-concepts-security-service-accounts-check"><a href="/zh-cn/docs/concepts/security/service-accounts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-service-accounts"><span class="">服务账号</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-admission-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-admission-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-admission-check"><a href="/zh-cn/docs/concepts/security/pod-security-admission/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-admission"><span class="">Pod 安全性准入</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-policy-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-policy-check"><a href="/zh-cn/docs/concepts/security/pod-security-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-policy"><span class="">Pod 安全策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-windows-security-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-windows-security-check"/> <label for="m-zh-cn-docs-concepts-security-windows-security-check"><a href="/zh-cn/docs/concepts/security/windows-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-windows-security"><span class="">Windows 节点的安全性</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-controlling-access-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-controlling-access-check"/> <label for="m-zh-cn-docs-concepts-security-controlling-access-check"><a href="/zh-cn/docs/concepts/security/controlling-access/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-controlling-access"><span class="">Kubernetes API 访问控制</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-rbac-good-practices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-rbac-good-practices-check"/> <label for="m-zh-cn-docs-concepts-security-rbac-good-practices-check"><a href="/zh-cn/docs/concepts/security/rbac-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-rbac-good-practices"><span class="">基于角色的访问控制良好实践</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-secrets-good-practices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-secrets-good-practices-check"/> <label for="m-zh-cn-docs-concepts-security-secrets-good-practices-check"><a href="/zh-cn/docs/concepts/security/secrets-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-secrets-good-practices"><span class="">Kubernetes Secret 良好实践</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-multi-tenancy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-multi-tenancy-check"/> <label for="m-zh-cn-docs-concepts-security-multi-tenancy-check"><a href="/zh-cn/docs/concepts/security/multi-tenancy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-multi-tenancy"><span class="">多租户</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms-li"> <input type="checkbox" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms-check"/> <label for="m-docs-concepts-security-hardening-guide-authentication-mechanisms-check"><a href="/docs/concepts/security/hardening-guide/authentication-mechanisms/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms"><span class="">Hardening Guide - Authentication Mechanisms</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks-check"/> <label for="m-zh-cn-docs-concepts-security-api-server-bypass-risks-check"><a href="/zh-cn/docs/concepts/security/api-server-bypass-risks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks"><span class="">Kubernetes API 服务器旁路风险</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-security-checklist-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-security-checklist-check"/> <label for="m-zh-cn-docs-concepts-security-security-checklist-check"><a href="/zh-cn/docs/concepts/security/security-checklist/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-security-checklist"><span class="">安全检查清单</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-check"/> <label for="m-zh-cn-docs-concepts-policy-check"><a href="/zh-cn/docs/concepts/policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-policy"><span class="">策略</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-limit-range-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-limit-range-check"/> <label for="m-zh-cn-docs-concepts-policy-limit-range-check"><a href="/zh-cn/docs/concepts/policy/limit-range/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-limit-range"><span class="">限制范围</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-resource-quotas-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-resource-quotas-check"/> <label for="m-zh-cn-docs-concepts-policy-resource-quotas-check"><a href="/zh-cn/docs/concepts/policy/resource-quotas/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-resource-quotas"><span class="">资源配额</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-pid-limiting-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-pid-limiting-check"/> <label for="m-zh-cn-docs-concepts-policy-pid-limiting-check"><a href="/zh-cn/docs/concepts/policy/pid-limiting/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-pid-limiting"><span class="">进程 ID 约束与预留</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-node-resource-managers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-node-resource-managers-check"/> <label for="m-zh-cn-docs-concepts-policy-node-resource-managers-check"><a href="/zh-cn/docs/concepts/policy/node-resource-managers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-node-resource-managers"><span class="">节点资源管理器</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-scheduling-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-scheduling-eviction"><span class="">调度、抢占和驱逐</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler"><span class="">Kubernetes 调度器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/assign-pod-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node"><span class="">将 Pod 指派给节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-overhead/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead"><span class="">Pod 开销</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-scheduling-readiness/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness"><span class="">Pod 调度就绪态</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/topology-spread-constraints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints"><span class="">Pod 拓扑分布约束</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/taint-and-toleration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration"><span class="">污点和容忍度</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/scheduling-framework/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework"><span class="">调度框架</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/dynamic-resource-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation"><span class="">动态资源分配</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning"><span class="">调度器性能调优</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/resource-bin-packing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing"><span class="">资源装箱</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-priority-preemption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption"><span class="">Pod 优先级和抢占</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/node-pressure-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction"><span class="">节点压力驱逐</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/api-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction"><span class="">API 发起的驱逐</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-cluster-administration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-check"><a href="/zh-cn/docs/concepts/cluster-administration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-cluster-administration"><span class="">集群管理</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-certificates-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-certificates-check"><a href="/zh-cn/docs/concepts/cluster-administration/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-certificates"><span class="">证书</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-check"><a href="/zh-cn/docs/concepts/cluster-administration/manage-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment"><span class="">管理资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-networking-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-networking-check"><a href="/zh-cn/docs/concepts/cluster-administration/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-networking"><span class="">集群网络系统</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-logging-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-logging-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-logging-check"><a href="/zh-cn/docs/concepts/cluster-administration/logging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-logging"><span class="">日志架构</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-metrics-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics"><span class="">Kubernetes 系统组件指标</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-kube-state-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-kube-state-metrics-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-kube-state-metrics-check"><a href="/zh-cn/docs/concepts/cluster-administration/kube-state-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-kube-state-metrics"><span class="">Kubernetes 对象状态的指标</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-logs-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-logs-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-logs-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-logs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-logs"><span class="">系统日志</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-traces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-traces-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-traces-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-traces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-traces"><span class="">追踪 Kubernetes 系统组件</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-proxies-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-proxies-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-proxies-check"><a href="/zh-cn/docs/concepts/cluster-administration/proxies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-proxies"><span class="">Kubernetes 中的代理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-flow-control-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-flow-control-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-flow-control-check"><a href="/zh-cn/docs/concepts/cluster-administration/flow-control/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-flow-control"><span class="">API 优先级和公平性</span></a></label> </li><a class="td-sidebar-link td-sidebar-link__page " id="m-docs-concepts-cluster-administration-cluster-autoscaling" target="_blank" href="/docs/concepts/cluster-administration/cluster-autoscaling/"> Cluster Autoscaling <small>(EN)</small></a> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-addons-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-addons-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-addons-check"><a href="/zh-cn/docs/concepts/cluster-administration/addons/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-addons"><span class="">安装扩展(Addon)</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-windows-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-check"/> <label for="m-zh-cn-docs-concepts-windows-check"><a href="/zh-cn/docs/concepts/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-windows"><span class="">Kubernetes 中的 Windows</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-windows-intro-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-intro-check"/> <label for="m-zh-cn-docs-concepts-windows-intro-check"><a href="/zh-cn/docs/concepts/windows/intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-windows-intro"><span class="">Kubernetes 中的 Windows 容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-windows-user-guide-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-user-guide-check"/> <label for="m-zh-cn-docs-concepts-windows-user-guide-check"><a href="/zh-cn/docs/concepts/windows/user-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-windows-user-guide"><span class="">Kubernetes 中的 Windows 容器调度指南</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes"><span class="">扩展 Kubernetes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-operator-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-operator-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-operator-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/operator/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-operator"><span class="">Operator 模式</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net"><span class="">计算、存储和网络扩展</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins"><span class="">网络插件</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins"><span class="">设备插件</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension"><span class="">扩展 Kubernetes API</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources"><span class="">定制资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation"><span class="">Kubernetes API 聚合层</span></a></label> </li> </ul> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-check"/> <label for="m-zh-cn-docs-tasks-check"><a href="/zh-cn/docs/tasks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks"><span class="">任务</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-tools-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-check"/> <label for="m-zh-cn-docs-tasks-tools-check"><a href="/zh-cn/docs/tasks/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-tools"><span class="">安装工具</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-linux-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-linux/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux"><span class="">在 Linux 系统中安装并设置 kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-macos-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-macos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos"><span class="">在 macOS 系统上安装和设置 kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-windows-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows"><span class="">在 Windows 上安装 kubectl</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster"><span class="">管理集群</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm"><span class="">用 kubeadm 进行管理</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs"><span class="">使用 kubeadm 进行证书管理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver"><span class="">配置 cgroup 驱动</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-reconfigure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure"><span class="">重新配置 kubeadm 集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade"><span class="">升级 kubeadm 集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/upgrading-linux-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes"><span class="">升级 Linux 节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes"><span class="">升级 Windows 节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/change-package-repository/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository"><span class="">更改 Kubernetes 软件包仓库</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim"><span class="">从 dockershim 迁移</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/change-runtime-containerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd"><span class="">将节点上的容器运行时从 Docker Engine 改为 containerd</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/migrate-dockershim-dockerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd"><span class="">将 Docker Engine 节点从 dockershim 迁移到 cri-dockerd</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/find-out-runtime-you-use/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use"><span class="">查明节点上所使用的容器运行时</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/troubleshooting-cni-plugin-related-errors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors"><span class="">排查 CNI 插件相关的错误</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-removal-affects-you/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you"><span class="">检查移除 Dockershim 是否对你有影响</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/migrating-telemetry-and-security-agents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents"><span class="">从 dockershim 迁移遥测和安全代理</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-certificates-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-certificates-check"><a href="/zh-cn/docs/tasks/administer-cluster/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-certificates"><span class="">手动生成证书</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources"><span class="">管理内存、CPU 和 API 资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace"><span class="">为命名空间配置默认的内存请求和限制</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace"><span class="">为命名空间配置默认的 CPU 请求和限制</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace"><span class="">配置命名空间的最小和最大内存约束</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace"><span class="">为命名空间配置 CPU 最小和最大约束</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace"><span class="">为命名空间配置内存和 CPU 配额</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace"><span class="">配置命名空间下 Pod 配额</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider"><span class="">安装网络策略驱动</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy"><span class="">使用 Antrea 提供 NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy"><span class="">使用 Calico 提供 NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy"><span class="">使用 Cilium 提供 NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/kube-router-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy"><span class="">使用 kube-router 提供 NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy"><span class="">使用 Romana 提供 NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy"><span class="">使用 Weave Net 提供 NetworkPolicy</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-check"><a href="/zh-cn/docs/tasks/administer-cluster/access-cluster-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api"><span class="">使用 Kubernetes API 访问集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-check"><a href="/zh-cn/docs/tasks/administer-cluster/extended-resource-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node"><span class="">为节点发布扩展资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-horizontal-autoscaling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling"><span class="">自动扩缩集群 DNS 服务</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-change-pv-access-mode-readwriteoncepod-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-change-pv-access-mode-readwriteoncepod-check"/> <label for="m-docs-tasks-administer-cluster-change-pv-access-mode-readwriteoncepod-check"><a href="/docs/tasks/administer-cluster/change-pv-access-mode-readwriteoncepod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-change-pv-access-mode-readwriteoncepod"><span class="">Change the Access Mode of a PersistentVolume to ReadWriteOncePod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-check"><a href="/zh-cn/docs/tasks/administer-cluster/switch-to-evented-pleg/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg"><span class="">从轮询切换为基于 CRI 事件的更新来获取容器状态</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-check"><a href="/zh-cn/docs/tasks/administer-cluster/change-default-storage-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class"><span class="">改变默认 StorageClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/change-pv-reclaim-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy"><span class="">更改 PersistentVolume 的回收策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-check"><a href="/zh-cn/docs/tasks/administer-cluster/running-cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller"><span class="">Kubernetes 云管理控制器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-credential-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider"><span class="">配置 kubelet 镜像凭据提供程序</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-check"><a href="/zh-cn/docs/tasks/administer-cluster/quota-api-object/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object"><span class="">配置 API 对象配额</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-check"><a href="/zh-cn/docs/tasks/administer-cluster/cpu-management-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies"><span class="">控制节点上的 CPU 管理策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-topology-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/topology-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager"><span class="">控制节点上的拓扑管理策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-custom-nameservers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers"><span class="">自定义 DNS 服务</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-debugging-resolution/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution"><span class="">调试 DNS 问题</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/declare-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy"><span class="">声明网络策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/developing-cloud-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager"><span class="">开发云控制器管理器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-check"><a href="/zh-cn/docs/tasks/administer-cluster/enable-disable-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api"><span class="">启用/禁用 Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-check"><a href="/zh-cn/docs/tasks/administer-cluster/encrypt-data/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data"><span class="">静态加密机密数据</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-check"><a href="/zh-cn/docs/tasks/administer-cluster/decrypt-data/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data"><span class="">解密已静态加密的机密数据</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"><a href="/zh-cn/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods"><span class="">关键插件 Pod 的调度保证</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-check"><a href="/zh-cn/docs/tasks/administer-cluster/ip-masq-agent/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent"><span class="">IP Masquerade Agent 用户指南</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-check"><a href="/zh-cn/docs/tasks/administer-cluster/limit-storage-consumption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption"><span class="">限制存储使用量</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-check"><a href="/zh-cn/docs/tasks/administer-cluster/controller-manager-leader-migration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration"><span class="">迁移多副本的控制面以使用云控制器管理器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-check"><a href="/zh-cn/docs/tasks/administer-cluster/namespaces-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough"><span class="">名字空间演练</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-check"><a href="/zh-cn/docs/tasks/administer-cluster/configure-upgrade-etcd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd"><span class="">操作 Kubernetes 中的 etcd 集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-check"><a href="/zh-cn/docs/tasks/administer-cluster/reserve-compute-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources"><span class="">为系统守护进程预留计算资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-in-userns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns"><span class="">以非 root 用户身份运行 Kubernetes 节点组件</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-check"><a href="/zh-cn/docs/tasks/administer-cluster/safely-drain-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node"><span class="">安全地清空一个节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/securing-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster"><span class="">保护集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file"><span class="">通过配置文件设置 kubelet 参数</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-namespaces-check"><a href="/zh-cn/docs/tasks/administer-cluster/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-namespaces"><span class="">通过名字空间共享集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-check"><a href="/zh-cn/docs/tasks/administer-cluster/cluster-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade"><span class="">升级集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-check"><a href="/zh-cn/docs/tasks/administer-cluster/use-cascading-deletion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion"><span class="">在集群中使用级联删除</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kms-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/kms-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider"><span class="">使用 KMS 驱动进行数据加密</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-coredns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-coredns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-coredns-check"><a href="/zh-cn/docs/tasks/administer-cluster/coredns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-coredns"><span class="">使用 CoreDNS 进行服务发现</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-check"><a href="/zh-cn/docs/tasks/administer-cluster/nodelocaldns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns"><span class="">在 Kubernetes 集群中使用 NodeLocal DNSCache</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/sysctl-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster"><span class="">在 Kubernetes 集群中使用 sysctl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-memory-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/memory-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager"><span class="">使用 NUMA 感知的内存管理器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-check"><a href="/zh-cn/docs/tasks/administer-cluster/verify-signed-artifacts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts"><span class="">验证已签名容器镜像</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-configure-pod-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-check"><a href="/zh-cn/docs/tasks/configure-pod-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-configure-pod-container"><span class="">配置 Pods 和容器</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-memory-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource"><span class="">为容器和 Pod 分配内存资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-cpu-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource"><span class="">为容器和 Pods 分配 CPU 资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-check"><a href="/zh-cn/docs/tasks/configure-pod-container/resize-container-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources"><span class="">调整分配给容器的 CPU 和内存资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-gmsa/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa"><span class="">为 Windows Pod 和容器配置 GMSA</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-runasusername/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername"><span class="">为 Windows 的 Pod 和容器配置 RunAsUserName</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/create-hostprocess-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod"><span class="">创建 Windows HostProcess Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/quality-service-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod"><span class="">配置 Pod 的服务质量</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/extended-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource"><span class="">为容器分派扩展资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage"><span class="">配置 Pod 以使用卷进行存储</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-persistent-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage"><span class="">配置 Pod 以使用 PersistentVolume 作为存储</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-projected-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage"><span class="">配置 Pod 使用投射卷作存储</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-security-context-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-security-context-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-security-context-check"><a href="/zh-cn/docs/tasks/configure-pod-container/security-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-security-context"><span class="">为 Pod 或容器配置安全上下文</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-service-account/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account"><span class="">为 Pod 配置服务账号</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-check"><a href="/zh-cn/docs/tasks/configure-pod-container/pull-image-private-registry/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry"><span class="">从私有仓库拉取镜像</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes"><span class="">配置存活、就绪和启动探针</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-pods-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes"><span class="">将 Pod 分配给节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity"><span class="">用节点亲和性把 Pod 分配到节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-pod-initialization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization"><span class="">配置 Pod 初始化</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"><a href="/zh-cn/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event"><span class="">为容器的生命周期事件设置处理函数</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-pod-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap"><span class="">配置 Pod 使用 ConfigMap</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-check"><a href="/zh-cn/docs/tasks/configure-pod-container/share-process-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace"><span class="">在 Pod 中的容器之间共享进程命名空间</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-check"><a href="/zh-cn/docs/tasks/configure-pod-container/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces"><span class="">为 Pod 配置用户名字空间</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-static-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/static-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod"><span class="">创建静态 Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/translate-compose-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes"><span class="">将 Docker Compose 文件转换为 Kubernetes 资源</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"><a href="/zh-cn/docs/tasks/configure-pod-container/enforce-standards-admission-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller"><span class="">通过配置内置准入控制器实施 Pod 安全标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"><a href="/zh-cn/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels"><span class="">使用名字空间标签来实施 Pod 安全性标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-check"><a href="/zh-cn/docs/tasks/configure-pod-container/migrate-from-psp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp"><span class="">从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-check"/> <label for="m-zh-cn-docs-tasks-debug-check"><a href="/zh-cn/docs/tasks/debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug"><span class="">监控、日志和调试</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug-debug-cluster"><span class="">集群故障排查</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/troubleshoot-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl"><span class="">kubectl 故障排查</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/resource-usage-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring"><span class="">资源监控工具</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline"><span class="">资源指标管道</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/monitor-node-health/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health"><span class="">节点健康监测</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/crictl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl"><span class="">使用 crictl 对 Kubernetes 节点进行调试</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-windows-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows"><span class="">Windows 调试技巧</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-audit-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/audit/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit"><span class="">审计</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/local-debugging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging"><span class="">使用 telepresence 在本地开发和调试服务</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/kubectl-node-debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug"><span class="">用 Kubectl 调试 Kubernetes 节点</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-debug-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-check"><a href="/zh-cn/docs/tasks/debug/debug-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug-debug-application"><span class="">应用故障排除</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods"><span class="">调试 Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-service-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service"><span class="">调试 Service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset"><span class="">调试 StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"><a href="/zh-cn/docs/tasks/debug/debug-application/determine-reason-pod-failure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure"><span class="">确定 Pod 失败的原因</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers"><span class="">调试 Init 容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-running-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod"><span class="">调试运行中的 Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-check"><a href="/zh-cn/docs/tasks/debug/debug-application/get-shell-running-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container"><span class="">获取正在运行容器的 Shell</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-manage-kubernetes-objects"><span class="">管理 Kubernetes 对象</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/declarative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config"><span class="">使用配置文件对 Kubernetes 对象进行声明式管理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/kustomization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization"><span class="">使用 Kustomize 对 Kubernetes 对象进行声明式管理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/imperative-command/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command"><span class="">使用指令式命令管理 Kubernetes 对象</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/imperative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config"><span class="">使用配置文件对 Kubernetes 对象进行命令式管理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch"><span class="">使用 kubectl patch 更新 API 对象</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-configmap-secret-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-check"><a href="/zh-cn/docs/tasks/configmap-secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-configmap-secret"><span class="">管理 Secrets</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl"><span class="">使用 kubectl 管理 Secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file"><span class="">使用配置文件管理 Secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-kustomize/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize"><span class="">使用 Kustomize 管理 Secret</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-inject-data-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-check"><a href="/zh-cn/docs/tasks/inject-data-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-inject-data-application"><span class="">给应用注入数据</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-command-argument-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container"><span class="">为容器设置启动时要执行的命令和参数</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-interdependent-environment-variables/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables"><span class="">定义相互依赖的环境变量</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-environment-variable-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container"><span class="">为容器设置环境变量</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"><a href="/zh-cn/docs/tasks/inject-data-application/environment-variable-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information"><span class="">通过环境变量将 Pod 信息呈现给容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"><a href="/zh-cn/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information"><span class="">通过文件将 Pod 信息呈现给容器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-check"><a href="/zh-cn/docs/tasks/inject-data-application/distribute-credentials-secure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure"><span class="">使用 Secret 安全地分发凭据</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-run-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-check"><a href="/zh-cn/docs/tasks/run-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-run-application"><span class="">运行应用</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-check"><a href="/zh-cn/docs/tasks/run-application/run-stateless-application-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment"><span class="">使用 Deployment 运行一个无状态应用</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-check"><a href="/zh-cn/docs/tasks/run-application/run-single-instance-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application"><span class="">运行一个单实例有状态应用</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-check"><a href="/zh-cn/docs/tasks/run-application/run-replicated-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application"><span class="">运行一个有状态的应用程序</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set-check"/> <label for="m-zh-cn-docs-tasks-run-application-scale-stateful-set-check"><a href="/zh-cn/docs/tasks/run-application/scale-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set"><span class="">扩缩 StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set-check"/> <label for="m-zh-cn-docs-tasks-run-application-delete-stateful-set-check"><a href="/zh-cn/docs/tasks/run-application/delete-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set"><span class="">删除 StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-check"/> <label for="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-check"><a href="/zh-cn/docs/tasks/run-application/force-delete-stateful-set-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod"><span class="">强制删除 StatefulSet 中的 Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-check"/> <label for="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-check"><a href="/zh-cn/docs/tasks/run-application/horizontal-pod-autoscale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale"><span class="">Pod 水平自动扩缩</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"/> <label for="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"><a href="/zh-cn/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough"><span class="">HorizontalPodAutoscaler 演练</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-configure-pdb-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-configure-pdb-check"/> <label for="m-zh-cn-docs-tasks-run-application-configure-pdb-check"><a href="/zh-cn/docs/tasks/run-application/configure-pdb/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-configure-pdb"><span class="">为应用程序设置干扰预算(Disruption Budget)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod-check"/> <label for="m-zh-cn-docs-tasks-run-application-access-api-from-pod-check"><a href="/zh-cn/docs/tasks/run-application/access-api-from-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod"><span class="">从 Pod 中访问 Kubernetes API</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-job-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-check"/> <label for="m-zh-cn-docs-tasks-job-check"><a href="/zh-cn/docs/tasks/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-job"><span class="">运行 Jobs</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-check"/> <label for="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-check"><a href="/zh-cn/docs/tasks/job/automated-tasks-with-cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs"><span class="">使用 CronJob 运行自动化任务</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-check"/> <label for="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-check"><a href="/zh-cn/docs/tasks/job/coarse-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue"><span class="">使用工作队列进行粗粒度并行处理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-check"/> <label for="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-check"><a href="/zh-cn/docs/tasks/job/job-with-pod-to-pod-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication"><span class="">带 Pod 间通信的 Job</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-check"/> <label for="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-check"><a href="/zh-cn/docs/tasks/job/fine-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue"><span class="">使用工作队列进行精细的并行处理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-check"/> <label for="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-check"><a href="/zh-cn/docs/tasks/job/indexed-parallel-processing-static/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static"><span class="">使用索引作业完成静态工作分配下的并行处理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion-check"/> <label for="m-zh-cn-docs-tasks-job-parallel-processing-expansion-check"><a href="/zh-cn/docs/tasks/job/parallel-processing-expansion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion"><span class="">使用展开的方式进行并行处理</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-pod-failure-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-pod-failure-policy-check"/> <label for="m-zh-cn-docs-tasks-job-pod-failure-policy-check"><a href="/zh-cn/docs/tasks/job/pod-failure-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-pod-failure-policy"><span class="">使用 Pod 失效策略处理可重试和不可重试的 Pod 失效</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-access-application-cluster"><span class="">访问集群中的应用程序</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-check"><a href="/zh-cn/docs/tasks/access-application-cluster/web-ui-dashboard/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard"><span class="">部署和访问 Kubernetes 仪表板(Dashboard)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/access-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster"><span class="">访问集群</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"><a href="/zh-cn/docs/tasks/access-application-cluster/configure-access-multiple-clusters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters"><span class="">配置对多集群的访问</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster"><span class="">使用端口转发来访问集群中的应用</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/service-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster"><span class="">使用服务来访问集群中的应用</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-check"><a href="/zh-cn/docs/tasks/access-application-cluster/connecting-frontend-backend/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend"><span class="">使用 Service 把前端连接到后端</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-check"><a href="/zh-cn/docs/tasks/access-application-cluster/create-external-load-balancer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer"><span class="">创建外部负载均衡器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-check"><a href="/zh-cn/docs/tasks/access-application-cluster/list-all-running-container-images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images"><span class="">列出集群中所有运行容器的镜像</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-check"><a href="/zh-cn/docs/tasks/access-application-cluster/ingress-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube"><span class="">在 Minikube 环境中使用 NGINX Ingress 控制器配置 Ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"><a href="/zh-cn/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume"><span class="">同 Pod 内的容器使用共享卷通信</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/configure-dns-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster"><span class="">为集群配置 DNS</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-check"><a href="/zh-cn/docs/tasks/access-application-cluster/access-cluster-services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services"><span class="">访问集群上运行的服务</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-extend-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-extend-kubernetes"><span class="">扩展 Kubernetes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/configure-aggregation-layer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer"><span class="">配置聚合层</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources"><span class="">使用自定义资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions"><span class="">使用 CustomResourceDefinition 扩展 Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning"><span class="">CustomResourceDefinition 的版本</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/setup-extension-api-server/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server"><span class="">安装一个扩展的 API server</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/configure-multiple-schedulers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers"><span class="">配置多个调度器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/http-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api"><span class="">使用 HTTP 代理访问 Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/socks5-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api"><span class="">使用 SOCKS5 代理访问 Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/setup-konnectivity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity"><span class="">设置 Konnectivity 服务</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-tls-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-check"/> <label for="m-zh-cn-docs-tasks-tls-check"><a href="/zh-cn/docs/tasks/tls/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-tls"><span class="">TLS</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-check"/> <label for="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-check"><a href="/zh-cn/docs/tasks/tls/managing-tls-in-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster"><span class="">管理集群中的 TLS 认证</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-check"/> <label for="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-check"><a href="/zh-cn/docs/tasks/tls/manual-rotation-of-ca-certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates"><span class="">手动轮换 CA 证书</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-certificate-rotation-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-certificate-rotation-check"/> <label for="m-zh-cn-docs-tasks-tls-certificate-rotation-check"><a href="/zh-cn/docs/tasks/tls/certificate-rotation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-certificate-rotation"><span class="">为 kubelet 配置证书轮换</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-manage-daemon-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-check"><a href="/zh-cn/docs/tasks/manage-daemon/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-manage-daemon"><span class="">管理集群守护进程</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-check"><a href="/zh-cn/docs/tasks/manage-daemon/update-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set"><span class="">对 DaemonSet 执行滚动更新</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-check"><a href="/zh-cn/docs/tasks/manage-daemon/rollback-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set"><span class="">对 DaemonSet 执行回滚</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-check"><a href="/zh-cn/docs/tasks/manage-daemon/pods-some-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes"><span class="">仅在某些节点上运行 Pod</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-network-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-check"/> <label for="m-zh-cn-docs-tasks-network-check"><a href="/zh-cn/docs/tasks/network/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-network"><span class="">网络</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-check"/> <label for="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-check"><a href="/zh-cn/docs/tasks/network/customize-hosts-file-for-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods"><span class="">使用 HostAliases 向 Pod /etc/hosts 文件添加条目</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-network-extend-service-ip-ranges-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-extend-service-ip-ranges-check"/> <label for="m-zh-cn-docs-tasks-network-extend-service-ip-ranges-check"><a href="/zh-cn/docs/tasks/network/extend-service-ip-ranges/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-network-extend-service-ip-ranges"><span class="">扩展 Service IP 范围</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-network-validate-dual-stack-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-validate-dual-stack-check"/> <label for="m-zh-cn-docs-tasks-network-validate-dual-stack-check"><a href="/zh-cn/docs/tasks/network/validate-dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-network-validate-dual-stack"><span class="">验证 IPv4/IPv6 双协议栈</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-check"/> <label for="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-check"><a href="/zh-cn/docs/tasks/manage-gpus/scheduling-gpus/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus"><span class="">调度 GPU</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-check"/> <label for="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-check"><a href="/zh-cn/docs/tasks/manage-hugepages/scheduling-hugepages/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages"><span class="">管理巨页(HugePage)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-check"/> <label for="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-check"><a href="/zh-cn/docs/tasks/extend-kubectl/kubectl-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins"><span class="">用插件扩展 kubectl</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-check"/> <label for="m-zh-cn-docs-tutorials-check"><a href="/zh-cn/docs/tutorials/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials"><span class="">教程</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-hello-minikube-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-hello-minikube-check"/> <label for="m-zh-cn-docs-tutorials-hello-minikube-check"><a href="/zh-cn/docs/tutorials/hello-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-hello-minikube"><span class="">你好,Minikube</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics"><span class="">学习 Kubernetes 基础知识</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/create-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster"><span class="">创建集群</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro"><span class="">使用 Minikube 创建集群</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/deploy-app/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app"><span class="">部署应用</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro"><span class="">使用 kubectl 创建 Deployment</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore"><span class="">了解你的应用</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/explore-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro"><span class="">查看 Pod 和节点</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/explore-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive"><span class="">交互式教程 - 探索你的应用</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-expose-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/expose/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose"><span class="">公开地暴露你的应用</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/expose/expose-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro"><span class="">使用 Service 暴露你的应用</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-scale-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/scale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale"><span class="">扩缩你的应用</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/scale/scale-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro"><span class="">运行应用程序的多个实例</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-update"><span class="">更新你的应用</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/update-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro"><span class="">执行滚动更新</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/update-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive"><span class="">交互式教程 - 更新你的应用</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-configuration-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-check"/> <label for="m-zh-cn-docs-tutorials-configuration-check"><a href="/zh-cn/docs/tutorials/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-configuration"><span class="">配置</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice"><span class="">示例:配置 java 微服务</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice"><span class="">使用 MicroProfile、ConfigMaps、Secrets 实现外部化应用配置</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/configure-java-microservice-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive"><span class="">互动教程 - 配置 java 微服务</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-check"><a href="/zh-cn/docs/tutorials/configuration/configure-redis-using-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap"><span class="">使用 ConfigMap 来配置 Redis</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-security-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-check"/> <label for="m-zh-cn-docs-tutorials-security-check"><a href="/zh-cn/docs/tutorials/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-security"><span class="">安全</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-cluster-level-pss-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-cluster-level-pss-check"/> <label for="m-zh-cn-docs-tutorials-security-cluster-level-pss-check"><a href="/zh-cn/docs/tutorials/security/cluster-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-cluster-level-pss"><span class="">在集群级别应用 Pod 安全标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-ns-level-pss-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-ns-level-pss-check"/> <label for="m-zh-cn-docs-tutorials-security-ns-level-pss-check"><a href="/zh-cn/docs/tutorials/security/ns-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-ns-level-pss"><span class="">在名字空间级别应用 Pod 安全标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-apparmor-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-apparmor-check"/> <label for="m-zh-cn-docs-tutorials-security-apparmor-check"><a href="/zh-cn/docs/tutorials/security/apparmor/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-apparmor"><span class="">使用 AppArmor 限制容器对资源的访问</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-seccomp-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-seccomp-check"/> <label for="m-zh-cn-docs-tutorials-security-seccomp-check"><a href="/zh-cn/docs/tutorials/security/seccomp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-seccomp"><span class="">使用 seccomp 限制容器的系统调用</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-stateless-application-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-check"><a href="/zh-cn/docs/tutorials/stateless-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-stateless-application"><span class="">无状态的应用</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-check"><a href="/zh-cn/docs/tutorials/stateless-application/expose-external-ip-address/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address"><span class="">公开外部 IP 地址以访问集群中应用程序</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateless-application-guestbook-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-guestbook-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-guestbook-check"><a href="/zh-cn/docs/tutorials/stateless-application/guestbook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateless-application-guestbook"><span class="">示例:使用 Redis 部署 PHP 留言板应用</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-check"><a href="/zh-cn/docs/tutorials/stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-stateful-application"><span class="">有状态的应用</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-check"><a href="/zh-cn/docs/tutorials/stateful-application/basic-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set"><span class="">StatefulSet 基础</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"><a href="/zh-cn/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume"><span class="">示例:使用持久卷部署 WordPress 和 MySQL</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-cassandra-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-cassandra-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-cassandra-check"><a href="/zh-cn/docs/tutorials/stateful-application/cassandra/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-cassandra"><span class="">示例:使用 StatefulSet 部署 Cassandra</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-zookeeper-check"><a href="/zh-cn/docs/tutorials/stateful-application/zookeeper/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper"><span class="">运行 ZooKeeper,一个分布式协调系统</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-services-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-check"/> <label for="m-zh-cn-docs-tutorials-services-check"><a href="/zh-cn/docs/tutorials/services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-services"><span class="">Service</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-connect-applications-service-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-connect-applications-service-check"/> <label for="m-zh-cn-docs-tutorials-services-connect-applications-service-check"><a href="/zh-cn/docs/tutorials/services/connect-applications-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-connect-applications-service"><span class="">使用 Service 连接到应用</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-source-ip-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-source-ip-check"/> <label for="m-zh-cn-docs-tutorials-services-source-ip-check"><a href="/zh-cn/docs/tutorials/services/source-ip/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-source-ip"><span class="">使用源 IP</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-check"/> <label for="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-check"><a href="/zh-cn/docs/tutorials/services/pods-and-endpoint-termination-flow/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow"><span class="">探索 Pod 及其端点的终止行为</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-check"/> <label for="m-zh-cn-docs-reference-check"><a href="/zh-cn/docs/reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference"><span class="">参考</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-glossary-li"> <input type="checkbox" id="m-zh-cn-docs-reference-glossary-check"/> <label for="m-zh-cn-docs-reference-glossary-check"><a href="/zh-cn/docs/reference/glossary/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-glossary"><span class="">词汇表</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-using-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-check"/> <label for="m-zh-cn-docs-reference-using-api-check"><a href="/zh-cn/docs/reference/using-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-using-api"><span class="">API 概述</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-api-concepts-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-api-concepts-check"/> <label for="m-zh-cn-docs-reference-using-api-api-concepts-check"><a href="/zh-cn/docs/reference/using-api/api-concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-api-concepts"><span class="">Kubernetes API 概念</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-server-side-apply-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-server-side-apply-check"/> <label for="m-zh-cn-docs-reference-using-api-server-side-apply-check"><a href="/zh-cn/docs/reference/using-api/server-side-apply/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-server-side-apply"><span class="">服务器端应用(Server-Side Apply)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-client-libraries-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-client-libraries-check"/> <label for="m-zh-cn-docs-reference-using-api-client-libraries-check"><a href="/zh-cn/docs/reference/using-api/client-libraries/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-client-libraries"><span class="">客户端库</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-cel-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-cel-check"/> <label for="m-zh-cn-docs-reference-using-api-cel-check"><a href="/zh-cn/docs/reference/using-api/cel/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-cel"><span class="">Kubernetes 中的通用表达式语言</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-deprecation-policy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-deprecation-policy-check"/> <label for="m-zh-cn-docs-reference-using-api-deprecation-policy-check"><a href="/zh-cn/docs/reference/using-api/deprecation-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-deprecation-policy"><span class="">Kubernetes 弃用策略</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-deprecation-guide-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-deprecation-guide-check"/> <label for="m-zh-cn-docs-reference-using-api-deprecation-guide-check"><a href="/zh-cn/docs/reference/using-api/deprecation-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-deprecation-guide"><span class="">已弃用 API 的迁移指南</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-health-checks-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-health-checks-check"/> <label for="m-zh-cn-docs-reference-using-api-health-checks-check"><a href="/zh-cn/docs/reference/using-api/health-checks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-health-checks"><span class="">Kubernetes API 健康端点</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-access-authn-authz-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-check"><a href="/zh-cn/docs/reference/access-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-access-authn-authz"><span class="">API 访问控制</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-authentication-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-authentication-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-authentication-check"><a href="/zh-cn/docs/reference/access-authn-authz/authentication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-authentication"><span class="">用户认证</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-check"><a href="/zh-cn/docs/reference/access-authn-authz/bootstrap-tokens/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens"><span class="">使用启动引导令牌(Bootstrap Tokens)认证</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-check"><a href="/zh-cn/docs/reference/access-authn-authz/certificate-signing-requests/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests"><span class="">证书和证书签名请求</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-check"><a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/" title="准入控制器参考" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers"><span class="">准入控制器</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-check"><a href="/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers"><span class="">动态准入控制</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-check"><a href="/zh-cn/docs/reference/access-authn-authz/service-accounts-admin/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin"><span class="">管理服务账号</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-authorization-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-authorization-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-authorization-check"><a href="/zh-cn/docs/reference/access-authn-authz/authorization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-authorization"><span class="">鉴权概述</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-rbac-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-rbac-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-rbac-check"><a href="/zh-cn/docs/reference/access-authn-authz/rbac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-rbac"><span class="">使用 RBAC 鉴权</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-abac-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-abac-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-abac-check"><a href="/zh-cn/docs/reference/access-authn-authz/abac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-abac"><span class="">使用 ABAC 鉴权</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-node-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-node-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-node-check"><a href="/zh-cn/docs/reference/access-authn-authz/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-node"><span class="">使用 Node 鉴权</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"><a href="/zh-cn/docs/reference/access-authn-authz/psp-to-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards"><span class="">从 PodSecurityPolicy 映射到 Pod 安全性标准</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-webhook-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-webhook-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-webhook-check"><a href="/zh-cn/docs/reference/access-authn-authz/webhook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-webhook"><span class="">Webhook 模式</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-check"><a href="/zh-cn/docs/reference/access-authn-authz/kubelet-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz"><span class="">Kubelet 认证/鉴权</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"><a href="/zh-cn/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping"><span class="">TLS 启动引导</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-check"><a href="/zh-cn/docs/reference/access-authn-authz/validating-admission-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy"><span class="">验证准入策略(ValidatingAdmissionPolicy)</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-labels-annotations-taints-li"> <input type="checkbox" id="m-zh-cn-docs-reference-labels-annotations-taints-check"/> <label for="m-zh-cn-docs-reference-labels-annotations-taints-check"><a href="/zh-cn/docs/reference/labels-annotations-taints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-labels-annotations-taints"><span class="">众所周知的标签、注解和污点</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-li"> <input type="checkbox" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-check"/> <label for="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-check"><a href="/zh-cn/docs/reference/labels-annotations-taints/audit-annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations"><span class="">审计注解</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-check"><a href="/zh-cn/docs/reference/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api"><span class="">Kubernetes API</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources"><span class="">工作负载资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1"><span class="">Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-template-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1"><span class="">PodTemplate</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/replication-controller-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1"><span class="">ReplicationController</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/replica-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1"><span class="">ReplicaSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/deployment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1"><span class="">Deployment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/stateful-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1"><span class="">StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/controller-revision-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1"><span class="">ControllerRevision</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1"><span class="">DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1"><span class="">Job</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/cron-job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1"><span class="">CronJob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1"><span class="">HorizontalPodAutoscaler</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2"><span class="">HorizontalPodAutoscaler</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/priority-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1"><span class="">PriorityClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-scheduling-context-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2"><span class="">PodSchedulingContext v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-claim-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2"><span class="">ResourceClaim v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-claim-template-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2"><span class="">ResourceClaimTemplate v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-class-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2"><span class="">ResourceClass v1alpha2</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-service-resources"><span class="">Service 资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1"><span class="">Service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/endpoints-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1"><span class="">Endpoints</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1"><span class="">EndpointSlice</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/ingress-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1"><span class="">Ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/ingress-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1"><span class="">IngressClass</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources"><span class="">配置和存储资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1"><span class="">ConfigMap</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1"><span class="">Secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume"><span class="">Volume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1"><span class="">PersistentVolumeClaim</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1"><span class="">PersistentVolume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1"><span class="">StorageClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1"><span class="">VolumeAttachment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1"><span class="">CSIDriver</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1"><span class="">CSINode</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1"><span class="">CSIStorageCapacity</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources"><span class="">身份认证资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/service-account-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1"><span class="">ServiceAccount</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/token-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1"><span class="">TokenRequest</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/token-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1"><span class="">TokenReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1"><span class="">CertificateSigningRequest</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/cluster-trust-bundle-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1"><span class="">ClusterTrustBundle v1alpha1</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/self-subject-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1"><span class="">SelfSubjectReview</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources"><span class="">鉴权资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1"><span class="">LocalSubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1"><span class="">SelfSubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1"><span class="">SelfSubjectRulesReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1"><span class="">SubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1"><span class="">ClusterRole</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1"><span class="">ClusterRoleBinding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1"><span class="">Role</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1"><span class="">RoleBinding</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources"><span class="">策略资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/limit-range-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1"><span class="">LimitRange</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/resource-quota-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1"><span class="">ResourceQuota</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/network-policy-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1"><span class="">NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1"><span class="">PodDisruptionBudget</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/ip-address-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1"><span class="">IPAddress v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources"><span class="">扩展资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1"><span class="">CustomResourceDefinition</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1"><span class="">MutatingWebhookConfiguration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1"><span class="">ValidatingWebhookConfiguration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-check"><a href="/docs/reference/kubernetes-api/extend-resources/validating-admission-policy-v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1"><span class="">ValidatingAdmissionPolicy v1beta1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources"><span class="">集群资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1"><span class="">Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1"><span class="">Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/event-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1"><span class="">Event</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/api-service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1"><span class="">APIService</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/lease-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1"><span class="">Lease</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1"><span class="">RuntimeClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3"><span class="">FlowSchema v1beta3</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3"><span class="">PriorityLevelConfiguration v1beta3</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1"><span class="">Binding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/component-status-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1"><span class="">ComponentStatus</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/cluster-cidr-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1"><span class="">ClusterCIDR v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions"><span class="">公共定义</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/delete-options/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options"><span class="">DeleteOptions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/label-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector"><span class="">LabelSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/list-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta"><span class="">ListMeta</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference"><span class="">LocalObjectReference</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/node-selector-requirement/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement"><span class="">NodeSelectorRequirement</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector"><span class="">ObjectFieldSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta"><span class="">ObjectMeta</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference"><span class="">ObjectReference</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch"><span class="">Patch</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/quantity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity"><span class="">Quantity</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/resource-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector"><span class="">ResourceFieldSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status"><span class="">Status</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference"><span class="">TypedLocalObjectReference</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-other-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/other-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-other-resources"><span class="">其他资源</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-check"><a href="/zh-cn/docs/reference/kubernetes-api/other-resources/validating-admission-policy-binding-list-v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1"><span class="">ValidatingAdmissionPolicyBindingList v1beta1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-parameters/common-parameters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters"><span class="">常用参数</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-instrumentation-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-check"/> <label for="m-zh-cn-docs-reference-instrumentation-check"><a href="/zh-cn/docs/reference/instrumentation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-instrumentation"><span class="">插桩</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-slis-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-slis-check"/> <label for="m-zh-cn-docs-reference-instrumentation-slis-check"><a href="/zh-cn/docs/reference/instrumentation/slis/" title="Kubernetes 组件 SLI 指标" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-slis"><span class="">服务水平指示器指标</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-check"/> <label for="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-check"><a href="/zh-cn/docs/reference/instrumentation/cri-pod-container-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics"><span class="">CRI Pod 和容器指标</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-node-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-node-metrics-check"/> <label for="m-zh-cn-docs-reference-instrumentation-node-metrics-check"><a href="/zh-cn/docs/reference/instrumentation/node-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-node-metrics"><span class="">节点指标数据</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-metrics-li"> <input type="checkbox" id="m-docs-reference-instrumentation-metrics-check"/> <label for="m-docs-reference-instrumentation-metrics-check"><a href="/docs/reference/instrumentation/metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-metrics"><span class="">Kubernetes Metrics Reference</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-issues-security-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-check"/> <label for="m-zh-cn-docs-reference-issues-security-check"><a href="/zh-cn/docs/reference/issues-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-issues-security"><span class="">Kubernetes 问题和安全</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-issues-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-issues-check"/> <label for="m-zh-cn-docs-reference-issues-security-issues-check"><a href="/zh-cn/docs/reference/issues-security/issues/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-issues"><span class="">Kubernetes 问题追踪</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-security-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-security-check"/> <label for="m-zh-cn-docs-reference-issues-security-security-check"><a href="/zh-cn/docs/reference/issues-security/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-security"><span class="">Kubernetes 安全和信息披露</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-official-cve-feed-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-official-cve-feed-check"/> <label for="m-zh-cn-docs-reference-issues-security-official-cve-feed-check"><a href="/zh-cn/docs/reference/issues-security/official-cve-feed/" title="官方 CVE 订阅源" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-official-cve-feed"><span class="">CVE feed</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-node-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-check"/> <label for="m-zh-cn-docs-reference-node-check"><a href="/zh-cn/docs/reference/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-node"><span class="">节点参考信息</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-check"/> <label for="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-check"><a href="/zh-cn/docs/reference/node/kubelet-checkpoint-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api"><span class="">Kubelet Checkpoint API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"/> <label for="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"><a href="/zh-cn/docs/reference/node/topics-on-dockershim-and-cri-compatible-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes"><span class="">关于 dockershim 移除和使用兼容 CRI 运行时的文章</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-node-labels-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-node-labels-check"/> <label for="m-zh-cn-docs-reference-node-node-labels-check"><a href="/zh-cn/docs/reference/node/node-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-node-labels"><span class="">由 kubelet 填充的节点标签</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-device-plugin-api-versions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-device-plugin-api-versions-check"/> <label for="m-zh-cn-docs-reference-node-device-plugin-api-versions-check"><a href="/zh-cn/docs/reference/node/device-plugin-api-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-device-plugin-api-versions"><span class="">Kubelet 设备管理器 API 版本</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-node-status-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-node-status-check"/> <label for="m-zh-cn-docs-reference-node-node-status-check"><a href="/zh-cn/docs/reference/node/node-status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-node-status"><span class="">节点状态</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-networking-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-check"/> <label for="m-zh-cn-docs-reference-networking-check"><a href="/zh-cn/docs/reference/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-networking"><span class="">网络参考</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-service-protocols-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-service-protocols-check"/> <label for="m-zh-cn-docs-reference-networking-service-protocols-check"><a href="/zh-cn/docs/reference/networking/service-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-service-protocols"><span class="">Service 所用的协议</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-ports-and-protocols-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-ports-and-protocols-check"/> <label for="m-zh-cn-docs-reference-networking-ports-and-protocols-check"><a href="/zh-cn/docs/reference/networking/ports-and-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-ports-and-protocols"><span class="">端口和协议</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-virtual-ips-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-virtual-ips-check"/> <label for="m-zh-cn-docs-reference-networking-virtual-ips-check"><a href="/zh-cn/docs/reference/networking/virtual-ips/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-virtual-ips"><span class="">虚拟 IP 和服务代理</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-setup-tools-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-check"/> <label for="m-zh-cn-docs-reference-setup-tools-check"><a href="/zh-cn/docs/reference/setup-tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-setup-tools"><span class="">安装工具</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-setup-tools-kubeadm"><span class="">Kubeadm</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-init/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init"><span class="">kubeadm init</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-join/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join"><span class="">kubeadm join</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade"><span class="">kubeadm upgrade</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config"><span class="">kubeadm config</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-reset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset"><span class="">kubeadm reset</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-token/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token"><span class="">kubeadm token</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-version/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version"><span class="">kubeadm version</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-alpha/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha"><span class="">kubeadm alpha</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs"><span class="">kubeadm certs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase"><span class="">kubeadm init phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-join-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase"><span class="">kubeadm join phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig"><span class="">kubeadm kubeconfig</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-reset-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase"><span class="">kubeadm reset phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-upgrade-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase"><span class="">kubeadm upgrade phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/implementation-details/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details"><span class="">实现细节</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubectl"><span class="">命令行工具 (kubectl)</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-introduction-li"> <input type="checkbox" id="m-docs-reference-kubectl-introduction-check"/> <label for="m-docs-reference-kubectl-introduction-check"><a href="/docs/reference/kubectl/introduction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-introduction"><span class="">Introduction To Kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-check"/> <label for="m-docs-reference-kubectl-generated-check"><a href="/docs/reference/kubectl/generated/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated"><span class="">kubectl reference</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-check"><a href="/docs/reference/kubectl/generated/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl"><span class="">kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-annotate-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-annotate-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-annotate-check"><a href="/docs/reference/kubectl/generated/kubectl_annotate/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-annotate"><span class="">kubectl annotate</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-api-resources-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-api-resources-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-api-resources-check"><a href="/docs/reference/kubectl/generated/kubectl_api-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-api-resources"><span class="">kubectl api-resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-api-versions-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-api-versions-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-api-versions-check"><a href="/docs/reference/kubectl/generated/kubectl_api-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-api-versions"><span class="">kubectl api-versions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-apply-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-apply-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-apply-check"><a href="/docs/reference/kubectl/generated/kubectl_apply/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-apply"><span class="">kubectl apply</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-edit-last-applied-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-edit-last-applied-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-edit-last-applied-check"><a href="/docs/reference/kubectl/generated/kubectl_apply/kubectl_apply_edit-last-applied/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-edit-last-applied"><span class="">kubectl apply edit-last-applied</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-set-last-applied-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-set-last-applied-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-set-last-applied-check"><a href="/docs/reference/kubectl/generated/kubectl_apply/kubectl_apply_set-last-applied/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-set-last-applied"><span class="">kubectl apply set-last-applied</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-view-last-applied-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-view-last-applied-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-view-last-applied-check"><a href="/docs/reference/kubectl/generated/kubectl_apply/kubectl_apply_view-last-applied/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-apply-kubectl-apply-view-last-applied"><span class="">kubectl apply view-last-applied</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-attach-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-attach-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-attach-check"><a href="/docs/reference/kubectl/generated/kubectl_attach/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-attach"><span class="">kubectl attach</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-auth-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-auth-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-auth-check"><a href="/docs/reference/kubectl/generated/kubectl_auth/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-auth"><span class="">kubectl auth</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-can-i-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-can-i-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-can-i-check"><a href="/docs/reference/kubectl/generated/kubectl_auth/kubectl_auth_can-i/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-can-i"><span class="">kubectl auth can-i</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-reconcile-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-reconcile-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-reconcile-check"><a href="/docs/reference/kubectl/generated/kubectl_auth/kubectl_auth_reconcile/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-reconcile"><span class="">kubectl auth reconcile</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-whoami-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-whoami-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-whoami-check"><a href="/docs/reference/kubectl/generated/kubectl_auth/kubectl_auth_whoami/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-auth-kubectl-auth-whoami"><span class="">kubectl auth whoami</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-autoscale-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-autoscale-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-autoscale-check"><a href="/docs/reference/kubectl/generated/kubectl_autoscale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-autoscale"><span class="">kubectl autoscale</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-certificate-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-certificate-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-certificate-check"><a href="/docs/reference/kubectl/generated/kubectl_certificate/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-certificate"><span class="">kubectl certificate</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-approve-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-approve-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-approve-check"><a href="/docs/reference/kubectl/generated/kubectl_certificate/kubectl_certificate_approve/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-approve"><span class="">kubectl certificate approve</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-deny-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-deny-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-deny-check"><a href="/docs/reference/kubectl/generated/kubectl_certificate/kubectl_certificate_deny/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-certificate-kubectl-certificate-deny"><span class="">kubectl certificate deny</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-cluster-info-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-cluster-info-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-cluster-info-check"><a href="/docs/reference/kubectl/generated/kubectl_cluster-info/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-cluster-info"><span class="">kubectl cluster-info</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-cluster-info-kubectl-cluster-info-dump-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-cluster-info-kubectl-cluster-info-dump-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-cluster-info-kubectl-cluster-info-dump-check"><a href="/docs/reference/kubectl/generated/kubectl_cluster-info/kubectl_cluster-info_dump/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-cluster-info-kubectl-cluster-info-dump"><span class="">kubectl cluster-info dump</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-completion-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-completion-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-completion-check"><a href="/docs/reference/kubectl/generated/kubectl_completion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-completion"><span class="">kubectl completion</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-config-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-check"><a href="/docs/reference/kubectl/generated/kubectl_config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-config"><span class="">kubectl config</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-current-context-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-current-context-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-current-context-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_current-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-current-context"><span class="">kubectl config current-context</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-cluster-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-cluster-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-cluster-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_delete-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-cluster"><span class="">kubectl config delete-cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-context-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-context-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-context-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_delete-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-context"><span class="">kubectl config delete-context</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-user-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-user-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-user-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_delete-user/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-delete-user"><span class="">kubectl config delete-user</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-clusters-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-clusters-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-clusters-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_get-clusters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-clusters"><span class="">kubectl config get-clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-contexts-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-contexts-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-contexts-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_get-contexts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-contexts"><span class="">kubectl config get-contexts</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-users-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-users-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-users-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_get-users/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-get-users"><span class="">kubectl config get-users</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-rename-context-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-rename-context-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-rename-context-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_rename-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-rename-context"><span class="">kubectl config rename-context</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set"><span class="">kubectl config set</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-cluster-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-cluster-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-cluster-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_set-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-cluster"><span class="">kubectl config set-cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-context-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-context-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-context-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_set-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-context"><span class="">kubectl config set-context</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-credentials-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-credentials-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-credentials-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_set-credentials/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-set-credentials"><span class="">kubectl config set-credentials</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-unset-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-unset-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-unset-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_unset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-unset"><span class="">kubectl config unset</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-use-context-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-use-context-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-use-context-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_use-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-use-context"><span class="">kubectl config use-context</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-view-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-view-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-view-check"><a href="/docs/reference/kubectl/generated/kubectl_config/kubectl_config_view/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-config-kubectl-config-view"><span class="">kubectl config view</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-cordon-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-cordon-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-cordon-check"><a href="/docs/reference/kubectl/generated/kubectl_cordon/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-cordon"><span class="">kubectl cordon</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-cp-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-cp-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-cp-check"><a href="/docs/reference/kubectl/generated/kubectl_cp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-cp"><span class="">kubectl cp</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-create-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-check"><a href="/docs/reference/kubectl/generated/kubectl_create/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-create"><span class="">kubectl create</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrole-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrole-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrole-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_clusterrole/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrole"><span class="">kubectl create clusterrole</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrolebinding-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrolebinding-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrolebinding-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_clusterrolebinding/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-clusterrolebinding"><span class="">kubectl create clusterrolebinding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-configmap-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-configmap-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-configmap-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-configmap"><span class="">kubectl create configmap</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-cronjob-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-cronjob-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-cronjob-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_cronjob/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-cronjob"><span class="">kubectl create cronjob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-deployment-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-deployment-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-deployment-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-deployment"><span class="">kubectl create deployment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-ingress-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-ingress-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-ingress-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_ingress/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-ingress"><span class="">kubectl create ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-job-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-job-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-job-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-job"><span class="">kubectl create job</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-namespace-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-namespace-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-namespace-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-namespace"><span class="">kubectl create namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-poddisruptionbudget-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-poddisruptionbudget-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-poddisruptionbudget-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_poddisruptionbudget/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-poddisruptionbudget"><span class="">kubectl create poddisruptionbudget</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-priorityclass-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-priorityclass-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-priorityclass-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_priorityclass/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-priorityclass"><span class="">kubectl create priorityclass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-quota-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-quota-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-quota-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_quota/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-quota"><span class="">kubectl create quota</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-role-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-role-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-role-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_role/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-role"><span class="">kubectl create role</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-rolebinding-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-rolebinding-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-rolebinding-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_rolebinding/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-rolebinding"><span class="">kubectl create rolebinding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret"><span class="">kubectl create secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-docker-registry-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-docker-registry-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-docker-registry-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_secret_docker-registry/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-docker-registry"><span class="">kubectl create secret docker-registry</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-generic-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-generic-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-generic-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_secret_generic/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-generic"><span class="">kubectl create secret generic</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-tls-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-tls-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-tls-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_secret_tls/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-secret-tls"><span class="">kubectl create secret tls</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service"><span class="">kubectl create service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-clusterip-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-clusterip-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-clusterip-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_service_clusterip/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-clusterip"><span class="">kubectl create service clusterip</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-externalname-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-externalname-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-externalname-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_service_externalname/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-externalname"><span class="">kubectl create service externalname</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-loadbalancer-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-loadbalancer-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-loadbalancer-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_service_loadbalancer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-loadbalancer"><span class="">kubectl create service loadbalancer</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-nodeport-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-nodeport-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-nodeport-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_service_nodeport/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-service-nodeport"><span class="">kubectl create service nodeport</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-serviceaccount-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-serviceaccount-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-serviceaccount-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_serviceaccount/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-serviceaccount"><span class="">kubectl create serviceaccount</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-token-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-token-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-token-check"><a href="/docs/reference/kubectl/generated/kubectl_create/kubectl_create_token/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-create-kubectl-create-token"><span class="">kubectl create token</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-debug-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-debug-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-debug-check"><a href="/docs/reference/kubectl/generated/kubectl_debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-debug"><span class="">kubectl debug</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-delete-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-delete-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-delete-check"><a href="/docs/reference/kubectl/generated/kubectl_delete/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-delete"><span class="">kubectl delete</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-describe-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-describe-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-describe-check"><a href="/docs/reference/kubectl/generated/kubectl_describe/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-describe"><span class="">kubectl describe</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-diff-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-diff-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-diff-check"><a href="/docs/reference/kubectl/generated/kubectl_diff/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-diff"><span class="">kubectl diff</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-drain-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-drain-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-drain-check"><a href="/docs/reference/kubectl/generated/kubectl_drain/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-drain"><span class="">kubectl drain</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-edit-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-edit-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-edit-check"><a href="/docs/reference/kubectl/generated/kubectl_edit/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-edit"><span class="">kubectl edit</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-events-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-events-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-events-check"><a href="/docs/reference/kubectl/generated/kubectl_events/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-events"><span class="">kubectl events</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-exec-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-exec-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-exec-check"><a href="/docs/reference/kubectl/generated/kubectl_exec/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-exec"><span class="">kubectl exec</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-explain-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-explain-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-explain-check"><a href="/docs/reference/kubectl/generated/kubectl_explain/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-explain"><span class="">kubectl explain</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-expose-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-expose-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-expose-check"><a href="/docs/reference/kubectl/generated/kubectl_expose/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-expose"><span class="">kubectl expose</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-get-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-get-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-get-check"><a href="/docs/reference/kubectl/generated/kubectl_get/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-get"><span class="">kubectl get</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-kustomize-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-kustomize-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-kustomize-check"><a href="/docs/reference/kubectl/generated/kubectl_kustomize/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-kustomize"><span class="">kubectl kustomize</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-label-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-label-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-label-check"><a href="/docs/reference/kubectl/generated/kubectl_label/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-label"><span class="">kubectl label</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-logs-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-logs-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-logs-check"><a href="/docs/reference/kubectl/generated/kubectl_logs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-logs"><span class="">kubectl logs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-options-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-options-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-options-check"><a href="/docs/reference/kubectl/generated/kubectl_options/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-options"><span class="">kubectl options</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-patch-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-patch-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-patch-check"><a href="/docs/reference/kubectl/generated/kubectl_patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-patch"><span class="">kubectl patch</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-plugin-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-plugin-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-plugin-check"><a href="/docs/reference/kubectl/generated/kubectl_plugin/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-plugin"><span class="">kubectl plugin</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-plugin-kubectl-plugin-list-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-plugin-kubectl-plugin-list-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-plugin-kubectl-plugin-list-check"><a href="/docs/reference/kubectl/generated/kubectl_plugin/kubectl_plugin_list/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-plugin-kubectl-plugin-list"><span class="">kubectl plugin list</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-port-forward-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-port-forward-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-port-forward-check"><a href="/docs/reference/kubectl/generated/kubectl_port-forward/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-port-forward"><span class="">kubectl port-forward</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-proxy-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-proxy-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-proxy-check"><a href="/docs/reference/kubectl/generated/kubectl_proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-proxy"><span class="">kubectl proxy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-replace-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-replace-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-replace-check"><a href="/docs/reference/kubectl/generated/kubectl_replace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-replace"><span class="">kubectl replace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-rollout"><span class="">kubectl rollout</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-history-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-history-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-history-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_history/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-history"><span class="">kubectl rollout history</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-pause-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-pause-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-pause-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_pause/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-pause"><span class="">kubectl rollout pause</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-restart-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-restart-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-restart-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_restart/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-restart"><span class="">kubectl rollout restart</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-resume-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-resume-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-resume-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_resume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-resume"><span class="">kubectl rollout resume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-status-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-status-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-status-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-status"><span class="">kubectl rollout status</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-undo-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-undo-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-undo-check"><a href="/docs/reference/kubectl/generated/kubectl_rollout/kubectl_rollout_undo/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-rollout-kubectl-rollout-undo"><span class="">kubectl rollout undo</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-run-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-run-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-run-check"><a href="/docs/reference/kubectl/generated/kubectl_run/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-run"><span class="">kubectl run</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-scale-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-scale-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-scale-check"><a href="/docs/reference/kubectl/generated/kubectl_scale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-scale"><span class="">kubectl scale</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-set-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-check"><a href="/docs/reference/kubectl/generated/kubectl_set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-set"><span class="">kubectl set</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-env-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-env-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-env-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_env/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-env"><span class="">kubectl set env</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-image-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-image-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-image-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_image/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-image"><span class="">kubectl set image</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-resources-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-resources-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-resources-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-resources"><span class="">kubectl set resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-selector-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-selector-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-selector-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-selector"><span class="">kubectl set selector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-serviceaccount-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-serviceaccount-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-serviceaccount-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_serviceaccount/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-serviceaccount"><span class="">kubectl set serviceaccount</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-subject-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-subject-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-subject-check"><a href="/docs/reference/kubectl/generated/kubectl_set/kubectl_set_subject/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-set-kubectl-set-subject"><span class="">kubectl set subject</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-taint-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-taint-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-taint-check"><a href="/docs/reference/kubectl/generated/kubectl_taint/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-taint"><span class="">kubectl taint</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-generated-kubectl-top-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-top-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-top-check"><a href="/docs/reference/kubectl/generated/kubectl_top/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-top"><span class="">kubectl top</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-node-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-node-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-node-check"><a href="/docs/reference/kubectl/generated/kubectl_top/kubectl_top_node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-node"><span class="">kubectl top node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-pod-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-pod-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-pod-check"><a href="/docs/reference/kubectl/generated/kubectl_top/kubectl_top_pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-generated-kubectl-top-kubectl-top-pod"><span class="">kubectl top pod</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-uncordon-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-uncordon-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-uncordon-check"><a href="/docs/reference/kubectl/generated/kubectl_uncordon/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-uncordon"><span class="">kubectl uncordon</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-version-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-version-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-version-check"><a href="/docs/reference/kubectl/generated/kubectl_version/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-version"><span class="">kubectl version</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-generated-kubectl-wait-li"> <input type="checkbox" id="m-docs-reference-kubectl-generated-kubectl-wait-check"/> <label for="m-docs-reference-kubectl-generated-kubectl-wait-check"><a href="/docs/reference/kubectl/generated/kubectl_wait/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl-generated-kubectl-wait"><span class="">kubectl wait</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-quick-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-quick-reference-check"/> <label for="m-zh-cn-docs-reference-kubectl-quick-reference-check"><a href="/zh-cn/docs/reference/kubectl/quick-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-quick-reference"><span class="">kubectl 快速参考</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds-check"/> <label for="m-zh-cn-docs-reference-kubectl-kubectl-cmds-check"><a href="/zh-cn/docs/reference/kubectl/kubectl-cmds/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds"><span class="">kubectl 命令</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-kubectl"><span class="">kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-jsonpath-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-jsonpath-check"/> <label for="m-zh-cn-docs-reference-kubectl-jsonpath-check"><a href="/zh-cn/docs/reference/kubectl/jsonpath/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-jsonpath"><span class="">JSONPath 支持</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/docker-cli-to-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl"><span class="">适用于 Docker 用户的 kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-conventions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-conventions-check"/> <label for="m-zh-cn-docs-reference-kubectl-conventions-check"><a href="/zh-cn/docs/reference/kubectl/conventions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-conventions"><span class="">kubectl 的用法约定</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-debug-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-reference-debug-cluster-check"/> <label for="m-zh-cn-docs-reference-debug-cluster-check"><a href="/zh-cn/docs/reference/debug-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-debug-cluster"><span class="">调试集群</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-debug-cluster-flow-control-li"> <input type="checkbox" id="m-zh-cn-docs-reference-debug-cluster-flow-control-check"/> <label for="m-zh-cn-docs-reference-debug-cluster-flow-control-check"><a href="/zh-cn/docs/reference/debug-cluster/flow-control/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-debug-cluster-flow-control"><span class="">流控</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-command-line-tools-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-command-line-tools-reference"><span class="">组件工具</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/feature-gates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates"><span class="">特性门控</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed"><span class="">特性门控(已移除)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kubelet/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet"><span class="">kubelet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver"><span class="">kube-apiserver</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager"><span class="">kube-controller-manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy"><span class="">kube-proxy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler"><span class="">kube-scheduler</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-config-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-check"/> <label for="m-zh-cn-docs-reference-config-api-check"><a href="/zh-cn/docs/reference/config-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-config-api"><span class="">配置 API</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-eventratelimit.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1"><span class="">Event Rate Limit Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/imagepolicy.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1"><span class="">Image Policy API (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubeconfig-v1-check"><a href="/zh-cn/docs/reference/config-api/kubeconfig.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1"><span class="">kube 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-admission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1"><span class="">kube-apiserver Admission (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-audit.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1"><span class="">kube-apiserver Audit 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-encryption.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1"><span class="">kube-apiserver 加密配置(v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1"><span class="">kube-apiserver 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1"><span class="">kube-apiserver 配置 (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1"><span class="">kube-apiserver 配置 (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-controller-manager-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kube-controller-manager-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-controller-manager-config-v1alpha1"><span class="">kube-controller-manager Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kube-proxy-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1"><span class="">kube-proxy 配置 (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-check"><a href="/zh-cn/docs/reference/config-api/kube-scheduler-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1"><span class="">kube-scheduler 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-check"/> <label for="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-check"><a href="/zh-cn/docs/reference/config-api/kubeadm-config.v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3"><span class="">kubeadm 配置 (v1beta3)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta4-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta4-check"/> <label for="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta4-check"><a href="/zh-cn/docs/reference/config-api/kubeadm-config.v1beta4/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta4"><span class="">kubeadm 配置 (v1beta4)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-credentialprovider.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1"><span class="">Kubelet CredentialProvider (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1"><span class="">Kubelet 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1"><span class="">Kubelet 配置 (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1"><span class="">Kubelet 配置 (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-webhookadmission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1"><span class="">WebhookAdmission 配置 (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-client-authentication-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-client-authentication-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-client-authentication-v1-check"><a href="/zh-cn/docs/reference/config-api/client-authentication.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-client-authentication-v1"><span class="">客户端身份认证(Client Authentication) (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/client-authentication.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1"><span class="">客户端身份认证(Client Authentication)(v1beta1)</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-external-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-check"/> <label for="m-zh-cn-docs-reference-external-api-check"><a href="/zh-cn/docs/reference/external-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-external-api"><span class="">外部 API</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-check"/> <label for="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-check"><a href="/zh-cn/docs/reference/external-api/external-metrics.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1"><span class="">Kubernetes 外部指标 (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1-check"/> <label for="m-zh-cn-docs-reference-external-api-metrics-v1beta1-check"><a href="/zh-cn/docs/reference/external-api/metrics.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1"><span class="">Kubernetes 指标 (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-check"/> <label for="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-check"><a href="/zh-cn/docs/reference/external-api/custom-metrics.v1beta2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2"><span class="">Kubernetes 自定义指标 (v1beta2)</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-scheduling-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-check"/> <label for="m-zh-cn-docs-reference-scheduling-check"><a href="/zh-cn/docs/reference/scheduling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-scheduling"><span class="">调度</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-scheduling-config-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-config-check"/> <label for="m-zh-cn-docs-reference-scheduling-config-check"><a href="/zh-cn/docs/reference/scheduling/config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-scheduling-config"><span class="">调度器配置</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-scheduling-policies-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-policies-check"/> <label for="m-zh-cn-docs-reference-scheduling-policies-check"><a href="/zh-cn/docs/reference/scheduling/policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-scheduling-policies"><span class="">调度策略</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-tools-li"> <input type="checkbox" id="m-zh-cn-docs-reference-tools-check"/> <label for="m-zh-cn-docs-reference-tools-check"><a href="/zh-cn/docs/reference/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-tools"><span class="">其他工具</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli-li"> <input type="checkbox" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli-check"/> <label for="m-zh-cn-docs-reference-tools-map-crictl-dockercli-check"><a href="/zh-cn/docs/reference/tools/map-crictl-dockercli/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli"><span class="">从 Docker 命令行映射到 crictl</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-check"/> <label for="m-zh-cn-docs-contribute-check"><a href="/zh-cn/docs/contribute/" title="为 Kubernetes 出一份力" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute"><span class="">贡献</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-docs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-docs-check"/> <label for="m-zh-cn-docs-contribute-docs-check"><a href="/zh-cn/docs/contribute/docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-docs"><span class="">为 Kubernetes 文档出一份力</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-suggesting-improvements-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-suggesting-improvements-check"/> <label for="m-zh-cn-docs-contribute-suggesting-improvements-check"><a href="/zh-cn/docs/contribute/suggesting-improvements/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-suggesting-improvements"><span class="">提出内容改进建议</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-new-content-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-check"/> <label for="m-zh-cn-docs-contribute-new-content-check"><a href="/zh-cn/docs/contribute/new-content/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-new-content"><span class="">贡献新内容</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-open-a-pr-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-open-a-pr-check"/> <label for="m-zh-cn-docs-contribute-new-content-open-a-pr-check"><a href="/zh-cn/docs/contribute/new-content/open-a-pr/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-open-a-pr"><span class="">发起拉取请求(PR)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-new-features-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-new-features-check"/> <label for="m-zh-cn-docs-contribute-new-content-new-features-check"><a href="/zh-cn/docs/contribute/new-content/new-features/" title="为发行版本撰写功能特性文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-new-features"><span class="">为发行版本撰写文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies-check"/> <label for="m-zh-cn-docs-contribute-new-content-blogs-case-studies-check"><a href="/zh-cn/docs/contribute/new-content/blogs-case-studies/" title="提交博客和案例分析" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies"><span class="">博客和案例分析</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-review-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-check"/> <label for="m-zh-cn-docs-contribute-review-check"><a href="/zh-cn/docs/contribute/review/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-review"><span class="">评阅变更</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-review-reviewing-prs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-reviewing-prs-check"/> <label for="m-zh-cn-docs-contribute-review-reviewing-prs-check"><a href="/zh-cn/docs/contribute/review/reviewing-prs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-review-reviewing-prs"><span class="">评审 PR</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-review-for-approvers-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-for-approvers-check"/> <label for="m-zh-cn-docs-contribute-review-for-approvers-check"><a href="/zh-cn/docs/contribute/review/for-approvers/" title="评阅人和批准人文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-review-for-approvers"><span class="">评阅人和批准人</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-localization-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-localization-check"/> <label for="m-zh-cn-docs-contribute-localization-check"><a href="/zh-cn/docs/contribute/localization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-localization"><span class="">本地化 Kubernetes 文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-participate-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-check"/> <label for="m-zh-cn-docs-contribute-participate-check"><a href="/zh-cn/docs/contribute/participate/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-participate"><span class="">参与 SIG Docs</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-check"/> <label for="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-check"><a href="/zh-cn/docs/contribute/participate/roles-and-responsibilities/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities"><span class="">角色与责任</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-issue-wrangler-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-issue-wrangler-check"/> <label for="m-zh-cn-docs-contribute-participate-issue-wrangler-check"><a href="/zh-cn/docs/contribute/participate/issue-wrangler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-issue-wrangler"><span class="">Issue 管理者</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-pr-wranglers-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-pr-wranglers-check"/> <label for="m-zh-cn-docs-contribute-participate-pr-wranglers-check"><a href="/zh-cn/docs/contribute/participate/pr-wranglers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-pr-wranglers"><span class="">PR 管理者</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-generate-ref-docs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-generate-ref-docs"><span class="">更新参考文档</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/quickstart/" title="参考文档快速入门" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart"><span class="">Quickstart</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/contribute-upstream/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream"><span class="">为上游 Kubernetes 代码库做出贡献</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api"><span class="">为 Kubernetes API 生成参考文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl"><span class="">为 kubectl 命令集生成参考文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-metrics-reference-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-metrics-reference-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-metrics-reference-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/metrics-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-metrics-reference"><span class="">为指标生成参考文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubernetes-components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components"><span class="">为 Kubernetes 组件和工具生成参考文档</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/prerequisites-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs"><span class=""></span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-style-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-check"/> <label for="m-zh-cn-docs-contribute-style-check"><a href="/zh-cn/docs/contribute/style/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-style"><span class="">文档样式概述</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-content-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-content-guide-check"/> <label for="m-zh-cn-docs-contribute-style-content-guide-check"><a href="/zh-cn/docs/contribute/style/content-guide/" title="文档内容指南" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-content-guide"><span class="">内容指南</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-style-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-style-guide-check"/> <label for="m-zh-cn-docs-contribute-style-style-guide-check"><a href="/zh-cn/docs/contribute/style/style-guide/" title="文档样式指南" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-style-guide"><span class="">样式指南</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-diagram-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-diagram-guide-check"/> <label for="m-zh-cn-docs-contribute-style-diagram-guide-check"><a href="/zh-cn/docs/contribute/style/diagram-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-diagram-guide"><span class="">图表指南</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-write-new-topic-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-write-new-topic-check"/> <label for="m-zh-cn-docs-contribute-style-write-new-topic-check"><a href="/zh-cn/docs/contribute/style/write-new-topic/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-write-new-topic"><span class="">撰写新主题</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-page-content-types-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-page-content-types-check"/> <label for="m-zh-cn-docs-contribute-style-page-content-types-check"><a href="/zh-cn/docs/contribute/style/page-content-types/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-page-content-types"><span class="">页面内容类型</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-content-organization-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-content-organization-check"/> <label for="m-zh-cn-docs-contribute-style-content-organization-check"><a href="/zh-cn/docs/contribute/style/content-organization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-content-organization"><span class="">内容组织</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-hugo-shortcodes-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-hugo-shortcodes-check"/> <label for="m-zh-cn-docs-contribute-style-hugo-shortcodes-check"><a href="/zh-cn/docs/contribute/style/hugo-shortcodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-hugo-shortcodes"><span class="">定制 Hugo 短代码</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-advanced-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-advanced-check"/> <label for="m-zh-cn-docs-contribute-advanced-check"><a href="/zh-cn/docs/contribute/advanced/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-advanced"><span class="">进阶贡献</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-analytics-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-analytics-check"/> <label for="m-zh-cn-docs-contribute-analytics-check"><a href="/zh-cn/docs/contribute/analytics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-analytics"><span class="">查看站点分析</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-localization-zh-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-localization-zh-check"/> <label for="m-zh-cn-docs-contribute-localization-zh-check"><a href="/zh-cn/docs/contribute/localization_zh/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-localization-zh"><span class="">中文本地化样式指南</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-test-li"> <input type="checkbox" id="m-zh-cn-docs-test-check"/> <label for="m-zh-cn-docs-test-check"><a href="/zh-cn/docs/test/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-test"><span class="">测试页面(中文版)</span></a></label> </li> </ul> </li> </ul> </nav> </div> </div> <div id="maindoc" class="split pl-md-5 row"> <main role="main" class="col-xl-8"> <nav aria-label="breadcrumb" class="td-breadcrumbs"> <ol class="breadcrumb"> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/">Kubernetes 文档</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/tasks/">任务</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/">配置 Pods 和容器</a> </li> <li class="breadcrumb-item active" aria-current="page"> <a href="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/security-context/">为 Pod 或容器配置安全上下文</a> </li> </ol> </nav> <section id="deprecation-warning"> <div class="content deprecation-warning pageinfo"> <h3> 你正在查看的文档所针对的是 Kubernetes 版本: v1.29 </h3> <p> Kubernetes v1.29 版本的文档已不再维护。你现在看到的版本来自于一份静态的快照。如需查阅最新文档,请点击 <a href="https://kubernetes.io/docs/home/">最新版本。</a> </p> </div> </section> <div class="td-content"> <h1>为 Pod 或容器配置安全上下文</h1> <!-- reviewers: - erictune - mikedanese - thockin title: Configure a Security Context for a Pod or Container content_type: task weight: 110 --> <!-- overview --> <!-- A security context defines privilege and access control settings for a Pod or Container. Security context settings include, but are not limited to: * Discretionary Access Control: Permission to access an object, like a file, is based on [user ID (UID) and group ID (GID)](https://wiki.archlinux.org/index.php/users_and_groups). * [Security Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux): Objects are assigned security labels. * Running as privileged or unprivileged. * [Linux Capabilities](https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/): Give a process some privileges, but not all the privileges of the root user. --> <p>安全上下文(Security Context)定义 Pod 或 Container 的特权与访问控制设置。 安全上下文包括但不限于:</p> <ul> <li> <p>自主访问控制(Discretionary Access Control): 基于<a href="https://wiki.archlinux.org/index.php/users_and_groups">用户 ID(UID)和组 ID(GID)</a> 来判定对对象(例如文件)的访问权限。</p> </li> <li> <p><a href="https://zh.wikipedia.org/wiki/%E5%AE%89%E5%85%A8%E5%A2%9E%E5%BC%BA%E5%BC%8FLinux">安全性增强的 Linux(SELinux)</a>: 为对象赋予安全性标签。</p> </li> <li> <p>以特权模式或者非特权模式运行。</p> </li> <li> <p><a href="https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/">Linux 权能</a>: 为进程赋予 root 用户的部分特权而非全部特权。</p> </li> </ul> <!-- * [AppArmor](/docs/tutorials/security/apparmor/): Use program profiles to restrict the capabilities of individual programs. * [Seccomp](/docs/tutorials/security/seccomp/): Filter a process's system calls. * `allowPrivilegeEscalation`: Controls whether a process can gain more privileges than its parent process. This bool directly controls whether the [`no_new_privs`](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt) flag gets set on the container process. `allowPrivilegeEscalation` is always true when the container: - is run as privileged, or - has `CAP_SYS_ADMIN` * `readOnlyRootFilesystem`: Mounts the container's root filesystem as read-only. --> <ul> <li> <p><a href="/zh-cn/docs/tutorials/security/apparmor/">AppArmor</a>:使用程序配置来限制个别程序的权能。</p> </li> <li> <p><a href="/zh-cn/docs/tutorials/security/seccomp/">Seccomp</a>:过滤进程的系统调用。</p> </li> <li> <p><code>allowPrivilegeEscalation</code>:控制进程是否可以获得超出其父进程的特权。 此布尔值直接控制是否为容器进程设置 <a href="https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt"><code>no_new_privs</code></a>标志。 当容器满足一下条件之一时,<code>allowPrivilegeEscalation</code> 总是为 true:</p> <ul> <li>以特权模式运行,或者</li> <li>具有 <code>CAP_SYS_ADMIN</code> 权能</li> </ul> </li> <li> <p><code>readOnlyRootFilesystem</code>:以只读方式加载容器的根文件系统。</p> </li> </ul> <!-- The above bullets are not a complete set of security context settings -- please see [SecurityContext](/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core) for a comprehensive list. --> <p>以上条目不是安全上下文设置的完整列表 -- 请参阅 <a href="/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core">SecurityContext</a> 了解其完整列表。</p> <h2 id="准备开始">准备开始</h2> <p><p>你必须拥有一个 Kubernetes 的集群,同时你必须配置 kubectl 命令行工具与你的集群通信。 建议在至少有两个不作为控制平面主机的节点的集群上运行本教程。 如果你还没有集群,你可以通过 <a href="https://minikube.sigs.k8s.io/docs/tutorials/multi_node/">Minikube</a> 构建一个你自己的集群,或者你可以使用下面的 Kubernetes 练习环境之一:</p> <!-- * [Killercoda](https://killercoda.com/playgrounds/scenario/kubernetes) * [Play with Kubernetes](https://labs.play-with-k8s.com/) --> <ul> <li><a href="https://killercoda.com/playgrounds/scenario/kubernetes">Killercoda</a></li> <li><a href="https://labs.play-with-k8s.com/">玩转 Kubernetes</a></li> </ul> 要获知版本信息,请输入 <code>kubectl version</code>. </p> <!-- steps --> <!-- ## Set the security context for a Pod To specify security settings for a Pod, include the `securityContext` field in the Pod specification. The `securityContext` field is a [PodSecurityContext](/docs/reference/generated/kubernetes-api/v1.29/#podsecuritycontext-v1-core) object. The security settings that you specify for a Pod apply to all Containers in the Pod. Here is a configuration file for a Pod that has a `securityContext` and an `emptyDir` volume: --> <h2 id="set-the-security-context-for-a-pod">为 Pod 设置安全性上下文 </h2> <p>要为 Pod 设置安全性设置,可在 Pod 规约中包含 <code>securityContext</code> 字段。<code>securityContext</code> 字段值是一个 <a href="/docs/reference/generated/kubernetes-api/v1.29/#podsecuritycontext-v1-core">PodSecurityContext</a> 对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。 下面是一个 Pod 的配置文件,该 Pod 定义了 <code>securityContext</code> 和一个 <code>emptyDir</code> 卷:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.29/content/zh-cn/examples/pods/security/security-context.yaml" download="pods/security/security-context.yaml"><code>pods/security/security-context.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-security-context-yaml')" title="Copy pods/security/security-context.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-security-context-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>security-context-demo<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsUser</span>:<span style="color:#bbb"> </span><span style="color:#666">1000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsGroup</span>:<span style="color:#bbb"> </span><span style="color:#666">3000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">fsGroup</span>:<span style="color:#bbb"> </span><span style="color:#666">2000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">volumes</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-vol<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">emptyDir</span>:<span style="color:#bbb"> </span>{}<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-demo<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>busybox:1.28<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">command</span>:<span style="color:#bbb"> </span>[<span style="color:#bbb"> </span><span style="color:#b44">"sh"</span>,<span style="color:#bbb"> </span><span style="color:#b44">"-c"</span>,<span style="color:#bbb"> </span><span style="color:#b44">"sleep 1h"</span><span style="color:#bbb"> </span>]<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">volumeMounts</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-vol<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">mountPath</span>:<span style="color:#bbb"> </span>/data/demo<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span><span style="color:#bbb"> </span></span></span></code></pre></div></div> </div> <!-- In the configuration file, the `runAsUser` field specifies that for any Containers in the Pod, all processes run with user ID 1000. The `runAsGroup` field specifies the primary group ID of 3000 for all processes within any containers of the Pod. If this field is omitted, the primary group ID of the containers will be root(0). Any files created will also be owned by user 1000 and group 3000 when `runAsGroup` is specified. Since `fsGroup` field is specified, all processes of the container are also part of the supplementary group ID 2000. The owner for volume `/data/demo` and any files created in that volume will be Group ID 2000. Create the Pod: --> <p>在配置文件中,<code>runAsUser</code> 字段指定 Pod 中的所有容器内的进程都使用用户 ID 1000 来运行。<code>runAsGroup</code> 字段指定所有容器中的进程都以主组 ID 3000 来运行。 如果忽略此字段,则容器的主组 ID 将是 root(0)。 当 <code>runAsGroup</code> 被设置时,所有创建的文件也会划归用户 1000 和组 3000。 由于 <code>fsGroup</code> 被设置,容器中所有进程也会是附组 ID 2000 的一部分。 卷 <code>/data/demo</code> 及在该卷中创建的任何文件的属主都会是组 ID 2000。</p> <p>创建该 Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/security-context.yaml </span></span></code></pre></div><!-- Verify that the Pod's Container is running: --> <p>检查 Pod 的容器处于运行状态:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod security-context-demo </span></span></code></pre></div><!-- Get a shell to the running Container: --> <p>开启一个 Shell 进入到运行中的容器:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl <span style="color:#a2f">exec</span> -it security-context-demo -- sh </span></span></code></pre></div><!-- In your shell, list the running processes: --> <p>在你的 Shell 中,列举运行中的进程:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>ps </span></span></code></pre></div><!-- The output shows that the processes are running as user 1000, which is the value of `runAsUser`: --> <p>输出显示进程以用户 1000 运行,即 <code>runAsUser</code> 所设置的值:</p> <pre tabindex="0"><code class="language-none" data-lang="none">PID USER TIME COMMAND 1 1000 0:00 sleep 1h 6 1000 0:00 sh ... </code></pre><!-- In your shell, navigate to `/data`, and list the one directory: --> <p>在你的 Shell 中,进入 <code>/data</code> 目录列举其内容:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">cd</span> /data </span></span><span style="display:flex;"><span>ls -l </span></span></code></pre></div><!-- The output shows that the `/data/demo` directory has group ID 2000, which is the value of `fsGroup`. --> <p>输出显示 <code>/data/demo</code> 目录的组 ID 为 2000,即 <code>fsGroup</code> 的设置值:</p> <pre tabindex="0"><code class="language-none" data-lang="none">drwxrwsrwx 2 root 2000 4096 Jun 6 20:08 demo </code></pre><!-- In your shell, navigate to `/data/demo`, and create a file: --> <p>在你的 Shell 中,进入到 <code>/data/demo</code> 目录下创建一个文件:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">cd</span> demo </span></span><span style="display:flex;"><span><span style="color:#a2f">echo</span> hello > testfile </span></span></code></pre></div><!-- List the file in the `/data/demo` directory: --> <p>列举 <code>/data/demo</code> 目录下的文件:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>ls -l </span></span></code></pre></div><!-- The output shows that `testfile` has group ID 2000, which is the value of `fsGroup`. --> <p>输出显示 <code>testfile</code> 的组 ID 为 2000,也就是 <code>fsGroup</code> 所设置的值:</p> <pre tabindex="0"><code class="language-none" data-lang="none">-rw-r--r-- 1 1000 2000 6 Jun 6 20:08 testfile </code></pre><!-- Run the following command: --> <p>运行下面的命令:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>id </span></span></code></pre></div><!-- The output is similar to this: --> <p>输出类似于:</p> <pre tabindex="0"><code class="language-none" data-lang="none">uid=1000 gid=3000 groups=2000 </code></pre><!-- From the output, you can see that `gid` is 3000 which is same as the `runAsGroup` field. If the `runAsGroup` was omitted, the `gid` would remain as 0 (root) and the process will be able to interact with files that are owned by the root(0) group and groups that have the required group permissions for the root (0) group. Exit your shell: --> <p>从输出中你会看到 <code>gid</code> 值为 3000,也就是 <code>runAsGroup</code> 字段的值。 如果 <code>runAsGroup</code> 被忽略,则 <code>gid</code> 会取值 0(root),而进程就能够与 root 用户组所拥有以及要求 root 用户组访问权限的文件交互。</p> <p>退出你的 Shell:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">exit</span> </span></span></code></pre></div><!-- ## Configure volume permission and ownership change policy for Pods --> <h2 id="为-pod-配置卷访问权限和属主变更策略">为 Pod 配置卷访问权限和属主变更策略</h2> <div class="my-2 feature-state-notice feature-stable"> <b>特性状态:</b> <code>Kubernetes v1.23 [stable]</code> </div> <!-- By default, Kubernetes recursively changes ownership and permissions for the contents of each volume to match the `fsGroup` specified in a Pod's `securityContext` when that volume is mounted. For large volumes, checking and changing ownership and permissions can take a lot of time, slowing Pod startup. You can use the `fsGroupChangePolicy` field inside a `securityContext` to control the way that Kubernetes checks and manages ownership and permissions for a volume. --> <p>默认情况下,Kubernetes 在挂载一个卷时,会递归地更改每个卷中的内容的属主和访问权限, 使之与 Pod 的 <code>securityContext</code> 中指定的 <code>fsGroup</code> 匹配。 对于较大的数据卷,检查和变更属主与访问权限可能会花费很长时间,降低 Pod 启动速度。 你可以在 <code>securityContext</code> 中使用 <code>fsGroupChangePolicy</code> 字段来控制 Kubernetes 检查和管理卷属主和访问权限的方式。</p> <!-- **fsGroupChangePolicy** - `fsGroupChangePolicy` defines behavior for changing ownership and permission of the volume before being exposed inside a Pod. This field only applies to volume types that support `fsGroup` controlled ownership and permissions. This field has two possible values: * _OnRootMismatch_: Only change permissions and ownership if the permission and the ownership of root directory does not match with expected permissions of the volume. This could help shorten the time it takes to change ownership and permission of a volume. * _Always_: Always change permission and ownership of the volume when volume is mounted. For example: --> <p><strong>fsGroupChangePolicy</strong> - <code>fsGroupChangePolicy</code> 定义在卷被暴露给 Pod 内部之前对其 内容的属主和访问许可进行变更的行为。此字段仅适用于那些支持使用 <code>fsGroup</code> 来 控制属主与访问权限的卷类型。此字段的取值可以是:</p> <ul> <li><code>OnRootMismatch</code>:只有根目录的属主与访问权限与卷所期望的权限不一致时, 才改变其中内容的属主和访问权限。这一设置有助于缩短更改卷的属主与访问 权限所需要的时间。</li> <li><code>Always</code>:在挂载卷时总是更改卷中内容的属主和访问权限。</li> </ul> <p>例如:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsUser</span>:<span style="color:#bbb"> </span><span style="color:#666">1000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsGroup</span>:<span style="color:#bbb"> </span><span style="color:#666">3000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">fsGroup</span>:<span style="color:#bbb"> </span><span style="color:#666">2000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">fsGroupChangePolicy</span>:<span style="color:#bbb"> </span><span style="color:#b44">"OnRootMismatch"</span><span style="color:#bbb"> </span></span></span></code></pre></div><!-- This field has no effect on ephemeral volume types such as [`secret`](/docs/concepts/storage/volumes/#secret), [`configMap`](/docs/concepts/storage/volumes/#configmap), and [`emptydir`](/docs/concepts/storage/volumes/#emptydir). --> <div class="alert alert-info note callout" role="alert"> <strong>说明:</strong> 此字段对于 <a href="/zh-cn/docs/concepts/storage/volumes/#secret"><code>secret</code></a>、 <a href="/zh-cn/docs/concepts/storage/volumes/#configmap"><code>configMap</code></a> 和 <a href="/zh-cn/docs/concepts/storage/volumes/#emptydir"><code>emptydir</code></a> 这类临时性存储无效。 </div> <!-- ## Delegating volume permission and ownership change to CSI driver --> <h2 id="将卷权限和所有权更改委派给-csi-驱动程序">将卷权限和所有权更改委派给 CSI 驱动程序</h2> <div class="my-2 feature-state-notice feature-stable"> <b>特性状态:</b> <code>Kubernetes v1.26 [stable]</code> </div> <!-- If you deploy a [Container Storage Interface (CSI)](https://github.com/container-storage-interface/spec/blob/master/spec.md) driver which supports the `VOLUME_MOUNT_GROUP` `NodeServiceCapability`, the process of setting file ownership and permissions based on the `fsGroup` specified in the `securityContext` will be performed by the CSI driver instead of Kubernetes. In this case, since Kubernetes doesn't perform any ownership and permission change, `fsGroupChangePolicy` does not take effect, and as specified by CSI, the driver is expected to mount the volume with the provided `fsGroup`, resulting in a volume that is readable/writable by the `fsGroup`. --> <p>如果你部署了一个<a href="https://github.com/container-storage-interface/spec/blob/master/spec.md">容器存储接口 (CSI)</a> 驱动,而该驱动支持 <code>VOLUME_MOUNT_GROUP</code> <code>NodeServiceCapability</code>, 在 <code>securityContext</code> 中指定 <code>fsGroup</code> 来设置文件所有权和权限的过程将由 CSI 驱动而不是 Kubernetes 来执行。在这种情况下,由于 Kubernetes 不执行任何所有权和权限更改, <code>fsGroupChangePolicy</code> 不会生效,并且按照 CSI 的规定,CSI 驱动应该使用所指定的 <code>fsGroup</code> 来挂载卷,从而生成了一个对 <code>fsGroup</code> 可读/可写的卷.</p> <!-- ## Set the security context for a Container To specify security settings for a Container, include the `securityContext` field in the Container manifest. The `securityContext` field is a [SecurityContext](/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core) object. Security settings that you specify for a Container apply only to the individual Container, and they override settings made at the Pod level when there is overlap. Container settings do not affect the Pod's Volumes. Here is the configuration file for a Pod that has one Container. Both the Pod and the Container have a `securityContext` field: --> <h2 id="set-the-security-context-for-a-container">为 Container 设置安全性上下文 </h2> <p>若要为 Container 设置安全性配置,可以在 Container 清单中包含 <code>securityContext</code> 字段。<code>securityContext</code> 字段的取值是一个 <a href="/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core">SecurityContext</a> 对象。你为 Container 设置的安全性配置仅适用于该容器本身,并且所指定的设置在与 Pod 层面设置的内容发生重叠时,会重写 Pod 层面的设置。Container 层面的设置不会影响到 Pod 的卷。</p> <p>下面是一个 Pod 的配置文件,其中包含一个 Container。Pod 和 Container 都有 <code>securityContext</code> 字段:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.29/content/zh-cn/examples/pods/security/security-context-2.yaml" download="pods/security/security-context-2.yaml"><code>pods/security/security-context-2.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-security-context-2-yaml')" title="Copy pods/security/security-context-2.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-security-context-2-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>security-context-demo-2<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsUser</span>:<span style="color:#bbb"> </span><span style="color:#666">1000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-demo-2<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>gcr.io/google-samples/node-hello:1.0<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">runAsUser</span>:<span style="color:#bbb"> </span><span style="color:#666">2000</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span><span style="color:#bbb"> </span></span></span></code></pre></div></div> </div> <!-- Create the Pod: --> <p>创建该 Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/security-context-2.yaml </span></span></code></pre></div><!-- Verify that the Pod's Container is running: --> <p>验证 Pod 中的容器处于运行状态:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod security-context-demo-2 </span></span></code></pre></div><!-- Get a shell into the running Container: --> <p>启动一个 Shell 进入到运行中的容器内:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl <span style="color:#a2f">exec</span> -it security-context-demo-2 -- sh </span></span></code></pre></div><!-- In your shell, list the running processes: --> <p>在你的 Shell 中,列举运行中的进程:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>ps aux </span></span></code></pre></div><!-- The output shows that the processes are running as user 2000. This is the value of `runAsUser` specified for the Container. It overrides the value 1000 that is specified for the Pod. --> <p>输出显示进程以用户 2000 运行。该值是在 Container 的 <code>runAsUser</code> 中设置的。 该设置值重写了 Pod 层面所设置的值 1000。</p> <pre tabindex="0"><code>USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND 2000 1 0.0 0.0 4336 764 ? Ss 20:36 0:00 /bin/sh -c node server.js 2000 8 0.1 0.5 772124 22604 ? Sl 20:36 0:00 node server.js ... </code></pre><!-- Exit your shell: --> <p>退出你的 Shell:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">exit</span> </span></span></code></pre></div><!-- ## Set capabilities for a Container With [Linux capabilities](https://man7.org/linux/man-pages/man7/capabilities.7.html), you can grant certain privileges to a process without granting all the privileges of the root user. To add or remove Linux capabilities for a Container, include the `capabilities` field in the `securityContext` section of the Container manifest. First, see what happens when you don't include a `capabilities` field. Here is configuration file that does not add or remove any Container capabilities: --> <h2 id="set-capabilities-for-a-container">为 Container 设置权能 </h2> <p>使用 <a href="https://man7.org/linux/man-pages/man7/capabilities.7.html">Linux 权能</a>, 你可以赋予进程 root 用户所拥有的某些特权,但不必赋予其全部特权。 要为 Container 添加或移除 Linux 权能,可以在 Container 清单的 <code>securityContext</code> 节包含 <code>capabilities</code> 字段。</p> <p>首先,看一下不包含 <code>capabilities</code> 字段时候会发生什么。 下面是一个配置文件,其中没有添加或移除容器的权能:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.29/content/zh-cn/examples/pods/security/security-context-3.yaml" download="pods/security/security-context-3.yaml"><code>pods/security/security-context-3.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-security-context-3-yaml')" title="Copy pods/security/security-context-3.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-security-context-3-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>security-context-demo-3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>gcr.io/google-samples/node-hello:1.0<span style="color:#bbb"> </span></span></span></code></pre></div></div> </div> <!-- Create the Pod: --> <p>创建该 Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/security-context-3.yaml </span></span></code></pre></div><!-- Verify that the Pod's Container is running: --> <p>验证 Pod 的容器处于运行状态:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod security-context-demo-3 </span></span></code></pre></div><!-- Get a shell into the running Container: --> <p>启动一个 Shell 进入到运行中的容器:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl <span style="color:#a2f">exec</span> -it security-context-demo-3 -- sh </span></span></code></pre></div><!-- In your shell, list the running processes: --> <p>在你的 Shell 中,列举运行中的进程:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>ps aux </span></span></code></pre></div><!-- The output shows the process IDs (PIDs) for the Container: --> <p>输出显示容器中进程 ID(PIDs):</p> <pre tabindex="0"><code>USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 4336 796 ? Ss 18:17 0:00 /bin/sh -c node server.js root 5 0.1 0.5 772124 22700 ? Sl 18:17 0:00 node server.js </code></pre><!-- In your shell, view the status for process 1: --> <p>在你的 Shell 中,查看进程 1 的状态:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">cd</span> /proc/1 </span></span><span style="display:flex;"><span>cat status </span></span></code></pre></div><!-- The output shows the capabilities bitmap for the process: --> <p>输出显示进程的权能位图:</p> <pre tabindex="0"><code>... CapPrm: 00000000a80425fb CapEff: 00000000a80425fb ... </code></pre><!-- Make a note of the capabilities bitmap, and then exit your shell: --> <p>记下进程权能位图,之后退出你的 Shell:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">exit</span> </span></span></code></pre></div><!-- Next, run a Container that is the same as the preceding container, except that it has additional capabilities set. Here is the configuration file for a Pod that runs one Container. The configuration adds the `CAP_NET_ADMIN` and `CAP_SYS_TIME` capabilities: --> <p>接下来运行一个与前例中容器相同的容器,只是这个容器有一些额外的权能设置。</p> <p>下面是一个 Pod 的配置,其中运行一个容器。配置为容器添加 <code>CAP_NET_ADMIN</code> 和 <code>CAP_SYS_TIME</code> 权能:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.29/content/zh-cn/examples/pods/security/security-context-4.yaml" download="pods/security/security-context-4.yaml"><code>pods/security/security-context-4.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-security-context-4-yaml')" title="Copy pods/security/security-context-4.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-security-context-4-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>security-context-demo-4<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>sec-ctx-4<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>gcr.io/google-samples/node-hello:1.0<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">capabilities</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">add</span>:<span style="color:#bbb"> </span>[<span style="color:#b44">"NET_ADMIN"</span>,<span style="color:#bbb"> </span><span style="color:#b44">"SYS_TIME"</span>]<span style="color:#bbb"> </span></span></span></code></pre></div></div> </div> <!-- Create the Pod: --> <p>创建 Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/security-context-4.yaml </span></span></code></pre></div><!-- Get a shell into the running Container: --> <p>启动一个 Shell,进入到运行中的容器:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl <span style="color:#a2f">exec</span> -it security-context-demo-4 -- sh </span></span></code></pre></div><!-- In your shell, view the capabilities for process 1: --> <p>在你的 Shell 中,查看进程 1 的权能:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#a2f">cd</span> /proc/1 </span></span><span style="display:flex;"><span>cat status </span></span></code></pre></div><!-- The output shows capabilities bitmap for the process: --> <p>输出显示的是进程的权能位图:</p> <pre tabindex="0"><code>... CapPrm: 00000000aa0435fb CapEff: 00000000aa0435fb ... </code></pre><!-- Compare the capabilities of the two Containers: --> <p>比较两个容器的权能位图:</p> <pre tabindex="0"><code>00000000a80425fb 00000000aa0435fb </code></pre><!-- In the capability bitmap of the first container, bits 12 and 25 are clear. In the second container, bits 12 and 25 are set. Bit 12 is `CAP_NET_ADMIN`, and bit 25 is `CAP_SYS_TIME`. See [capability.h](https://github.com/torvalds/linux/blob/master/include/uapi/linux/capability.h) for definitions of the capability constants. --> <p>在第一个容器的权能位图中,位 12 和 25 是没有设置的。在第二个容器中,位 12 和 25 是设置了的。位 12 是 <code>CAP_NET_ADMIN</code> 而位 25 则是 <code>CAP_SYS_TIME</code>。 参见 <a href="https://github.com/torvalds/linux/blob/master/include/uapi/linux/capability.h">capability.h</a> 了解权能常数的定义。</p> <!-- Linux capability constants have the form `CAP_XXX`. But when you list capabilities in your container manifest, you must omit the `CAP_` portion of the constant. For example, to add `CAP_SYS_TIME`, include `SYS_TIME` in your list of capabilities. --> <div class="alert alert-info note callout" role="alert"> <strong>说明:</strong> Linux 权能常数定义的形式为 <code>CAP_XXX</code>。但是你在 container 清单中列举权能时, 要将权能名称中的 <code>CAP_</code> 部分去掉。例如,要添加 <code>CAP_SYS_TIME</code>, 可在权能列表中添加 <code>SYS_TIME</code>。 </div> <!-- ## Set the Seccomp Profile for a Container To set the Seccomp profile for a Container, include the `seccompProfile` field in the `securityContext` section of your Pod or Container manifest. The `seccompProfile` field is a [SeccompProfile](/docs/reference/generated/kubernetes-api/v1.29/#seccompprofile-v1-core) object consisting of `type` and `localhostProfile`. Valid options for `type` include `RuntimeDefault`, `Unconfined`, and `Localhost`. `localhostProfile` must only be set if `type: Localhost`. It indicates the path of the pre-configured profile on the node, relative to the kubelet's configured Seccomp profile location (configured with the `--root-dir` flag). Here is an example that sets the Seccomp profile to the node's container runtime default profile: --> <h2 id="为容器设置-seccomp-配置">为容器设置 Seccomp 配置</h2> <p>若要为容器设置 Seccomp 配置(Profile),可在你的 Pod 或 Container 清单的 <code>securityContext</code> 节中包含 <code>seccompProfile</code> 字段。该字段是一个 <a href="/docs/reference/generated/kubernetes-api/v1.29/#seccompprofile-v1-core">SeccompProfile</a> 对象,包含 <code>type</code> 和 <code>localhostProfile</code> 属性。 <code>type</code> 的合法选项包括 <code>RuntimeDefault</code>、<code>Unconfined</code> 和 <code>Localhost</code>。 <code>localhostProfile</code> 只能在 <code>type: Localhost</code> 配置下才可以设置。 该字段标明节点上预先设定的配置的路径,路径是相对于 kubelet 所配置的 Seccomp 配置路径(使用 <code>--root-dir</code> 设置)而言的。</p> <p>下面是一个例子,设置容器使用节点上容器运行时的默认配置作为 Seccomp 配置:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#00f;font-weight:bold">...</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>RuntimeDefault<span style="color:#bbb"> </span></span></span></code></pre></div><!-- Here is an example that sets the Seccomp profile to a pre-configured file at `<kubelet-root-dir>/seccomp/my-profiles/profile-allow.json`: --> <p>下面是另一个例子,将 Seccomp 的样板设置为位于 <code><kubelet-根目录>/seccomp/my-profiles/profile-allow.json</code> 的一个预先配置的文件。</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#00f;font-weight:bold">...</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>Localhost<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">localhostProfile</span>:<span style="color:#bbb"> </span>my-profiles/profile-allow.json<span style="color:#bbb"> </span></span></span></code></pre></div><!-- ## Assign SELinux labels to a Container To assign SELinux labels to a Container, include the `seLinuxOptions` field in the `securityContext` section of your Pod or Container manifest. The `seLinuxOptions` field is an [SELinuxOptions](/docs/reference/generated/kubernetes-api/v1.29/#selinuxoptions-v1-core) object. Here's an example that applies an SELinux level: --> <h2 id="为-container-赋予-selinux-标签">为 Container 赋予 SELinux 标签</h2> <p>若要给 Container 设置 SELinux 标签,可以在 Pod 或 Container 清单的 <code>securityContext</code> 节包含 <code>seLinuxOptions</code> 字段。 <code>seLinuxOptions</code> 字段的取值是一个 <a href="/docs/reference/generated/kubernetes-api/v1.29/#selinuxoptions-v1-core">SELinuxOptions</a> 对象。下面是一个应用 SELinux 标签的例子:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#00f;font-weight:bold">...</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seLinuxOptions</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">level</span>:<span style="color:#bbb"> </span><span style="color:#b44">"s0:c123,c456"</span><span style="color:#bbb"> </span></span></span></code></pre></div><!-- To assign SELinux labels, the SELinux security module must be loaded on the host operating system. --> <div class="alert alert-info note callout" role="alert"> <strong>说明:</strong> 要指定 SELinux,需要在宿主操作系统中装载 SELinux 安全性模块。 </div> <!-- ### Efficient SELinux volume relabeling --> <h3 id="高效重打-selinux-卷标签">高效重打 SELinux 卷标签</h3> <div class="my-2 feature-state-notice feature-beta"> <b>特性状态:</b> <code>Kubernetes v1.27 [beta]</code> </div> <!-- By default, the container runtime recursively assigns SELinux label to all files on all Pod volumes. To speed up this process, Kubernetes can change the SELinux label of a volume instantly by using a mount option `-o context=<label>`. --> <p>默认情况下,容器运行时递归地将 SELinux 标签赋予所有 Pod 卷上的所有文件。 为了加快该过程,Kubernetes 使用挂载可选项 <code>-o context=<label></code> 可以立即改变卷的 SELinux 标签。</p> <!-- To benefit from this speedup, all these conditions must be met: --> <p>要使用这项加速功能,必须满足下列条件:</p> <!-- * The [feature gates](/docs/reference/command-line-tools-reference/feature-gates/) `ReadWriteOncePod` and `SELinuxMountReadWriteOncePod` must be enabled. --> <ul> <li>必须启用 <code>ReadWriteOncePod</code> 和 <code>SELinuxMountReadWriteOncePod</code> <a href="/zh-cn/docs/reference/command-line-tools-reference/feature-gates/">特性门控</a>。</li> </ul> <!-- * Pod must use PersistentVolumeClaim with `accessModes: ["ReadWriteOncePod"]`. --> <ul> <li>Pod 必须以 <code>accessModes: ["ReadWriteOncePod"]</code> 模式使用 PersistentVolumeClaim。</li> </ul> <!-- * Pod (or all its Containers that use the PersistentVolumeClaim) must have `seLinuxOptions` set. --> <ul> <li>Pod(或其中使用 PersistentVolumeClaim 的所有容器)必须设置 <code>seLinuxOptions</code>。</li> </ul> <!-- * The corresponding PersistentVolume must be either a volume that uses a <a class='glossary-tooltip' title='容器存储接口 (CSI)定义了存储系统暴露给容器的标准接口。' data-toggle='tooltip' data-placement='top' href='/zh-cn/docs/concepts/storage/volumes/#csi' target='_blank' aria-label='CSI'>CSI</a> driver, or a volume that uses the legacy `iscsi` volume type. * If you use a volume backed by a CSI driver, that CSI driver must announce that it supports mounting with `-o context` by setting `spec.seLinuxMount: true` in its CSIDriver instance. * The corresponding PersistentVolume must be either: * A volume that uses the legacy in-tree `iscsi`, `rbd` or `fc` volume type. * Or a volume that uses a <a class='glossary-tooltip' title='容器存储接口 (CSI)定义了存储系统暴露给容器的标准接口。' data-toggle='tooltip' data-placement='top' href='/zh-cn/docs/concepts/storage/volumes/#csi' target='_blank' aria-label='CSI'>CSI</a> driver. The CSI driver must announce that it supports mounting with `-o context` by setting `spec.seLinuxMount: true` in its CSIDriver instance. --> <ul> <li>对应的 PersistentVolume 必须是: <ul> <li>使用传统树内(In-Tree) <code>iscsi</code>、<code>rbd</code> 或 <code>fs</code> 卷类型的卷。</li> <li>或者是使用 {< glossary_tooltip text="CSI" term_id="csi" >}} 驱动程序的卷 CSI 驱动程序必须能够通过在 CSIDriver 实例中设置 <code>spec.seLinuxMount: true</code> 以支持 <code>-o context</code> 挂载。</li> </ul> </li> </ul> <!-- For any other volume types, SELinux relabelling happens another way: the container runtime recursively changes the SELinux label for all inodes (files and directories) in the volume. The more files and directories in the volume, the longer that relabelling takes. --> <p>对于所有其他卷类型,重打 SELinux 标签的方式有所不同: 容器运行时为卷中的所有节点(文件和目录)递归地修改 SELinux 标签。 卷中的文件和目录越多,重打标签需要耗费的时间就越长。</p> <div class="alert alert-info note callout" role="alert"> <strong>说明:</strong> <!-- remove after Kubernetes v1.30 is released --> <!-- If you are running Kubernetes v1.25, refer to the v1.25 version of this task page: [Configure a Security Context for a Pod or Container](https://v1-25.docs.kubernetes.io/docs/tasks/configure-pod-container/security-context/) (v1.25). There is an important note in that documentation about a situation where the kubelet can lose track of volume labels after restart. This deficiency has been fixed in Kubernetes 1.26. --> <p>如果你的 Kubernetes 版本是 v1.25,请参阅此任务页面的 v1.25 版本: <a href="https://v1-25.docs.kubernetes.io/docs/tasks/configure-pod-container/security-context/">为 Pod 或 Container 配置安全上下文</a>(v1.25)。 该文档中有一个重要的说明:kubelet 在重启后会丢失对卷标签的追踪记录。 这个缺陷已经在 Kubernetes 1.26 中修复。</p> </div> <!-- ## Discussion The security context for a Pod applies to the Pod's Containers and also to the Pod's Volumes when applicable. Specifically `fsGroup` and `seLinuxOptions` are applied to Volumes as follows: --> <h2 id="discussion">讨论 </h2> <p>Pod 的安全上下文适用于 Pod 中的容器,也适用于 Pod 所挂载的卷(如果有的话)。 尤其是,<code>fsGroup</code> 和 <code>seLinuxOptions</code> 按下面的方式应用到挂载卷上:</p> <!-- * `fsGroup`: Volumes that support ownership management are modified to be owned and writable by the GID specified in `fsGroup`. See the [Ownership Management design document](https://git.k8s.io/design-proposals-archive/storage/volume-ownership-management.md) for more details. * `seLinuxOptions`: Volumes that support SELinux labeling are relabeled to be accessible by the label specified under `seLinuxOptions`. Usually you only need to set the `level` section. This sets the [Multi-Category Security (MCS)](https://selinuxproject.org/page/NB_MLS) label given to all Containers in the Pod as well as the Volumes. --> <ul> <li> <p><code>fsGroup</code>:支持属主管理的卷会被修改,将其属主变更为 <code>fsGroup</code> 所指定的 GID, 并且对该 GID 可写。进一步的细节可参阅 <a href="https://git.k8s.io/design-proposals-archive/storage/volume-ownership-management.md">属主变更设计文档</a>。</p> </li> <li> <p><code>seLinuxOptions</code>:支持 SELinux 标签的卷会被重新打标签,以便可被 <code>seLinuxOptions</code> 下所设置的标签访问。通常你只需要设置 <code>level</code> 部分。 该部分设置的是赋予 Pod 中所有容器及卷的 <a href="https://selinuxproject.org/page/NB_MLS">多类别安全性(Multi-Category Security,MCS)</a>标签。</p> </li> </ul> <!-- After you specify an MCS label for a Pod, all Pods with the same label can access the Volume. If you need inter-Pod protection, you must assign a unique MCS label to each Pod. --> <div class="alert alert-danger warning callout" role="alert"> <strong>警告:</strong> 在为 Pod 设置 MCS 标签之后,所有带有相同标签的 Pod 可以访问该卷。 如果你需要跨 Pod 的保护,你必须为每个 Pod 赋予独特的 MCS 标签。 </div> <!-- ## Clean up Delete the Pod: --> <h2 id="清理">清理</h2> <p>删除之前创建的所有 Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl delete pod security-context-demo </span></span><span style="display:flex;"><span>kubectl delete pod security-context-demo-2 </span></span><span style="display:flex;"><span>kubectl delete pod security-context-demo-3 </span></span><span style="display:flex;"><span>kubectl delete pod security-context-demo-4 </span></span></code></pre></div><h2 id="接下来">接下来</h2> <!-- * [PodSecurityContext](/docs/reference/generated/kubernetes-api/v1.29/#podsecuritycontext-v1-core) * [SecurityContext](/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core) * [CRI Plugin Config Guide](https://github.com/containerd/containerd/blob/main/docs/cri/config.md) * [Security Contexts design document](https://git.k8s.io/design-proposals-archive/auth/security_context.md) * [Ownership Management design document](https://git.k8s.io/design-proposals-archive/storage/volume-ownership-management.md) * [PodSecurity Admission](/docs/concepts/security/pod-security-admission/) * [AllowPrivilegeEscalation design document](https://git.k8s.io/design-proposals-archive/auth/no-new-privs.md) * For more information about security mechanisms in Linux, see [Overview of Linux Kernel Security Features](https://www.linux.com/learn/overview-linux-kernel-security-features) (Note: Some information is out of date) --> <ul> <li><a href="/docs/reference/generated/kubernetes-api/v1.29/#podsecuritycontext-v1-core">PodSecurityContext</a> API 定义</li> <li><a href="/docs/reference/generated/kubernetes-api/v1.29/#securitycontext-v1-core">SecurityContext</a> API 定义</li> <li><a href="https://github.com/containerd/containerd/blob/main/docs/cri/config.md">CRI 插件配置指南</a></li> <li><a href="https://github.com/kubernetes/design-proposals-archive/blob/main/auth/security_context.md">安全上下文的设计文档(英文)</a></li> <li><a href="https://github.com/kubernetes/design-proposals-archive/blob/main/storage/volume-ownership-management.md">属主管理的设计文档(英文)</a></li> <li><a href="/zh-cn/docs/concepts/security/pod-security-admission/">Pod 安全性准入</a></li> <li><a href="https://github.com/kubernetes/design-proposals-archive/blob/main/auth/no-new-privs.md">AllowPrivilegeEscalation 的设计文档(英文)</a></li> <li>关于在 Linux 系统中的安全机制的更多信息,可参阅 <a href="https://www.linux.com/learn/overview-linux-kernel-security-features">Linux 内核安全性能力概述</a>(注意:部分信息已过时)。</li> </ul> </div> <div id="pre-footer"> <h2>反馈</h2> <p class="feedback--prompt">此页是否对你有帮助? </p> <button class="btn btn-primary mb-4 feedback--yes">是</button> <button class="btn btn-primary mb-4 feedback--no">否</button> <p class="feedback--response feedback--response__hidden"> 感谢反馈。如果你有一个关于如何使用 Kubernetes 的具体问题需要答案,可以访问 <a target="_blank" rel="noopener" href="https://stackoverflow.com/questions/tagged/kubernetes"> Stack Overflow</a>. 在 GitHub 仓库上登记新的问题 <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Issue%20with%20k8s.io"> 报告问题</a> 或者 <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Improvement%20for%20k8s.io"> 提出改进建议</a>. </p> </div> <script> const yes = document.querySelector('.feedback--yes'); const no = document.querySelector('.feedback--no'); document.querySelectorAll('.feedback--link').forEach(link => { link.href = link.href + window.location.pathname; }); const sendFeedback = (value) => { if (!gtag) { console.log('!gtag'); } gtag('event', 'click', { 'event_category': 'Helpful', 'event_label': window.location.pathname, value }); }; const disableButtons = () => { yes.disabled = true; yes.classList.add('feedback--button__disabled'); no.disabled = true; no.classList.add('feedback--button__disabled'); }; yes.addEventListener('click', () => { sendFeedback(1); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); no.addEventListener('click', () => { sendFeedback(0); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); </script> <div class="text-muted mt-5 pt-3 border-top"> 最后修改 September 12, 2023 at 6:31 PM PST: <a href="https://github.com/kubernetes/website/commit/da025eca2cc6221afb60cd114e28a0c1725bbc84">[zh-cn] sync configure-pod-container/* (da025eca2c)</a> </div> </main> <div class="d-none d-xl-block td-toc d-print-none col-xl-4"> <div class="td-page-meta ml-2 pb-1 pt-2 mb-0"> <a href="https://github.com/kubernetes/website/edit/main/content/zh-cn/docs/tasks/configure-pod-container/security-context.md" target="_blank"><i class="fa fa-edit fa-fw"></i> 编辑此页</a> <a href="https://github.com/kubernetes/website/new/main/content/zh-cn/docs/tasks/configure-pod-container/security-context.md?filename=change-me.md&value=---%0Atitle%3A+%22Long+Page+Title%22%0AlinkTitle%3A+%22Short+Nav+Title%22%0Aweight%3A+100%0Adescription%3A+%3E-%0A+++++Page+description+for+heading+and+indexes.%0A---%0A%0A%23%23+Heading%0A%0AEdit+this+template+to+create+your+new+page.%0A%0A%2A+Give+it+a+good+name%2C+ending+in+%60.md%60+-+e.g.+%60getting-started.md%60%0A%2A+Edit+the+%22front+matter%22+section+at+the+top+of+the+page+%28weight+controls+how+its+ordered+amongst+other+pages+in+the+same+directory%3B+lowest+number+first%29.%0A%2A+Add+a+good+commit+message+at+the+bottom+of+the+page+%28%3C80+characters%3B+use+the+extended+description+field+for+more+detail%29.%0A%2A+Create+a+new+branch+so+you+can+preview+your+new+file+and+request+a+review+via+Pull+Request.%0A" target="_blank"><i class="fa fa-edit fa-fw"></i> 添加子页面</a> <a href="https://github.com/kubernetes/website/issues/new?title=%e4%b8%ba%20Pod%20%e6%88%96%e5%ae%b9%e5%99%a8%e9%85%8d%e7%bd%ae%e5%ae%89%e5%85%a8%e4%b8%8a%e4%b8%8b%e6%96%87" target="_blank"><i class="fab fa-github fa-fw"></i> 登记一个问题</a> <a id="print" href="https://kubernetes.io/zh-cn/docs/tasks/configure-pod-container/_print/"><i class="fa fa-print fa-fw"></i> 整节打印</a> </div> <nav id="TableOfContents"> <ul> <li><a href="#准备开始">准备开始</a></li> <li><a href="#set-the-security-context-for-a-pod">为 Pod 设置安全性上下文 </a></li> <li><a href="#为-pod-配置卷访问权限和属主变更策略">为 Pod 配置卷访问权限和属主变更策略</a></li> <li><a href="#将卷权限和所有权更改委派给-csi-驱动程序">将卷权限和所有权更改委派给 CSI 驱动程序</a></li> <li><a href="#set-the-security-context-for-a-container">为 Container 设置安全性上下文 </a></li> <li><a href="#set-capabilities-for-a-container">为 Container 设置权能 </a></li> <li><a href="#为容器设置-seccomp-配置">为容器设置 Seccomp 配置</a></li> <li><a href="#为-container-赋予-selinux-标签">为 Container 赋予 SELinux 标签</a> <ul> <li><a href="#高效重打-selinux-卷标签">高效重打 SELinux 卷标签</a></li> </ul> </li> <li><a href="#discussion">讨论 </a></li> <li><a href="#清理">清理</a></li> <li><a href="#接下来">接下来</a></li> </ul> </nav> </div> </div> </div> </div> </div> <footer class="d-print-none"> <div class="footer__links"> <nav> <a class="text-white" href="/zh-cn/docs/home/">文档</a> <a class="text-white" href="/zh-cn/blog/">博客</a> <a class="text-white" href="/zh-cn/training/">培训</a> <a class="text-white" href="/zh-cn/partners/">合作伙伴</a> <a class="text-white" href="/zh-cn/community/">社区</a> <a class="text-white" href="/zh-cn/case-studies/">案例分析</a> </nav> </div> <div class="container-fluid"> <div class="row"> <div class="col-6 col-sm-2 text-xs-center order-sm-2"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="User mailing list" aria-label="User mailing list"> <a class="text-white" target="_blank" href="https://discuss.kubernetes.io"> <i class="fa fa-envelope"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="X(Twitter)" aria-label="X(Twitter)"> <a class="text-white" target="_blank" href="https://twitter.com/kubernetesio"> <i class="fab fa-x-twitter"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Calendar" aria-label="Calendar"> <a class="text-white" target="_blank" href="https://calendar.google.com/calendar/embed?src=calendar%40kubernetes.io"> <i class="fas fa-calendar-alt"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Youtube" aria-label="Youtube"> <a class="text-white" target="_blank" href="https://youtube.com/kubernetescommunity"> <i class="fab fa-youtube"></i> </a> </li> </ul> </div> <div class="col-6 col-sm-2 text-right text-xs-center order-sm-3"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="GitHub" aria-label="GitHub"> <a class="text-white" target="_blank" href="https://github.com/kubernetes/kubernetes"> <i class="fab fa-github"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Slack" aria-label="Slack"> <a class="text-white" target="_blank" href="https://slack.k8s.io"> <i class="fab fa-slack"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Contribute" aria-label="Contribute"> <a class="text-white" target="_blank" href="https://git.k8s.io/community/contributors/guide"> <i class="fas fa-edit"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Stack Overflow" aria-label="Stack Overflow"> <a class="text-white" target="_blank" href="https://stackoverflow.com/questions/tagged/kubernetes"> <i class="fab fa-stack-overflow"></i> </a> </li> </ul> </div> <div class="col-12 col-sm-8 text-center order-sm-2"> <small class="text-white">© 2024 The Kubernetes 作者 | 文档发布基于 <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a> 授权许可</small> <br/> <small class="text-white">Copyright © 2024 Linux 基金会®。保留所有权利。Linux 基金会已注册并使用商标。如需了解 Linux 基金会的商标列表,请访问<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">商标使用页面</a></small> <br/> <small class="text-white">ICP license: 京ICP备17074266号-3</small> </div> </div> </div> </footer> <script src="/js/jquery-3.6.0.min.js" integrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <script src="/js/popper-1.16.1.min.js" intregrity="sha384-9/reFTGAW83EW2RDu2S0VKaIzap3H66lZH81PoYlFhbGU+6BZp6G7niu735Sk7lN" crossorigin="anonymous"></script> <script src="/js/bootstrap-4.6.1.min.js" integrity="sha384-VHvPCCyXqtD5DqJeNxl2dtTyhF78xXNXdkwX1CZeRusQfRKp+tA7hAShOK/B/fQ2" crossorigin="anonymous"></script> <script src="/js/script.js"></script> <script src="/js/main.min.5c0bf7f21dc4f66485f74efbbeeff28a7e4f8cddaac1bae47043159c922ff3a3.js" integrity="sha256-XAv38h3E9mSF9077vu/yin5PjN2qwbrkcEMVnJIv86M=" crossorigin="anonymous"></script> <script> let splitInstance = null; function enableSplitter(mediaQuery) { if (mediaQuery.matches) { if (!splitInstance) { splitInstance = Split(["#sidebarnav", "#maindoc"], { sizes: [20, 80], minSize: 100, }); } } else { if (splitInstance) { splitInstance.destroy(); splitInstance = null; } } } const screenWidthMediaQuery = window.matchMedia("(min-width: 768px)"); const eleNav = document.getElementById("sidebarnav"); if (eleNav !== null) { enableSplitter(screenWidthMediaQuery); screenWidthMediaQuery.addListener(enableSplitter); } </script> <script async src="/js/sweetalert-2.1.2.min.js"></script> <script type="text/javascript"> function copyCode(elem){ if (document.getElementById(elem)) { if (navigator.clipboard) { navigator.clipboard.writeText(document.getElementById(elem).textContent).then( function () { swal("Copied to clipboard: ",elem); }, function () { swal("Oh, no…","Failed to copy to clipboard: ",elem); }, ); } else { swal("Oh, no…","Sorry, your browser doesn't support copying this example to your clipboard."); } } } </script> </body> </html>