CINXE.COM
Restrict a Container's Syscalls with seccomp | Kubernetes
<!doctype html> <html lang="en" class="no-js"> <head> <meta name="robots" content="noindex, nofollow"> <link rel="alternate" hreflang="zh-cn" href="https://kubernetes.io/zh-cn/docs/tutorials/security/seccomp/"> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="generator" content="Hugo 0.111.3"> <link rel="shortcut icon" type="image/png" href="/images/favicon.png"> <link rel="apple-touch-icon" href="/favicons/apple-touch-icon-180x180.png" sizes="180x180"> <link rel="manifest" href="/manifest.webmanifest"> <link rel="apple-touch-icon" href="/images/kubernetes-192x192.png"> <title>Restrict a Container's Syscalls with seccomp | Kubernetes</title><meta property="og:title" content="Restrict a Container's Syscalls with seccomp" /> <meta property="og:description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult." /> <meta property="og:type" content="article" /> <meta property="og:url" content="https://kubernetes.io/docs/tutorials/security/seccomp/" /><meta property="article:section" content="docs" /> <meta property="article:modified_time" content="2023-07-31T09:57:17+01:00" /><meta property="og:site_name" content="Kubernetes" /> <meta itemprop="name" content="Restrict a Container's Syscalls with seccomp"> <meta itemprop="description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult."> <meta itemprop="dateModified" content="2023-07-31T09:57:17+01:00" /> <meta itemprop="wordCount" content="2669"> <meta itemprop="keywords" content="" /><meta name="twitter:card" content="summary"/> <meta name="twitter:title" content="Restrict a Container's Syscalls with seccomp"/> <meta name="twitter:description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult."/> <link href="/scss/main.css" rel="stylesheet"> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "url": "https://kubernetes.io", "logo": "https://kubernetes.io/images/favicon.png", } </script> <meta name="theme-color" content="#326ce5"> <link rel="stylesheet" href="/css/feature-states.css"> <meta name="description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult."> <meta property="og:description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult."> <meta name="twitter:description" content="FEATURE STATE: Kubernetes v1.19 [stable] Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a node to your Pods and containers. Identifying the privileges required for your workloads can be difficult."> <meta property="og:url" content="https://kubernetes.io/docs/tutorials/security/seccomp/"> <meta property="og:title" content="Restrict a Container's Syscalls with seccomp"> <meta name="twitter:title" content="Restrict a Container's Syscalls with seccomp"> <meta name="twitter:image" content="https://kubernetes.io/images/favicon.png" /> <meta name="twitter:image:alt" content="Kubernetes"> <meta property="og:image" content="/images/kubernetes-horizontal-color.png"> <meta property="og:type" content="article"> <script src="/js/jquery-3.6.0.min.js" intregrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <title>Restrict a Container's Syscalls with seccomp | Kubernetes</title> </head> <body class="td-page td-documentation"> <header> <nav class="js-navbar-scroll navbar navbar-expand navbar-dark flex-column flex-md-row td-navbar" data-auto-burger="primary"> <a class="navbar-brand img-fluid" href="/"></a> <div class="td-navbar-nav-scroll ml-md-auto" id="main_navbar"> <ul class="navbar-nav mt-2 mt-lg-0"> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link active" href="/docs/" >Documentation</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/blog/" >Kubernetes Blog</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/training/" >Training</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/partners/" >Partners</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/community/" >Community</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/case-studies/" >Case Studies</a> </li> <li class="nav-item mr-n3 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> Versions </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/releases">Release Information</a> <a class="dropdown-item" href="https://kubernetes.io/docs/tutorials/security/seccomp/">v1.31</a> <a class="dropdown-item" href="https://v1-30.docs.kubernetes.io/docs/tutorials/security/seccomp/">v1.30</a> <a class="dropdown-item" href="https://v1-29.docs.kubernetes.io/docs/tutorials/security/seccomp/">v1.29</a> <a class="dropdown-item" href="https://v1-28.docs.kubernetes.io/docs/tutorials/security/seccomp/">v1.28</a> <a class="dropdown-item" href="https://v1-27.docs.kubernetes.io/docs/tutorials/security/seccomp/">v1.27</a> </div> </li> <li class="nav-item mr-n4 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdownMenuLink" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> English </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/zh-cn/docs/tutorials/security/seccomp/">中文 (Chinese)</a> </div> </li> </ul> </div> <button id="hamburger" onclick="kub.toggleMenu()" data-auto-burger-exclude><div></div></button> </nav> <section class="header-hero filler"> </section> </header> <div class="container-fluid td-outer"> <div class="td-main"> <div class="row flex-md-nowrap"> <div class="col-12 col-md-3 col-xl-2 td-sidebar d-print-none"> <script> $(function() { $("#td-section-nav a").removeClass("active"); $("#td-section-nav #m-docs-tutorials-security-seccomp").addClass("active"); $("#td-section-nav #m-docs-tutorials-security-seccomp-li span").addClass("td-sidebar-nav-active-item"); $("#td-section-nav #m-docs-tutorials-security-seccomp").parents("li").addClass("active-path"); $("#td-section-nav li.active-path").addClass("show"); $("#td-section-nav li.active-path").children("input").prop('checked', true); $("#td-section-nav #m-docs-tutorials-security-seccomp-li").siblings("li").addClass("show"); $("#td-section-nav #m-docs-tutorials-security-seccomp-li").children("ul").children("li").addClass("show"); $("#td-sidebar-menu").toggleClass("d-none"); }); </script> <div id="td-sidebar-menu" class="td-sidebar__inner d-none"> <form class="td-sidebar__search d-flex align-items-center"> <input type="search" class="form-control td-search-input" name="q" placeholder=" Search" aria-label="Search" autocomplete="off" > <button class="btn btn-link td-sidebar__toggle d-md-none p-0 ml-3 fas fa-bars" type="button" data-toggle="collapse" data-target="#td-section-nav" aria-controls="td-docs-nav" aria-expanded="false" aria-label="Toggle section navigation"> </button> </form> <nav class="collapse td-sidebar-nav foldable-nav" id="td-section-nav"> <ul class="td-sidebar-nav__section pr-md-3 ul-0"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-li"> <ul class="ul-1"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-home-li"> <input type="checkbox" id="m-docs-home-check"/> <label for="m-docs-home-check"><a href="/docs/home/" title="Kubernetes Documentation" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-home"><span class="">Home</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-home-supported-doc-versions-li"> <input type="checkbox" id="m-docs-home-supported-doc-versions-check"/> <label for="m-docs-home-supported-doc-versions-check"><a href="/docs/home/supported-doc-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-home-supported-doc-versions"><span class="">Available Documentation Versions</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-setup-li"> <input type="checkbox" id="m-docs-setup-check"/> <label for="m-docs-setup-check"><a href="/docs/setup/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup"><span class="">Getting started</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-learning-environment-li"> <input type="checkbox" id="m-docs-setup-learning-environment-check"/> <label for="m-docs-setup-learning-environment-check"><a href="/docs/setup/learning-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup-learning-environment"><span class="">Learning environment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-setup-production-environment-li"> <input type="checkbox" id="m-docs-setup-production-environment-check"/> <label for="m-docs-setup-production-environment-check"><a href="/docs/setup/production-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup-production-environment"><span class="">Production environment</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-container-runtimes-li"> <input type="checkbox" id="m-docs-setup-production-environment-container-runtimes-check"/> <label for="m-docs-setup-production-environment-container-runtimes-check"><a href="/docs/setup/production-environment/container-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-container-runtimes"><span class="">Container Runtimes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-setup-production-environment-tools-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-check"/> <label for="m-docs-setup-production-environment-tools-check"><a href="/docs/setup/production-environment/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup-production-environment-tools"><span class="">Installing Kubernetes with deployment tools</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-setup-production-environment-tools-kubeadm-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-check"><a href="/docs/setup/production-environment/tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup-production-environment-tools-kubeadm"><span class="">Bootstrapping clusters with kubeadm</span></a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-install-kubeadm-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"><a href="/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-install-kubeadm"><span class="">Installing kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"><a href="/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm"><span class="">Troubleshooting kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"><a href="/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm"><span class="">Creating a cluster with kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-control-plane-flags-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"><a href="/docs/setup/production-environment/tools/kubeadm/control-plane-flags/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-control-plane-flags"><span class="">Customizing components with the kubeadm API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-ha-topology-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-ha-topology-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-ha-topology-check"><a href="/docs/setup/production-environment/tools/kubeadm/ha-topology/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-ha-topology"><span class="">Options for Highly Available Topology</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-high-availability-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-high-availability-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-high-availability-check"><a href="/docs/setup/production-environment/tools/kubeadm/high-availability/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-high-availability"><span class="">Creating Highly Available Clusters with kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"><a href="/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm"><span class="">Set up a High Availability etcd Cluster with kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-kubelet-integration-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"><a href="/docs/setup/production-environment/tools/kubeadm/kubelet-integration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-kubelet-integration"><span class="">Configuring each kubelet in your cluster using kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubeadm-dual-stack-support-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"/> <label for="m-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"><a href="/docs/setup/production-environment/tools/kubeadm/dual-stack-support/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubeadm-dual-stack-support"><span class="">Dual-stack support with kubeadm</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kops-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kops-check"/> <label for="m-docs-setup-production-environment-tools-kops-check"><a href="/docs/setup/production-environment/tools/kops/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kops"><span class="">Installing Kubernetes with kOps</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-tools-kubespray-li"> <input type="checkbox" id="m-docs-setup-production-environment-tools-kubespray-check"/> <label for="m-docs-setup-production-environment-tools-kubespray-check"><a href="/docs/setup/production-environment/tools/kubespray/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-tools-kubespray"><span class="">Installing Kubernetes with Kubespray</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-production-environment-turnkey-solutions-li"> <input type="checkbox" id="m-docs-setup-production-environment-turnkey-solutions-check"/> <label for="m-docs-setup-production-environment-turnkey-solutions-check"><a href="/docs/setup/production-environment/turnkey-solutions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-production-environment-turnkey-solutions"><span class="">Turnkey Cloud Solutions</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-setup-best-practices-li"> <input type="checkbox" id="m-docs-setup-best-practices-check"/> <label for="m-docs-setup-best-practices-check"><a href="/docs/setup/best-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-setup-best-practices"><span class="">Best practices</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-best-practices-cluster-large-li"> <input type="checkbox" id="m-docs-setup-best-practices-cluster-large-check"/> <label for="m-docs-setup-best-practices-cluster-large-check"><a href="/docs/setup/best-practices/cluster-large/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-best-practices-cluster-large"><span class="">Considerations for large clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-best-practices-multiple-zones-li"> <input type="checkbox" id="m-docs-setup-best-practices-multiple-zones-check"/> <label for="m-docs-setup-best-practices-multiple-zones-check"><a href="/docs/setup/best-practices/multiple-zones/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-best-practices-multiple-zones"><span class="">Running in multiple zones</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-best-practices-node-conformance-li"> <input type="checkbox" id="m-docs-setup-best-practices-node-conformance-check"/> <label for="m-docs-setup-best-practices-node-conformance-check"><a href="/docs/setup/best-practices/node-conformance/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-best-practices-node-conformance"><span class="">Validate node setup</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-best-practices-enforcing-pod-security-standards-li"> <input type="checkbox" id="m-docs-setup-best-practices-enforcing-pod-security-standards-check"/> <label for="m-docs-setup-best-practices-enforcing-pod-security-standards-check"><a href="/docs/setup/best-practices/enforcing-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-best-practices-enforcing-pod-security-standards"><span class="">Enforcing Pod Security Standards</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-setup-best-practices-certificates-li"> <input type="checkbox" id="m-docs-setup-best-practices-certificates-check"/> <label for="m-docs-setup-best-practices-certificates-check"><a href="/docs/setup/best-practices/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-setup-best-practices-certificates"><span class="">PKI certificates and requirements</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-li"> <input type="checkbox" id="m-docs-concepts-check"/> <label for="m-docs-concepts-check"><a href="/docs/concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts"><span class="">Concepts</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-overview-li"> <input type="checkbox" id="m-docs-concepts-overview-check"/> <label for="m-docs-concepts-overview-check"><a href="/docs/concepts/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-overview"><span class="">Overview</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-overview-working-with-objects-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-check"/> <label for="m-docs-concepts-overview-working-with-objects-check"><a href="/docs/concepts/overview/working-with-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-overview-working-with-objects"><span class="">Objects In Kubernetes</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-object-management-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-object-management-check"/> <label for="m-docs-concepts-overview-working-with-objects-object-management-check"><a href="/docs/concepts/overview/working-with-objects/object-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-object-management"><span class="">Kubernetes Object Management</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-names-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-names-check"/> <label for="m-docs-concepts-overview-working-with-objects-names-check"><a href="/docs/concepts/overview/working-with-objects/names/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-names"><span class="">Object Names and IDs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-labels-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-labels-check"/> <label for="m-docs-concepts-overview-working-with-objects-labels-check"><a href="/docs/concepts/overview/working-with-objects/labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-labels"><span class="">Labels and Selectors</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-namespaces-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-namespaces-check"/> <label for="m-docs-concepts-overview-working-with-objects-namespaces-check"><a href="/docs/concepts/overview/working-with-objects/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-namespaces"><span class="">Namespaces</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-annotations-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-annotations-check"/> <label for="m-docs-concepts-overview-working-with-objects-annotations-check"><a href="/docs/concepts/overview/working-with-objects/annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-annotations"><span class="">Annotations</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-field-selectors-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-field-selectors-check"/> <label for="m-docs-concepts-overview-working-with-objects-field-selectors-check"><a href="/docs/concepts/overview/working-with-objects/field-selectors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-field-selectors"><span class="">Field Selectors</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-finalizers-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-finalizers-check"/> <label for="m-docs-concepts-overview-working-with-objects-finalizers-check"><a href="/docs/concepts/overview/working-with-objects/finalizers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-finalizers"><span class="">Finalizers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-owners-dependents-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-owners-dependents-check"/> <label for="m-docs-concepts-overview-working-with-objects-owners-dependents-check"><a href="/docs/concepts/overview/working-with-objects/owners-dependents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-owners-dependents"><span class="">Owners and Dependents</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-working-with-objects-common-labels-li"> <input type="checkbox" id="m-docs-concepts-overview-working-with-objects-common-labels-check"/> <label for="m-docs-concepts-overview-working-with-objects-common-labels-check"><a href="/docs/concepts/overview/working-with-objects/common-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-working-with-objects-common-labels"><span class="">Recommended Labels</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-components-li"> <input type="checkbox" id="m-docs-concepts-overview-components-check"/> <label for="m-docs-concepts-overview-components-check"><a href="/docs/concepts/overview/components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-components"><span class="">Kubernetes Components</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-overview-kubernetes-api-li"> <input type="checkbox" id="m-docs-concepts-overview-kubernetes-api-check"/> <label for="m-docs-concepts-overview-kubernetes-api-check"><a href="/docs/concepts/overview/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-overview-kubernetes-api"><span class="">The Kubernetes API</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-architecture-li"> <input type="checkbox" id="m-docs-concepts-architecture-check"/> <label for="m-docs-concepts-architecture-check"><a href="/docs/concepts/architecture/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-architecture"><span class="">Cluster Architecture</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-nodes-li"> <input type="checkbox" id="m-docs-concepts-architecture-nodes-check"/> <label for="m-docs-concepts-architecture-nodes-check"><a href="/docs/concepts/architecture/nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-nodes"><span class="">Nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-control-plane-node-communication-li"> <input type="checkbox" id="m-docs-concepts-architecture-control-plane-node-communication-check"/> <label for="m-docs-concepts-architecture-control-plane-node-communication-check"><a href="/docs/concepts/architecture/control-plane-node-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-control-plane-node-communication"><span class="">Communication between Nodes and the Control Plane</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-controller-li"> <input type="checkbox" id="m-docs-concepts-architecture-controller-check"/> <label for="m-docs-concepts-architecture-controller-check"><a href="/docs/concepts/architecture/controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-controller"><span class="">Controllers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-leases-li"> <input type="checkbox" id="m-docs-concepts-architecture-leases-check"/> <label for="m-docs-concepts-architecture-leases-check"><a href="/docs/concepts/architecture/leases/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-leases"><span class="">Leases</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-cloud-controller-li"> <input type="checkbox" id="m-docs-concepts-architecture-cloud-controller-check"/> <label for="m-docs-concepts-architecture-cloud-controller-check"><a href="/docs/concepts/architecture/cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-cloud-controller"><span class="">Cloud Controller Manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-cgroups-li"> <input type="checkbox" id="m-docs-concepts-architecture-cgroups-check"/> <label for="m-docs-concepts-architecture-cgroups-check"><a href="/docs/concepts/architecture/cgroups/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-cgroups"><span class="">About cgroup v2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-cri-li"> <input type="checkbox" id="m-docs-concepts-architecture-cri-check"/> <label for="m-docs-concepts-architecture-cri-check"><a href="/docs/concepts/architecture/cri/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-cri"><span class="">Container Runtime Interface (CRI)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-architecture-garbage-collection-li"> <input type="checkbox" id="m-docs-concepts-architecture-garbage-collection-check"/> <label for="m-docs-concepts-architecture-garbage-collection-check"><a href="/docs/concepts/architecture/garbage-collection/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-architecture-garbage-collection"><span class="">Garbage Collection</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-containers-li"> <input type="checkbox" id="m-docs-concepts-containers-check"/> <label for="m-docs-concepts-containers-check"><a href="/docs/concepts/containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-containers"><span class="">Containers</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-containers-images-li"> <input type="checkbox" id="m-docs-concepts-containers-images-check"/> <label for="m-docs-concepts-containers-images-check"><a href="/docs/concepts/containers/images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-containers-images"><span class="">Images</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-containers-container-environment-li"> <input type="checkbox" id="m-docs-concepts-containers-container-environment-check"/> <label for="m-docs-concepts-containers-container-environment-check"><a href="/docs/concepts/containers/container-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-containers-container-environment"><span class="">Container Environment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-containers-runtime-class-li"> <input type="checkbox" id="m-docs-concepts-containers-runtime-class-check"/> <label for="m-docs-concepts-containers-runtime-class-check"><a href="/docs/concepts/containers/runtime-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-containers-runtime-class"><span class="">Runtime Class</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-containers-container-lifecycle-hooks-li"> <input type="checkbox" id="m-docs-concepts-containers-container-lifecycle-hooks-check"/> <label for="m-docs-concepts-containers-container-lifecycle-hooks-check"><a href="/docs/concepts/containers/container-lifecycle-hooks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-containers-container-lifecycle-hooks"><span class="">Container Lifecycle Hooks</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-workloads-li"> <input type="checkbox" id="m-docs-concepts-workloads-check"/> <label for="m-docs-concepts-workloads-check"><a href="/docs/concepts/workloads/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-workloads"><span class="">Workloads</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-workloads-pods-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-check"/> <label for="m-docs-concepts-workloads-pods-check"><a href="/docs/concepts/workloads/pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-workloads-pods"><span class="">Pods</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-pod-lifecycle-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-pod-lifecycle-check"/> <label for="m-docs-concepts-workloads-pods-pod-lifecycle-check"><a href="/docs/concepts/workloads/pods/pod-lifecycle/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-pod-lifecycle"><span class="">Pod Lifecycle</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-init-containers-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-init-containers-check"/> <label for="m-docs-concepts-workloads-pods-init-containers-check"><a href="/docs/concepts/workloads/pods/init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-init-containers"><span class="">Init Containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-disruptions-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-disruptions-check"/> <label for="m-docs-concepts-workloads-pods-disruptions-check"><a href="/docs/concepts/workloads/pods/disruptions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-disruptions"><span class="">Disruptions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-ephemeral-containers-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-ephemeral-containers-check"/> <label for="m-docs-concepts-workloads-pods-ephemeral-containers-check"><a href="/docs/concepts/workloads/pods/ephemeral-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-ephemeral-containers"><span class="">Ephemeral Containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-pod-qos-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-pod-qos-check"/> <label for="m-docs-concepts-workloads-pods-pod-qos-check"><a href="/docs/concepts/workloads/pods/pod-qos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-pod-qos"><span class="">Pod Quality of Service Classes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-user-namespaces-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-user-namespaces-check"/> <label for="m-docs-concepts-workloads-pods-user-namespaces-check"><a href="/docs/concepts/workloads/pods/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-user-namespaces"><span class="">User Namespaces</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-downward-api-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-downward-api-check"/> <label for="m-docs-concepts-workloads-pods-downward-api-check"><a href="/docs/concepts/workloads/pods/downward-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-downward-api"><span class="">Downward API</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-workloads-controllers-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-check"/> <label for="m-docs-concepts-workloads-controllers-check"><a href="/docs/concepts/workloads/controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-workloads-controllers"><span class="">Workload Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-deployment-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-deployment-check"/> <label for="m-docs-concepts-workloads-controllers-deployment-check"><a href="/docs/concepts/workloads/controllers/deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-deployment"><span class="">Deployments</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-replicaset-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-replicaset-check"/> <label for="m-docs-concepts-workloads-controllers-replicaset-check"><a href="/docs/concepts/workloads/controllers/replicaset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-replicaset"><span class="">ReplicaSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-statefulset-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-statefulset-check"/> <label for="m-docs-concepts-workloads-controllers-statefulset-check"><a href="/docs/concepts/workloads/controllers/statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-statefulset"><span class="">StatefulSets</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-daemonset-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-daemonset-check"/> <label for="m-docs-concepts-workloads-controllers-daemonset-check"><a href="/docs/concepts/workloads/controllers/daemonset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-daemonset"><span class="">DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-job-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-job-check"/> <label for="m-docs-concepts-workloads-controllers-job-check"><a href="/docs/concepts/workloads/controllers/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-job"><span class="">Jobs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-ttlafterfinished-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-ttlafterfinished-check"/> <label for="m-docs-concepts-workloads-controllers-ttlafterfinished-check"><a href="/docs/concepts/workloads/controllers/ttlafterfinished/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-ttlafterfinished"><span class="">Automatic Cleanup for Finished Jobs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-cron-jobs-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-cron-jobs-check"/> <label for="m-docs-concepts-workloads-controllers-cron-jobs-check"><a href="/docs/concepts/workloads/controllers/cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-cron-jobs"><span class="">CronJob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-controllers-replicationcontroller-li"> <input type="checkbox" id="m-docs-concepts-workloads-controllers-replicationcontroller-check"/> <label for="m-docs-concepts-workloads-controllers-replicationcontroller-check"><a href="/docs/concepts/workloads/controllers/replicationcontroller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-controllers-replicationcontroller"><span class="">ReplicationController</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-services-networking-li"> <input type="checkbox" id="m-docs-concepts-services-networking-check"/> <label for="m-docs-concepts-services-networking-check"><a href="/docs/concepts/services-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-services-networking"><span class="">Services, Load Balancing, and Networking</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-service-li"> <input type="checkbox" id="m-docs-concepts-services-networking-service-check"/> <label for="m-docs-concepts-services-networking-service-check"><a href="/docs/concepts/services-networking/service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-service"><span class="">Service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-ingress-li"> <input type="checkbox" id="m-docs-concepts-services-networking-ingress-check"/> <label for="m-docs-concepts-services-networking-ingress-check"><a href="/docs/concepts/services-networking/ingress/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-ingress"><span class="">Ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-ingress-controllers-li"> <input type="checkbox" id="m-docs-concepts-services-networking-ingress-controllers-check"/> <label for="m-docs-concepts-services-networking-ingress-controllers-check"><a href="/docs/concepts/services-networking/ingress-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-ingress-controllers"><span class="">Ingress Controllers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-endpoint-slices-li"> <input type="checkbox" id="m-docs-concepts-services-networking-endpoint-slices-check"/> <label for="m-docs-concepts-services-networking-endpoint-slices-check"><a href="/docs/concepts/services-networking/endpoint-slices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-endpoint-slices"><span class="">EndpointSlices</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-network-policies-li"> <input type="checkbox" id="m-docs-concepts-services-networking-network-policies-check"/> <label for="m-docs-concepts-services-networking-network-policies-check"><a href="/docs/concepts/services-networking/network-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-network-policies"><span class="">Network Policies</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-dns-pod-service-li"> <input type="checkbox" id="m-docs-concepts-services-networking-dns-pod-service-check"/> <label for="m-docs-concepts-services-networking-dns-pod-service-check"><a href="/docs/concepts/services-networking/dns-pod-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-dns-pod-service"><span class="">DNS for Services and Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-dual-stack-li"> <input type="checkbox" id="m-docs-concepts-services-networking-dual-stack-check"/> <label for="m-docs-concepts-services-networking-dual-stack-check"><a href="/docs/concepts/services-networking/dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-dual-stack"><span class="">IPv4/IPv6 dual-stack</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-topology-aware-routing-li"> <input type="checkbox" id="m-docs-concepts-services-networking-topology-aware-routing-check"/> <label for="m-docs-concepts-services-networking-topology-aware-routing-check"><a href="/docs/concepts/services-networking/topology-aware-routing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-topology-aware-routing"><span class="">Topology Aware Routing</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-windows-networking-li"> <input type="checkbox" id="m-docs-concepts-services-networking-windows-networking-check"/> <label for="m-docs-concepts-services-networking-windows-networking-check"><a href="/docs/concepts/services-networking/windows-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-windows-networking"><span class="">Networking on Windows</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-cluster-ip-allocation-li"> <input type="checkbox" id="m-docs-concepts-services-networking-cluster-ip-allocation-check"/> <label for="m-docs-concepts-services-networking-cluster-ip-allocation-check"><a href="/docs/concepts/services-networking/cluster-ip-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-cluster-ip-allocation"><span class="">Service ClusterIP allocation</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-service-traffic-policy-li"> <input type="checkbox" id="m-docs-concepts-services-networking-service-traffic-policy-check"/> <label for="m-docs-concepts-services-networking-service-traffic-policy-check"><a href="/docs/concepts/services-networking/service-traffic-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-service-traffic-policy"><span class="">Service Internal Traffic Policy</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-storage-li"> <input type="checkbox" id="m-docs-concepts-storage-check"/> <label for="m-docs-concepts-storage-check"><a href="/docs/concepts/storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-storage"><span class="">Storage</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volumes-li"> <input type="checkbox" id="m-docs-concepts-storage-volumes-check"/> <label for="m-docs-concepts-storage-volumes-check"><a href="/docs/concepts/storage/volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volumes"><span class="">Volumes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-persistent-volumes-li"> <input type="checkbox" id="m-docs-concepts-storage-persistent-volumes-check"/> <label for="m-docs-concepts-storage-persistent-volumes-check"><a href="/docs/concepts/storage/persistent-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-persistent-volumes"><span class="">Persistent Volumes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-projected-volumes-li"> <input type="checkbox" id="m-docs-concepts-storage-projected-volumes-check"/> <label for="m-docs-concepts-storage-projected-volumes-check"><a href="/docs/concepts/storage/projected-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-projected-volumes"><span class="">Projected Volumes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-ephemeral-volumes-li"> <input type="checkbox" id="m-docs-concepts-storage-ephemeral-volumes-check"/> <label for="m-docs-concepts-storage-ephemeral-volumes-check"><a href="/docs/concepts/storage/ephemeral-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-ephemeral-volumes"><span class="">Ephemeral Volumes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-storage-classes-li"> <input type="checkbox" id="m-docs-concepts-storage-storage-classes-check"/> <label for="m-docs-concepts-storage-storage-classes-check"><a href="/docs/concepts/storage/storage-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-storage-classes"><span class="">Storage Classes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-dynamic-provisioning-li"> <input type="checkbox" id="m-docs-concepts-storage-dynamic-provisioning-check"/> <label for="m-docs-concepts-storage-dynamic-provisioning-check"><a href="/docs/concepts/storage/dynamic-provisioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-dynamic-provisioning"><span class="">Dynamic Volume Provisioning</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volume-snapshots-li"> <input type="checkbox" id="m-docs-concepts-storage-volume-snapshots-check"/> <label for="m-docs-concepts-storage-volume-snapshots-check"><a href="/docs/concepts/storage/volume-snapshots/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volume-snapshots"><span class="">Volume Snapshots</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volume-snapshot-classes-li"> <input type="checkbox" id="m-docs-concepts-storage-volume-snapshot-classes-check"/> <label for="m-docs-concepts-storage-volume-snapshot-classes-check"><a href="/docs/concepts/storage/volume-snapshot-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volume-snapshot-classes"><span class="">Volume Snapshot Classes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volume-pvc-datasource-li"> <input type="checkbox" id="m-docs-concepts-storage-volume-pvc-datasource-check"/> <label for="m-docs-concepts-storage-volume-pvc-datasource-check"><a href="/docs/concepts/storage/volume-pvc-datasource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volume-pvc-datasource"><span class="">CSI Volume Cloning</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-storage-capacity-li"> <input type="checkbox" id="m-docs-concepts-storage-storage-capacity-check"/> <label for="m-docs-concepts-storage-storage-capacity-check"><a href="/docs/concepts/storage/storage-capacity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-storage-capacity"><span class="">Storage Capacity</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-storage-limits-li"> <input type="checkbox" id="m-docs-concepts-storage-storage-limits-check"/> <label for="m-docs-concepts-storage-storage-limits-check"><a href="/docs/concepts/storage/storage-limits/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-storage-limits"><span class="">Node-specific Volume Limits</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-volume-health-monitoring-li"> <input type="checkbox" id="m-docs-concepts-storage-volume-health-monitoring-check"/> <label for="m-docs-concepts-storage-volume-health-monitoring-check"><a href="/docs/concepts/storage/volume-health-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-volume-health-monitoring"><span class="">Volume Health Monitoring</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-storage-windows-storage-li"> <input type="checkbox" id="m-docs-concepts-storage-windows-storage-check"/> <label for="m-docs-concepts-storage-windows-storage-check"><a href="/docs/concepts/storage/windows-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-storage-windows-storage"><span class="">Windows Storage</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-configuration-li"> <input type="checkbox" id="m-docs-concepts-configuration-check"/> <label for="m-docs-concepts-configuration-check"><a href="/docs/concepts/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-configuration"><span class="">Configuration</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-overview-li"> <input type="checkbox" id="m-docs-concepts-configuration-overview-check"/> <label for="m-docs-concepts-configuration-overview-check"><a href="/docs/concepts/configuration/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-overview"><span class="">Configuration Best Practices</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-configmap-li"> <input type="checkbox" id="m-docs-concepts-configuration-configmap-check"/> <label for="m-docs-concepts-configuration-configmap-check"><a href="/docs/concepts/configuration/configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-configmap"><span class="">ConfigMaps</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-secret-li"> <input type="checkbox" id="m-docs-concepts-configuration-secret-check"/> <label for="m-docs-concepts-configuration-secret-check"><a href="/docs/concepts/configuration/secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-secret"><span class="">Secrets</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-manage-resources-containers-li"> <input type="checkbox" id="m-docs-concepts-configuration-manage-resources-containers-check"/> <label for="m-docs-concepts-configuration-manage-resources-containers-check"><a href="/docs/concepts/configuration/manage-resources-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-manage-resources-containers"><span class="">Resource Management for Pods and Containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-organize-cluster-access-kubeconfig-li"> <input type="checkbox" id="m-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"/> <label for="m-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"><a href="/docs/concepts/configuration/organize-cluster-access-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-organize-cluster-access-kubeconfig"><span class="">Organizing Cluster Access Using kubeconfig Files</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-configuration-windows-resource-management-li"> <input type="checkbox" id="m-docs-concepts-configuration-windows-resource-management-check"/> <label for="m-docs-concepts-configuration-windows-resource-management-check"><a href="/docs/concepts/configuration/windows-resource-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-configuration-windows-resource-management"><span class="">Resource Management for Windows nodes</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-security-li"> <input type="checkbox" id="m-docs-concepts-security-check"/> <label for="m-docs-concepts-security-check"><a href="/docs/concepts/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-security"><span class="">Security</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-overview-li"> <input type="checkbox" id="m-docs-concepts-security-overview-check"/> <label for="m-docs-concepts-security-overview-check"><a href="/docs/concepts/security/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-overview"><span class="">Overview of Cloud Native Security</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-pod-security-standards-li"> <input type="checkbox" id="m-docs-concepts-security-pod-security-standards-check"/> <label for="m-docs-concepts-security-pod-security-standards-check"><a href="/docs/concepts/security/pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-pod-security-standards"><span class="">Pod Security Standards</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-service-accounts-li"> <input type="checkbox" id="m-docs-concepts-security-service-accounts-check"/> <label for="m-docs-concepts-security-service-accounts-check"><a href="/docs/concepts/security/service-accounts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-service-accounts"><span class="">Service Accounts</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-pod-security-admission-li"> <input type="checkbox" id="m-docs-concepts-security-pod-security-admission-check"/> <label for="m-docs-concepts-security-pod-security-admission-check"><a href="/docs/concepts/security/pod-security-admission/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-pod-security-admission"><span class="">Pod Security Admission</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-pod-security-policy-li"> <input type="checkbox" id="m-docs-concepts-security-pod-security-policy-check"/> <label for="m-docs-concepts-security-pod-security-policy-check"><a href="/docs/concepts/security/pod-security-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-pod-security-policy"><span class="">Pod Security Policies</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-windows-security-li"> <input type="checkbox" id="m-docs-concepts-security-windows-security-check"/> <label for="m-docs-concepts-security-windows-security-check"><a href="/docs/concepts/security/windows-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-windows-security"><span class="">Security For Windows Nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-controlling-access-li"> <input type="checkbox" id="m-docs-concepts-security-controlling-access-check"/> <label for="m-docs-concepts-security-controlling-access-check"><a href="/docs/concepts/security/controlling-access/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-controlling-access"><span class="">Controlling Access to the Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-rbac-good-practices-li"> <input type="checkbox" id="m-docs-concepts-security-rbac-good-practices-check"/> <label for="m-docs-concepts-security-rbac-good-practices-check"><a href="/docs/concepts/security/rbac-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-rbac-good-practices"><span class="">Role Based Access Control Good Practices</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-secrets-good-practices-li"> <input type="checkbox" id="m-docs-concepts-security-secrets-good-practices-check"/> <label for="m-docs-concepts-security-secrets-good-practices-check"><a href="/docs/concepts/security/secrets-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-secrets-good-practices"><span class="">Good practices for Kubernetes Secrets</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-multi-tenancy-li"> <input type="checkbox" id="m-docs-concepts-security-multi-tenancy-check"/> <label for="m-docs-concepts-security-multi-tenancy-check"><a href="/docs/concepts/security/multi-tenancy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-multi-tenancy"><span class="">Multi-tenancy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-api-server-bypass-risks-li"> <input type="checkbox" id="m-docs-concepts-security-api-server-bypass-risks-check"/> <label for="m-docs-concepts-security-api-server-bypass-risks-check"><a href="/docs/concepts/security/api-server-bypass-risks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-api-server-bypass-risks"><span class="">Kubernetes API Server Bypass Risks</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-security-checklist-li"> <input type="checkbox" id="m-docs-concepts-security-security-checklist-check"/> <label for="m-docs-concepts-security-security-checklist-check"><a href="/docs/concepts/security/security-checklist/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-security-checklist"><span class="">Security Checklist</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-policy-li"> <input type="checkbox" id="m-docs-concepts-policy-check"/> <label for="m-docs-concepts-policy-check"><a href="/docs/concepts/policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-policy"><span class="">Policies</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-policy-limit-range-li"> <input type="checkbox" id="m-docs-concepts-policy-limit-range-check"/> <label for="m-docs-concepts-policy-limit-range-check"><a href="/docs/concepts/policy/limit-range/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-policy-limit-range"><span class="">Limit Ranges</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-policy-resource-quotas-li"> <input type="checkbox" id="m-docs-concepts-policy-resource-quotas-check"/> <label for="m-docs-concepts-policy-resource-quotas-check"><a href="/docs/concepts/policy/resource-quotas/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-policy-resource-quotas"><span class="">Resource Quotas</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-policy-pid-limiting-li"> <input type="checkbox" id="m-docs-concepts-policy-pid-limiting-check"/> <label for="m-docs-concepts-policy-pid-limiting-check"><a href="/docs/concepts/policy/pid-limiting/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-policy-pid-limiting"><span class="">Process ID Limits And Reservations</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-policy-node-resource-managers-li"> <input type="checkbox" id="m-docs-concepts-policy-node-resource-managers-check"/> <label for="m-docs-concepts-policy-node-resource-managers-check"><a href="/docs/concepts/policy/node-resource-managers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-policy-node-resource-managers"><span class="">Node Resource Managers</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-scheduling-eviction-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-check"/> <label for="m-docs-concepts-scheduling-eviction-check"><a href="/docs/concepts/scheduling-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-scheduling-eviction"><span class="">Scheduling, Preemption and Eviction</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-kube-scheduler-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-kube-scheduler-check"/> <label for="m-docs-concepts-scheduling-eviction-kube-scheduler-check"><a href="/docs/concepts/scheduling-eviction/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-kube-scheduler"><span class="">Kubernetes Scheduler</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-assign-pod-node-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-assign-pod-node-check"/> <label for="m-docs-concepts-scheduling-eviction-assign-pod-node-check"><a href="/docs/concepts/scheduling-eviction/assign-pod-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-assign-pod-node"><span class="">Assigning Pods to Nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-pod-overhead-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-pod-overhead-check"/> <label for="m-docs-concepts-scheduling-eviction-pod-overhead-check"><a href="/docs/concepts/scheduling-eviction/pod-overhead/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-pod-overhead"><span class="">Pod Overhead</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-pod-scheduling-readiness-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"/> <label for="m-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"><a href="/docs/concepts/scheduling-eviction/pod-scheduling-readiness/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-pod-scheduling-readiness"><span class="">Pod Scheduling Readiness</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-topology-spread-constraints-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-topology-spread-constraints-check"/> <label for="m-docs-concepts-scheduling-eviction-topology-spread-constraints-check"><a href="/docs/concepts/scheduling-eviction/topology-spread-constraints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-topology-spread-constraints"><span class="">Pod Topology Spread Constraints</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-taint-and-toleration-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-taint-and-toleration-check"/> <label for="m-docs-concepts-scheduling-eviction-taint-and-toleration-check"><a href="/docs/concepts/scheduling-eviction/taint-and-toleration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-taint-and-toleration"><span class="">Taints and Tolerations</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-scheduling-framework-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-scheduling-framework-check"/> <label for="m-docs-concepts-scheduling-eviction-scheduling-framework-check"><a href="/docs/concepts/scheduling-eviction/scheduling-framework/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-scheduling-framework"><span class="">Scheduling Framework</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-dynamic-resource-allocation-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"/> <label for="m-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"><a href="/docs/concepts/scheduling-eviction/dynamic-resource-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-dynamic-resource-allocation"><span class="">Dynamic Resource Allocation</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-scheduler-perf-tuning-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"/> <label for="m-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"><a href="/docs/concepts/scheduling-eviction/scheduler-perf-tuning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-scheduler-perf-tuning"><span class="">Scheduler Performance Tuning</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-resource-bin-packing-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-resource-bin-packing-check"/> <label for="m-docs-concepts-scheduling-eviction-resource-bin-packing-check"><a href="/docs/concepts/scheduling-eviction/resource-bin-packing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-resource-bin-packing"><span class="">Resource Bin Packing</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-pod-priority-preemption-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-pod-priority-preemption-check"/> <label for="m-docs-concepts-scheduling-eviction-pod-priority-preemption-check"><a href="/docs/concepts/scheduling-eviction/pod-priority-preemption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-pod-priority-preemption"><span class="">Pod Priority and Preemption</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-node-pressure-eviction-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-node-pressure-eviction-check"/> <label for="m-docs-concepts-scheduling-eviction-node-pressure-eviction-check"><a href="/docs/concepts/scheduling-eviction/node-pressure-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-node-pressure-eviction"><span class="">Node-pressure Eviction</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-scheduling-eviction-api-eviction-li"> <input type="checkbox" id="m-docs-concepts-scheduling-eviction-api-eviction-check"/> <label for="m-docs-concepts-scheduling-eviction-api-eviction-check"><a href="/docs/concepts/scheduling-eviction/api-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-scheduling-eviction-api-eviction"><span class="">API-initiated Eviction</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-cluster-administration-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-check"/> <label for="m-docs-concepts-cluster-administration-check"><a href="/docs/concepts/cluster-administration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-cluster-administration"><span class="">Cluster Administration</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-certificates-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-certificates-check"/> <label for="m-docs-concepts-cluster-administration-certificates-check"><a href="/docs/concepts/cluster-administration/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-certificates"><span class="">Certificates</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-manage-deployment-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-manage-deployment-check"/> <label for="m-docs-concepts-cluster-administration-manage-deployment-check"><a href="/docs/concepts/cluster-administration/manage-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-manage-deployment"><span class="">Managing Resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-networking-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-networking-check"/> <label for="m-docs-concepts-cluster-administration-networking-check"><a href="/docs/concepts/cluster-administration/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-networking"><span class="">Cluster Networking</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-logging-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-logging-check"/> <label for="m-docs-concepts-cluster-administration-logging-check"><a href="/docs/concepts/cluster-administration/logging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-logging"><span class="">Logging Architecture</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-system-metrics-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-system-metrics-check"/> <label for="m-docs-concepts-cluster-administration-system-metrics-check"><a href="/docs/concepts/cluster-administration/system-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-system-metrics"><span class="">Metrics For Kubernetes System Components</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-system-logs-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-system-logs-check"/> <label for="m-docs-concepts-cluster-administration-system-logs-check"><a href="/docs/concepts/cluster-administration/system-logs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-system-logs"><span class="">System Logs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-system-traces-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-system-traces-check"/> <label for="m-docs-concepts-cluster-administration-system-traces-check"><a href="/docs/concepts/cluster-administration/system-traces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-system-traces"><span class="">Traces For Kubernetes System Components</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-proxies-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-proxies-check"/> <label for="m-docs-concepts-cluster-administration-proxies-check"><a href="/docs/concepts/cluster-administration/proxies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-proxies"><span class="">Proxies in Kubernetes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-flow-control-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-flow-control-check"/> <label for="m-docs-concepts-cluster-administration-flow-control-check"><a href="/docs/concepts/cluster-administration/flow-control/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-flow-control"><span class="">API Priority and Fairness</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-cluster-administration-addons-li"> <input type="checkbox" id="m-docs-concepts-cluster-administration-addons-check"/> <label for="m-docs-concepts-cluster-administration-addons-check"><a href="/docs/concepts/cluster-administration/addons/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-cluster-administration-addons"><span class="">Installing Addons</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-windows-li"> <input type="checkbox" id="m-docs-concepts-windows-check"/> <label for="m-docs-concepts-windows-check"><a href="/docs/concepts/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-windows"><span class="">Windows in Kubernetes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-windows-intro-li"> <input type="checkbox" id="m-docs-concepts-windows-intro-check"/> <label for="m-docs-concepts-windows-intro-check"><a href="/docs/concepts/windows/intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-windows-intro"><span class="">Windows containers in Kubernetes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-windows-user-guide-li"> <input type="checkbox" id="m-docs-concepts-windows-user-guide-check"/> <label for="m-docs-concepts-windows-user-guide-check"><a href="/docs/concepts/windows/user-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-windows-user-guide"><span class="">Guide for Running Windows Containers in Kubernetes</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-extend-kubernetes-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-check"/> <label for="m-docs-concepts-extend-kubernetes-check"><a href="/docs/concepts/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-extend-kubernetes"><span class="">Extending Kubernetes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-extend-kubernetes-compute-storage-net-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-compute-storage-net-check"/> <label for="m-docs-concepts-extend-kubernetes-compute-storage-net-check"><a href="/docs/concepts/extend-kubernetes/compute-storage-net/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-extend-kubernetes-compute-storage-net"><span class="">Compute, Storage, and Networking Extensions</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"/> <label for="m-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"><a href="/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins"><span class="">Network Plugins</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"/> <label for="m-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"><a href="/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins"><span class="">Device Plugins</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-concepts-extend-kubernetes-api-extension-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-api-extension-check"/> <label for="m-docs-concepts-extend-kubernetes-api-extension-check"><a href="/docs/concepts/extend-kubernetes/api-extension/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-concepts-extend-kubernetes-api-extension"><span class="">Extending the Kubernetes API</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-extend-kubernetes-api-extension-custom-resources-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"/> <label for="m-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"><a href="/docs/concepts/extend-kubernetes/api-extension/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-extend-kubernetes-api-extension-custom-resources"><span class="">Custom Resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"/> <label for="m-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"><a href="/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation"><span class="">Kubernetes API Aggregation Layer</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-extend-kubernetes-operator-li"> <input type="checkbox" id="m-docs-concepts-extend-kubernetes-operator-check"/> <label for="m-docs-concepts-extend-kubernetes-operator-check"><a href="/docs/concepts/extend-kubernetes/operator/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-extend-kubernetes-operator"><span class="">Operator pattern</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-li"> <input type="checkbox" id="m-docs-tasks-check"/> <label for="m-docs-tasks-check"><a href="/docs/tasks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks"><span class="">Tasks</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-tools-li"> <input type="checkbox" id="m-docs-tasks-tools-check"/> <label for="m-docs-tasks-tools-check"><a href="/docs/tasks/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-tools"><span class="">Install Tools</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tools-install-kubectl-linux-li"> <input type="checkbox" id="m-docs-tasks-tools-install-kubectl-linux-check"/> <label for="m-docs-tasks-tools-install-kubectl-linux-check"><a href="/docs/tasks/tools/install-kubectl-linux/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tools-install-kubectl-linux"><span class="">Install and Set Up kubectl on Linux</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tools-install-kubectl-macos-li"> <input type="checkbox" id="m-docs-tasks-tools-install-kubectl-macos-check"/> <label for="m-docs-tasks-tools-install-kubectl-macos-check"><a href="/docs/tasks/tools/install-kubectl-macos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tools-install-kubectl-macos"><span class="">Install and Set Up kubectl on macOS</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tools-install-kubectl-windows-li"> <input type="checkbox" id="m-docs-tasks-tools-install-kubectl-windows-check"/> <label for="m-docs-tasks-tools-install-kubectl-windows-check"><a href="/docs/tasks/tools/install-kubectl-windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tools-install-kubectl-windows"><span class="">Install and Set Up kubectl on Windows</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-administer-cluster-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-check"/> <label for="m-docs-tasks-administer-cluster-check"><a href="/docs/tasks/administer-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-administer-cluster"><span class="">Administer a Cluster</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-administer-cluster-kubeadm-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-check"><a href="/docs/tasks/administer-cluster/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-administer-cluster-kubeadm"><span class="">Administration with kubeadm</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"><a href="/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-certs"><span class="">Certificate Management with kubeadm</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"><a href="/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver"><span class="">Configuring a cgroup driver</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"><a href="/docs/tasks/administer-cluster/kubeadm/kubeadm-reconfigure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure"><span class="">Reconfiguring a kubeadm cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"><a href="/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade"><span class="">Upgrading kubeadm clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"><a href="/docs/tasks/administer-cluster/kubeadm/upgrading-linux-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes"><span class="">Upgrading Linux nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"><a href="/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes"><span class="">Upgrading Windows nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubeadm-change-package-repository-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"/> <label for="m-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"><a href="/docs/tasks/administer-cluster/kubeadm/change-package-repository/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubeadm-change-package-repository"><span class="">Changing The Kubernetes Package Repository</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-administer-cluster-migrating-from-dockershim"><span class="">Migrating from dockershim</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/change-runtime-containerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd"><span class="">Changing the Container Runtime on a Node from Docker Engine to containerd</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/migrate-dockershim-dockerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd"><span class="">Migrate Docker Engine nodes from dockershim to cri-dockerd</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/find-out-runtime-you-use/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use"><span class="">Find Out What Container Runtime is Used on a Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/troubleshooting-cni-plugin-related-errors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors"><span class="">Troubleshooting CNI plugin-related errors</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-removal-affects-you/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you"><span class="">Check whether dockershim removal affects you</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"/> <label for="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"><a href="/docs/tasks/administer-cluster/migrating-from-dockershim/migrating-telemetry-and-security-agents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents"><span class="">Migrating telemetry and security agents from dockershim</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-certificates-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-certificates-check"/> <label for="m-docs-tasks-administer-cluster-certificates-check"><a href="/docs/tasks/administer-cluster/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-certificates"><span class="">Generate Certificates Manually</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-administer-cluster-manage-resources-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-check"><a href="/docs/tasks/administer-cluster/manage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-administer-cluster-manage-resources"><span class="">Manage Memory, CPU, and API Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-memory-default-namespace"><span class="">Configure Default Memory Requests and Limits for a Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace"><span class="">Configure Default CPU Requests and Limits for a Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace"><span class="">Configure Minimum and Maximum Memory Constraints for a Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace"><span class="">Configure Minimum and Maximum CPU Constraints for a Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace"><span class="">Configure Memory and CPU Quotas for a Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"/> <label for="m-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"><a href="/docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace"><span class="">Configure a Pod Quota for a Namespace</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-administer-cluster-network-policy-provider-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-administer-cluster-network-policy-provider"><span class="">Install a Network Policy Provider</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy"><span class="">Use Antrea for NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy"><span class="">Use Calico for NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy"><span class="">Use Cilium for NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/kube-router-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy"><span class="">Use Kube-router for NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy"><span class="">Romana for NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"><a href="/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy"><span class="">Weave Net for NetworkPolicy</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-access-cluster-api-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-access-cluster-api-check"/> <label for="m-docs-tasks-administer-cluster-access-cluster-api-check"><a href="/docs/tasks/administer-cluster/access-cluster-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-access-cluster-api"><span class="">Access Clusters Using the Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-extended-resource-node-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-extended-resource-node-check"/> <label for="m-docs-tasks-administer-cluster-extended-resource-node-check"><a href="/docs/tasks/administer-cluster/extended-resource-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-extended-resource-node"><span class="">Advertise Extended Resources for a Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-dns-horizontal-autoscaling-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"/> <label for="m-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"><a href="/docs/tasks/administer-cluster/dns-horizontal-autoscaling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-dns-horizontal-autoscaling"><span class="">Autoscale the DNS Service in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-change-default-storage-class-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-change-default-storage-class-check"/> <label for="m-docs-tasks-administer-cluster-change-default-storage-class-check"><a href="/docs/tasks/administer-cluster/change-default-storage-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-change-default-storage-class"><span class="">Change the default StorageClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-switch-to-evented-pleg-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-switch-to-evented-pleg-check"/> <label for="m-docs-tasks-administer-cluster-switch-to-evented-pleg-check"><a href="/docs/tasks/administer-cluster/switch-to-evented-pleg/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-switch-to-evented-pleg"><span class="">Switching from Polling to CRI Event-based Updates to Container Status</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-change-pv-reclaim-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"/> <label for="m-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"><a href="/docs/tasks/administer-cluster/change-pv-reclaim-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-change-pv-reclaim-policy"><span class="">Change the Reclaim Policy of a PersistentVolume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-running-cloud-controller-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-running-cloud-controller-check"/> <label for="m-docs-tasks-administer-cluster-running-cloud-controller-check"><a href="/docs/tasks/administer-cluster/running-cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-running-cloud-controller"><span class="">Cloud Controller Manager Administration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubelet-credential-provider-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubelet-credential-provider-check"/> <label for="m-docs-tasks-administer-cluster-kubelet-credential-provider-check"><a href="/docs/tasks/administer-cluster/kubelet-credential-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubelet-credential-provider"><span class="">Configure a kubelet image credential provider</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-quota-api-object-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-quota-api-object-check"/> <label for="m-docs-tasks-administer-cluster-quota-api-object-check"><a href="/docs/tasks/administer-cluster/quota-api-object/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-quota-api-object"><span class="">Configure Quotas for API Objects</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-cpu-management-policies-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-cpu-management-policies-check"/> <label for="m-docs-tasks-administer-cluster-cpu-management-policies-check"><a href="/docs/tasks/administer-cluster/cpu-management-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-cpu-management-policies"><span class="">Control CPU Management Policies on the Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-topology-manager-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-topology-manager-check"/> <label for="m-docs-tasks-administer-cluster-topology-manager-check"><a href="/docs/tasks/administer-cluster/topology-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-topology-manager"><span class="">Control Topology Management Policies on a node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-dns-custom-nameservers-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-dns-custom-nameservers-check"/> <label for="m-docs-tasks-administer-cluster-dns-custom-nameservers-check"><a href="/docs/tasks/administer-cluster/dns-custom-nameservers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-dns-custom-nameservers"><span class="">Customizing DNS Service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-dns-debugging-resolution-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-dns-debugging-resolution-check"/> <label for="m-docs-tasks-administer-cluster-dns-debugging-resolution-check"><a href="/docs/tasks/administer-cluster/dns-debugging-resolution/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-dns-debugging-resolution"><span class="">Debugging DNS Resolution</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-declare-network-policy-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-declare-network-policy-check"/> <label for="m-docs-tasks-administer-cluster-declare-network-policy-check"><a href="/docs/tasks/administer-cluster/declare-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-declare-network-policy"><span class="">Declare Network Policy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-developing-cloud-controller-manager-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"/> <label for="m-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"><a href="/docs/tasks/administer-cluster/developing-cloud-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-developing-cloud-controller-manager"><span class="">Developing Cloud Controller Manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-enable-disable-api-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-enable-disable-api-check"/> <label for="m-docs-tasks-administer-cluster-enable-disable-api-check"><a href="/docs/tasks/administer-cluster/enable-disable-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-enable-disable-api"><span class="">Enable Or Disable A Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-encrypt-data-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-encrypt-data-check"/> <label for="m-docs-tasks-administer-cluster-encrypt-data-check"><a href="/docs/tasks/administer-cluster/encrypt-data/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-encrypt-data"><span class="">Encrypting Confidential Data at Rest</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"/> <label for="m-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"><a href="/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods"><span class="">Guaranteed Scheduling For Critical Add-On Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-ip-masq-agent-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-ip-masq-agent-check"/> <label for="m-docs-tasks-administer-cluster-ip-masq-agent-check"><a href="/docs/tasks/administer-cluster/ip-masq-agent/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-ip-masq-agent"><span class="">IP Masquerade Agent User Guide</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-limit-storage-consumption-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-limit-storage-consumption-check"/> <label for="m-docs-tasks-administer-cluster-limit-storage-consumption-check"><a href="/docs/tasks/administer-cluster/limit-storage-consumption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-limit-storage-consumption"><span class="">Limit Storage Consumption</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-controller-manager-leader-migration-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-controller-manager-leader-migration-check"/> <label for="m-docs-tasks-administer-cluster-controller-manager-leader-migration-check"><a href="/docs/tasks/administer-cluster/controller-manager-leader-migration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-controller-manager-leader-migration"><span class="">Migrate Replicated Control Plane To Use Cloud Controller Manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-namespaces-walkthrough-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-namespaces-walkthrough-check"/> <label for="m-docs-tasks-administer-cluster-namespaces-walkthrough-check"><a href="/docs/tasks/administer-cluster/namespaces-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-namespaces-walkthrough"><span class="">Namespaces Walkthrough</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-configure-upgrade-etcd-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-configure-upgrade-etcd-check"/> <label for="m-docs-tasks-administer-cluster-configure-upgrade-etcd-check"><a href="/docs/tasks/administer-cluster/configure-upgrade-etcd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-configure-upgrade-etcd"><span class="">Operating etcd clusters for Kubernetes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-reserve-compute-resources-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-reserve-compute-resources-check"/> <label for="m-docs-tasks-administer-cluster-reserve-compute-resources-check"><a href="/docs/tasks/administer-cluster/reserve-compute-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-reserve-compute-resources"><span class="">Reserve Compute Resources for System Daemons</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubelet-in-userns-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubelet-in-userns-check"/> <label for="m-docs-tasks-administer-cluster-kubelet-in-userns-check"><a href="/docs/tasks/administer-cluster/kubelet-in-userns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubelet-in-userns"><span class="">Running Kubernetes Node Components as a Non-root User</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-safely-drain-node-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-safely-drain-node-check"/> <label for="m-docs-tasks-administer-cluster-safely-drain-node-check"><a href="/docs/tasks/administer-cluster/safely-drain-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-safely-drain-node"><span class="">Safely Drain a Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-securing-a-cluster-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-securing-a-cluster-check"/> <label for="m-docs-tasks-administer-cluster-securing-a-cluster-check"><a href="/docs/tasks/administer-cluster/securing-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-securing-a-cluster"><span class="">Securing a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kubelet-config-file-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kubelet-config-file-check"/> <label for="m-docs-tasks-administer-cluster-kubelet-config-file-check"><a href="/docs/tasks/administer-cluster/kubelet-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kubelet-config-file"><span class="">Set Kubelet parameters via a config file</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-namespaces-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-namespaces-check"/> <label for="m-docs-tasks-administer-cluster-namespaces-check"><a href="/docs/tasks/administer-cluster/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-namespaces"><span class="">Share a Cluster with Namespaces</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-cluster-upgrade-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-cluster-upgrade-check"/> <label for="m-docs-tasks-administer-cluster-cluster-upgrade-check"><a href="/docs/tasks/administer-cluster/cluster-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-cluster-upgrade"><span class="">Upgrade A Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-use-cascading-deletion-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-use-cascading-deletion-check"/> <label for="m-docs-tasks-administer-cluster-use-cascading-deletion-check"><a href="/docs/tasks/administer-cluster/use-cascading-deletion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-use-cascading-deletion"><span class="">Use Cascading Deletion in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-kms-provider-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-kms-provider-check"/> <label for="m-docs-tasks-administer-cluster-kms-provider-check"><a href="/docs/tasks/administer-cluster/kms-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-kms-provider"><span class="">Using a KMS provider for data encryption</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-coredns-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-coredns-check"/> <label for="m-docs-tasks-administer-cluster-coredns-check"><a href="/docs/tasks/administer-cluster/coredns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-coredns"><span class="">Using CoreDNS for Service Discovery</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-nodelocaldns-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-nodelocaldns-check"/> <label for="m-docs-tasks-administer-cluster-nodelocaldns-check"><a href="/docs/tasks/administer-cluster/nodelocaldns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-nodelocaldns"><span class="">Using NodeLocal DNSCache in Kubernetes Clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-sysctl-cluster-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-sysctl-cluster-check"/> <label for="m-docs-tasks-administer-cluster-sysctl-cluster-check"><a href="/docs/tasks/administer-cluster/sysctl-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-sysctl-cluster"><span class="">Using sysctls in a Kubernetes Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-memory-manager-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-memory-manager-check"/> <label for="m-docs-tasks-administer-cluster-memory-manager-check"><a href="/docs/tasks/administer-cluster/memory-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-memory-manager"><span class="">Utilizing the NUMA-aware Memory Manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-administer-cluster-verify-signed-artifacts-li"> <input type="checkbox" id="m-docs-tasks-administer-cluster-verify-signed-artifacts-check"/> <label for="m-docs-tasks-administer-cluster-verify-signed-artifacts-check"><a href="/docs/tasks/administer-cluster/verify-signed-artifacts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-administer-cluster-verify-signed-artifacts"><span class="">Verify Signed Kubernetes Artifacts</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-configure-pod-container-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-check"/> <label for="m-docs-tasks-configure-pod-container-check"><a href="/docs/tasks/configure-pod-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-configure-pod-container"><span class="">Configure Pods and Containers</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-assign-memory-resource-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-assign-memory-resource-check"/> <label for="m-docs-tasks-configure-pod-container-assign-memory-resource-check"><a href="/docs/tasks/configure-pod-container/assign-memory-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-assign-memory-resource"><span class="">Assign Memory Resources to Containers and Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-assign-cpu-resource-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-assign-cpu-resource-check"/> <label for="m-docs-tasks-configure-pod-container-assign-cpu-resource-check"><a href="/docs/tasks/configure-pod-container/assign-cpu-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-assign-cpu-resource"><span class="">Assign CPU Resources to Containers and Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-gmsa-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-gmsa-check"/> <label for="m-docs-tasks-configure-pod-container-configure-gmsa-check"><a href="/docs/tasks/configure-pod-container/configure-gmsa/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-gmsa"><span class="">Configure GMSA for Windows Pods and containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-resize-container-resources-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-resize-container-resources-check"/> <label for="m-docs-tasks-configure-pod-container-resize-container-resources-check"><a href="/docs/tasks/configure-pod-container/resize-container-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-resize-container-resources"><span class="">Resize CPU and Memory Resources assigned to Containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-runasusername-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-runasusername-check"/> <label for="m-docs-tasks-configure-pod-container-configure-runasusername-check"><a href="/docs/tasks/configure-pod-container/configure-runasusername/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-runasusername"><span class="">Configure RunAsUserName for Windows pods and containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-create-hostprocess-pod-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-create-hostprocess-pod-check"/> <label for="m-docs-tasks-configure-pod-container-create-hostprocess-pod-check"><a href="/docs/tasks/configure-pod-container/create-hostprocess-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-create-hostprocess-pod"><span class="">Create a Windows HostProcess Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-quality-service-pod-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-quality-service-pod-check"/> <label for="m-docs-tasks-configure-pod-container-quality-service-pod-check"><a href="/docs/tasks/configure-pod-container/quality-service-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-quality-service-pod"><span class="">Configure Quality of Service for Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-extended-resource-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-extended-resource-check"/> <label for="m-docs-tasks-configure-pod-container-extended-resource-check"><a href="/docs/tasks/configure-pod-container/extended-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-extended-resource"><span class="">Assign Extended Resources to a Container</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-volume-storage-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-volume-storage-check"/> <label for="m-docs-tasks-configure-pod-container-configure-volume-storage-check"><a href="/docs/tasks/configure-pod-container/configure-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-volume-storage"><span class="">Configure a Pod to Use a Volume for Storage</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-persistent-volume-storage-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"/> <label for="m-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"><a href="/docs/tasks/configure-pod-container/configure-persistent-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-persistent-volume-storage"><span class="">Configure a Pod to Use a PersistentVolume for Storage</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-projected-volume-storage-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"/> <label for="m-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"><a href="/docs/tasks/configure-pod-container/configure-projected-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-projected-volume-storage"><span class="">Configure a Pod to Use a Projected Volume for Storage</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-security-context-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-security-context-check"/> <label for="m-docs-tasks-configure-pod-container-security-context-check"><a href="/docs/tasks/configure-pod-container/security-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-security-context"><span class="">Configure a Security Context for a Pod or Container</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-service-account-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-service-account-check"/> <label for="m-docs-tasks-configure-pod-container-configure-service-account-check"><a href="/docs/tasks/configure-pod-container/configure-service-account/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-service-account"><span class="">Configure Service Accounts for Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-pull-image-private-registry-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-pull-image-private-registry-check"/> <label for="m-docs-tasks-configure-pod-container-pull-image-private-registry-check"><a href="/docs/tasks/configure-pod-container/pull-image-private-registry/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-pull-image-private-registry"><span class="">Pull an Image from a Private Registry</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"/> <label for="m-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"><a href="/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes"><span class="">Configure Liveness, Readiness and Startup Probes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-assign-pods-nodes-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-assign-pods-nodes-check"/> <label for="m-docs-tasks-configure-pod-container-assign-pods-nodes-check"><a href="/docs/tasks/configure-pod-container/assign-pods-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-assign-pods-nodes"><span class="">Assign Pods to Nodes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"/> <label for="m-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"><a href="/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity"><span class="">Assign Pods to Nodes using Node Affinity</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-pod-initialization-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-pod-initialization-check"/> <label for="m-docs-tasks-configure-pod-container-configure-pod-initialization-check"><a href="/docs/tasks/configure-pod-container/configure-pod-initialization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-pod-initialization"><span class="">Configure Pod Initialization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"/> <label for="m-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"><a href="/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-attach-handler-lifecycle-event"><span class="">Attach Handlers to Container Lifecycle Events</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-configure-pod-configmap-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-configure-pod-configmap-check"/> <label for="m-docs-tasks-configure-pod-container-configure-pod-configmap-check"><a href="/docs/tasks/configure-pod-container/configure-pod-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-configure-pod-configmap"><span class="">Configure a Pod to Use a ConfigMap</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-share-process-namespace-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-share-process-namespace-check"/> <label for="m-docs-tasks-configure-pod-container-share-process-namespace-check"><a href="/docs/tasks/configure-pod-container/share-process-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-share-process-namespace"><span class="">Share Process Namespace between Containers in a Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-user-namespaces-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-user-namespaces-check"/> <label for="m-docs-tasks-configure-pod-container-user-namespaces-check"><a href="/docs/tasks/configure-pod-container/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-user-namespaces"><span class="">Use a User Namespace With a Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-static-pod-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-static-pod-check"/> <label for="m-docs-tasks-configure-pod-container-static-pod-check"><a href="/docs/tasks/configure-pod-container/static-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-static-pod"><span class="">Create static Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-translate-compose-kubernetes-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"/> <label for="m-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"><a href="/docs/tasks/configure-pod-container/translate-compose-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-translate-compose-kubernetes"><span class="">Translate a Docker Compose File to Kubernetes Resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-enforce-standards-admission-controller-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"/> <label for="m-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"><a href="/docs/tasks/configure-pod-container/enforce-standards-admission-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-enforce-standards-admission-controller"><span class="">Enforce Pod Security Standards by Configuring the Built-in Admission Controller</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"/> <label for="m-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"><a href="/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-enforce-standards-namespace-labels"><span class="">Enforce Pod Security Standards with Namespace Labels</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configure-pod-container-migrate-from-psp-li"> <input type="checkbox" id="m-docs-tasks-configure-pod-container-migrate-from-psp-check"/> <label for="m-docs-tasks-configure-pod-container-migrate-from-psp-check"><a href="/docs/tasks/configure-pod-container/migrate-from-psp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configure-pod-container-migrate-from-psp"><span class="">Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-debug-li"> <input type="checkbox" id="m-docs-tasks-debug-check"/> <label for="m-docs-tasks-debug-check"><a href="/docs/tasks/debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-debug"><span class="">Monitoring, Logging, and Debugging</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-debug-debug-application-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-check"/> <label for="m-docs-tasks-debug-debug-application-check"><a href="/docs/tasks/debug/debug-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-debug-debug-application"><span class="">Troubleshooting Applications</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-debug-pods-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-debug-pods-check"/> <label for="m-docs-tasks-debug-debug-application-debug-pods-check"><a href="/docs/tasks/debug/debug-application/debug-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-debug-pods"><span class="">Debug Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-debug-service-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-debug-service-check"/> <label for="m-docs-tasks-debug-debug-application-debug-service-check"><a href="/docs/tasks/debug/debug-application/debug-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-debug-service"><span class="">Debug Services</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-debug-statefulset-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-debug-statefulset-check"/> <label for="m-docs-tasks-debug-debug-application-debug-statefulset-check"><a href="/docs/tasks/debug/debug-application/debug-statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-debug-statefulset"><span class="">Debug a StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-determine-reason-pod-failure-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"/> <label for="m-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"><a href="/docs/tasks/debug/debug-application/determine-reason-pod-failure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-determine-reason-pod-failure"><span class="">Determine the Reason for Pod Failure</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-debug-init-containers-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-debug-init-containers-check"/> <label for="m-docs-tasks-debug-debug-application-debug-init-containers-check"><a href="/docs/tasks/debug/debug-application/debug-init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-debug-init-containers"><span class="">Debug Init Containers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-debug-running-pod-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-debug-running-pod-check"/> <label for="m-docs-tasks-debug-debug-application-debug-running-pod-check"><a href="/docs/tasks/debug/debug-application/debug-running-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-debug-running-pod"><span class="">Debug Running Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-application-get-shell-running-container-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-application-get-shell-running-container-check"/> <label for="m-docs-tasks-debug-debug-application-get-shell-running-container-check"><a href="/docs/tasks/debug/debug-application/get-shell-running-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-application-get-shell-running-container"><span class="">Get a Shell to a Running Container</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-debug-debug-cluster-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-check"/> <label for="m-docs-tasks-debug-debug-cluster-check"><a href="/docs/tasks/debug/debug-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-debug-debug-cluster"><span class="">Troubleshooting Clusters</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"/> <label for="m-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"><a href="/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-resource-metrics-pipeline"><span class="">Resource metrics pipeline</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-resource-usage-monitoring-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"/> <label for="m-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"><a href="/docs/tasks/debug/debug-cluster/resource-usage-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-resource-usage-monitoring"><span class="">Tools for Monitoring Resources</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-monitor-node-health-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-monitor-node-health-check"/> <label for="m-docs-tasks-debug-debug-cluster-monitor-node-health-check"><a href="/docs/tasks/debug/debug-cluster/monitor-node-health/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-monitor-node-health"><span class="">Monitor Node Health</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-crictl-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-crictl-check"/> <label for="m-docs-tasks-debug-debug-cluster-crictl-check"><a href="/docs/tasks/debug/debug-cluster/crictl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-crictl"><span class="">Debugging Kubernetes nodes with crictl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-audit-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-audit-check"/> <label for="m-docs-tasks-debug-debug-cluster-audit-check"><a href="/docs/tasks/debug/debug-cluster/audit/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-audit"><span class="">Auditing</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-kubectl-node-debug-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"/> <label for="m-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"><a href="/docs/tasks/debug/debug-cluster/kubectl-node-debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-kubectl-node-debug"><span class="">Debugging Kubernetes Nodes With Kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-local-debugging-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-local-debugging-check"/> <label for="m-docs-tasks-debug-debug-cluster-local-debugging-check"><a href="/docs/tasks/debug/debug-cluster/local-debugging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-local-debugging"><span class="">Developing and debugging services locally using telepresence</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-debug-debug-cluster-windows-li"> <input type="checkbox" id="m-docs-tasks-debug-debug-cluster-windows-check"/> <label for="m-docs-tasks-debug-debug-cluster-windows-check"><a href="/docs/tasks/debug/debug-cluster/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-debug-debug-cluster-windows"><span class="">Windows debugging tips</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-manage-kubernetes-objects-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-check"><a href="/docs/tasks/manage-kubernetes-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-manage-kubernetes-objects"><span class="">Manage Kubernetes Objects</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-kubernetes-objects-declarative-config-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-declarative-config-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-declarative-config-check"><a href="/docs/tasks/manage-kubernetes-objects/declarative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-kubernetes-objects-declarative-config"><span class="">Declarative Management of Kubernetes Objects Using Configuration Files</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-kubernetes-objects-kustomization-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-kustomization-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-kustomization-check"><a href="/docs/tasks/manage-kubernetes-objects/kustomization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-kubernetes-objects-kustomization"><span class="">Declarative Management of Kubernetes Objects Using Kustomize</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-kubernetes-objects-imperative-command-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-imperative-command-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-imperative-command-check"><a href="/docs/tasks/manage-kubernetes-objects/imperative-command/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-kubernetes-objects-imperative-command"><span class="">Managing Kubernetes Objects Using Imperative Commands</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-kubernetes-objects-imperative-config-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-imperative-config-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-imperative-config-check"><a href="/docs/tasks/manage-kubernetes-objects/imperative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-kubernetes-objects-imperative-config"><span class="">Imperative Management of Kubernetes Objects Using Configuration Files</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-li"> <input type="checkbox" id="m-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"/> <label for="m-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"><a href="/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch"><span class="">Update API Objects in Place Using kubectl patch</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-configmap-secret-li"> <input type="checkbox" id="m-docs-tasks-configmap-secret-check"/> <label for="m-docs-tasks-configmap-secret-check"><a href="/docs/tasks/configmap-secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-configmap-secret"><span class="">Managing Secrets</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configmap-secret-managing-secret-using-kubectl-li"> <input type="checkbox" id="m-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"/> <label for="m-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"><a href="/docs/tasks/configmap-secret/managing-secret-using-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configmap-secret-managing-secret-using-kubectl"><span class="">Managing Secrets using kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configmap-secret-managing-secret-using-config-file-li"> <input type="checkbox" id="m-docs-tasks-configmap-secret-managing-secret-using-config-file-check"/> <label for="m-docs-tasks-configmap-secret-managing-secret-using-config-file-check"><a href="/docs/tasks/configmap-secret/managing-secret-using-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configmap-secret-managing-secret-using-config-file"><span class="">Managing Secrets using Configuration File</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-configmap-secret-managing-secret-using-kustomize-li"> <input type="checkbox" id="m-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"/> <label for="m-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"><a href="/docs/tasks/configmap-secret/managing-secret-using-kustomize/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-configmap-secret-managing-secret-using-kustomize"><span class="">Managing Secrets using Kustomize</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-inject-data-application-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-check"/> <label for="m-docs-tasks-inject-data-application-check"><a href="/docs/tasks/inject-data-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-inject-data-application"><span class="">Inject Data Into Applications</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-define-command-argument-container-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-define-command-argument-container-check"/> <label for="m-docs-tasks-inject-data-application-define-command-argument-container-check"><a href="/docs/tasks/inject-data-application/define-command-argument-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-define-command-argument-container"><span class="">Define a Command and Arguments for a Container</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-define-interdependent-environment-variables-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"/> <label for="m-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"><a href="/docs/tasks/inject-data-application/define-interdependent-environment-variables/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-define-interdependent-environment-variables"><span class="">Define Dependent Environment Variables</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-define-environment-variable-container-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-define-environment-variable-container-check"/> <label for="m-docs-tasks-inject-data-application-define-environment-variable-container-check"><a href="/docs/tasks/inject-data-application/define-environment-variable-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-define-environment-variable-container"><span class="">Define Environment Variables for a Container</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-environment-variable-expose-pod-information-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"/> <label for="m-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"><a href="/docs/tasks/inject-data-application/environment-variable-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-environment-variable-expose-pod-information"><span class="">Expose Pod Information to Containers Through Environment Variables</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"/> <label for="m-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"><a href="/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information"><span class="">Expose Pod Information to Containers Through Files</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-inject-data-application-distribute-credentials-secure-li"> <input type="checkbox" id="m-docs-tasks-inject-data-application-distribute-credentials-secure-check"/> <label for="m-docs-tasks-inject-data-application-distribute-credentials-secure-check"><a href="/docs/tasks/inject-data-application/distribute-credentials-secure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-inject-data-application-distribute-credentials-secure"><span class="">Distribute Credentials Securely Using Secrets</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-run-application-li"> <input type="checkbox" id="m-docs-tasks-run-application-check"/> <label for="m-docs-tasks-run-application-check"><a href="/docs/tasks/run-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-run-application"><span class="">Run Applications</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-run-stateless-application-deployment-li"> <input type="checkbox" id="m-docs-tasks-run-application-run-stateless-application-deployment-check"/> <label for="m-docs-tasks-run-application-run-stateless-application-deployment-check"><a href="/docs/tasks/run-application/run-stateless-application-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-run-stateless-application-deployment"><span class="">Run a Stateless Application Using a Deployment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-run-single-instance-stateful-application-li"> <input type="checkbox" id="m-docs-tasks-run-application-run-single-instance-stateful-application-check"/> <label for="m-docs-tasks-run-application-run-single-instance-stateful-application-check"><a href="/docs/tasks/run-application/run-single-instance-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-run-single-instance-stateful-application"><span class="">Run a Single-Instance Stateful Application</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-run-replicated-stateful-application-li"> <input type="checkbox" id="m-docs-tasks-run-application-run-replicated-stateful-application-check"/> <label for="m-docs-tasks-run-application-run-replicated-stateful-application-check"><a href="/docs/tasks/run-application/run-replicated-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-run-replicated-stateful-application"><span class="">Run a Replicated Stateful Application</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-scale-stateful-set-li"> <input type="checkbox" id="m-docs-tasks-run-application-scale-stateful-set-check"/> <label for="m-docs-tasks-run-application-scale-stateful-set-check"><a href="/docs/tasks/run-application/scale-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-scale-stateful-set"><span class="">Scale a StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-delete-stateful-set-li"> <input type="checkbox" id="m-docs-tasks-run-application-delete-stateful-set-check"/> <label for="m-docs-tasks-run-application-delete-stateful-set-check"><a href="/docs/tasks/run-application/delete-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-delete-stateful-set"><span class="">Delete a StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-force-delete-stateful-set-pod-li"> <input type="checkbox" id="m-docs-tasks-run-application-force-delete-stateful-set-pod-check"/> <label for="m-docs-tasks-run-application-force-delete-stateful-set-pod-check"><a href="/docs/tasks/run-application/force-delete-stateful-set-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-force-delete-stateful-set-pod"><span class="">Force Delete StatefulSet Pods</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-horizontal-pod-autoscale-li"> <input type="checkbox" id="m-docs-tasks-run-application-horizontal-pod-autoscale-check"/> <label for="m-docs-tasks-run-application-horizontal-pod-autoscale-check"><a href="/docs/tasks/run-application/horizontal-pod-autoscale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-horizontal-pod-autoscale"><span class="">Horizontal Pod Autoscaling</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-li"> <input type="checkbox" id="m-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"/> <label for="m-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"><a href="/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough"><span class="">HorizontalPodAutoscaler Walkthrough</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-configure-pdb-li"> <input type="checkbox" id="m-docs-tasks-run-application-configure-pdb-check"/> <label for="m-docs-tasks-run-application-configure-pdb-check"><a href="/docs/tasks/run-application/configure-pdb/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-configure-pdb"><span class="">Specifying a Disruption Budget for your Application</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-run-application-access-api-from-pod-li"> <input type="checkbox" id="m-docs-tasks-run-application-access-api-from-pod-check"/> <label for="m-docs-tasks-run-application-access-api-from-pod-check"><a href="/docs/tasks/run-application/access-api-from-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-run-application-access-api-from-pod"><span class="">Accessing the Kubernetes API from a Pod</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-job-li"> <input type="checkbox" id="m-docs-tasks-job-check"/> <label for="m-docs-tasks-job-check"><a href="/docs/tasks/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-job"><span class="">Run Jobs</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-automated-tasks-with-cron-jobs-li"> <input type="checkbox" id="m-docs-tasks-job-automated-tasks-with-cron-jobs-check"/> <label for="m-docs-tasks-job-automated-tasks-with-cron-jobs-check"><a href="/docs/tasks/job/automated-tasks-with-cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-automated-tasks-with-cron-jobs"><span class="">Running Automated Tasks with a CronJob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-coarse-parallel-processing-work-queue-li"> <input type="checkbox" id="m-docs-tasks-job-coarse-parallel-processing-work-queue-check"/> <label for="m-docs-tasks-job-coarse-parallel-processing-work-queue-check"><a href="/docs/tasks/job/coarse-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-coarse-parallel-processing-work-queue"><span class="">Coarse Parallel Processing Using a Work Queue</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-fine-parallel-processing-work-queue-li"> <input type="checkbox" id="m-docs-tasks-job-fine-parallel-processing-work-queue-check"/> <label for="m-docs-tasks-job-fine-parallel-processing-work-queue-check"><a href="/docs/tasks/job/fine-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-fine-parallel-processing-work-queue"><span class="">Fine Parallel Processing Using a Work Queue</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-indexed-parallel-processing-static-li"> <input type="checkbox" id="m-docs-tasks-job-indexed-parallel-processing-static-check"/> <label for="m-docs-tasks-job-indexed-parallel-processing-static-check"><a href="/docs/tasks/job/indexed-parallel-processing-static/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-indexed-parallel-processing-static"><span class="">Indexed Job for Parallel Processing with Static Work Assignment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-job-with-pod-to-pod-communication-li"> <input type="checkbox" id="m-docs-tasks-job-job-with-pod-to-pod-communication-check"/> <label for="m-docs-tasks-job-job-with-pod-to-pod-communication-check"><a href="/docs/tasks/job/job-with-pod-to-pod-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-job-with-pod-to-pod-communication"><span class="">Job with Pod-to-Pod Communication</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-parallel-processing-expansion-li"> <input type="checkbox" id="m-docs-tasks-job-parallel-processing-expansion-check"/> <label for="m-docs-tasks-job-parallel-processing-expansion-check"><a href="/docs/tasks/job/parallel-processing-expansion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-parallel-processing-expansion"><span class="">Parallel Processing using Expansions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-job-pod-failure-policy-li"> <input type="checkbox" id="m-docs-tasks-job-pod-failure-policy-check"/> <label for="m-docs-tasks-job-pod-failure-policy-check"><a href="/docs/tasks/job/pod-failure-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-job-pod-failure-policy"><span class="">Handling retriable and non-retriable pod failures with Pod failure policy</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-access-application-cluster-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-check"/> <label for="m-docs-tasks-access-application-cluster-check"><a href="/docs/tasks/access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-access-application-cluster"><span class="">Access Applications in a Cluster</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-web-ui-dashboard-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-web-ui-dashboard-check"/> <label for="m-docs-tasks-access-application-cluster-web-ui-dashboard-check"><a href="/docs/tasks/access-application-cluster/web-ui-dashboard/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-web-ui-dashboard"><span class="">Deploy and Access the Kubernetes Dashboard</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-access-cluster-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-access-cluster-check"/> <label for="m-docs-tasks-access-application-cluster-access-cluster-check"><a href="/docs/tasks/access-application-cluster/access-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-access-cluster"><span class="">Accessing Clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-configure-access-multiple-clusters-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"/> <label for="m-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"><a href="/docs/tasks/access-application-cluster/configure-access-multiple-clusters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-configure-access-multiple-clusters"><span class="">Configure Access to Multiple Clusters</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-port-forward-access-application-cluster-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"/> <label for="m-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"><a href="/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-port-forward-access-application-cluster"><span class="">Use Port Forwarding to Access Applications in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-service-access-application-cluster-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-service-access-application-cluster-check"/> <label for="m-docs-tasks-access-application-cluster-service-access-application-cluster-check"><a href="/docs/tasks/access-application-cluster/service-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-service-access-application-cluster"><span class="">Use a Service to Access an Application in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-connecting-frontend-backend-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-connecting-frontend-backend-check"/> <label for="m-docs-tasks-access-application-cluster-connecting-frontend-backend-check"><a href="/docs/tasks/access-application-cluster/connecting-frontend-backend/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-connecting-frontend-backend"><span class="">Connect a Frontend to a Backend Using Services</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-create-external-load-balancer-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-create-external-load-balancer-check"/> <label for="m-docs-tasks-access-application-cluster-create-external-load-balancer-check"><a href="/docs/tasks/access-application-cluster/create-external-load-balancer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-create-external-load-balancer"><span class="">Create an External Load Balancer</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-list-all-running-container-images-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-list-all-running-container-images-check"/> <label for="m-docs-tasks-access-application-cluster-list-all-running-container-images-check"><a href="/docs/tasks/access-application-cluster/list-all-running-container-images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-list-all-running-container-images"><span class="">List All Container Images Running in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-ingress-minikube-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-ingress-minikube-check"/> <label for="m-docs-tasks-access-application-cluster-ingress-minikube-check"><a href="/docs/tasks/access-application-cluster/ingress-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-ingress-minikube"><span class="">Set up Ingress on Minikube with the NGINX Ingress Controller</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"/> <label for="m-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"><a href="/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume"><span class="">Communicate Between Containers in the Same Pod Using a Shared Volume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-configure-dns-cluster-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-configure-dns-cluster-check"/> <label for="m-docs-tasks-access-application-cluster-configure-dns-cluster-check"><a href="/docs/tasks/access-application-cluster/configure-dns-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-configure-dns-cluster"><span class="">Configure DNS for a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-access-application-cluster-access-cluster-services-li"> <input type="checkbox" id="m-docs-tasks-access-application-cluster-access-cluster-services-check"/> <label for="m-docs-tasks-access-application-cluster-access-cluster-services-check"><a href="/docs/tasks/access-application-cluster/access-cluster-services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-access-application-cluster-access-cluster-services"><span class="">Access Services Running on Clusters</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-extend-kubernetes-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-check"/> <label for="m-docs-tasks-extend-kubernetes-check"><a href="/docs/tasks/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-extend-kubernetes"><span class="">Extend Kubernetes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-configure-aggregation-layer-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"/> <label for="m-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"><a href="/docs/tasks/extend-kubernetes/configure-aggregation-layer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-configure-aggregation-layer"><span class="">Configure the Aggregation Layer</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-extend-kubernetes-custom-resources-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-custom-resources-check"/> <label for="m-docs-tasks-extend-kubernetes-custom-resources-check"><a href="/docs/tasks/extend-kubernetes/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-extend-kubernetes-custom-resources"><span class="">Use Custom Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"/> <label for="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"><a href="/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions"><span class="">Extend the Kubernetes API with CustomResourceDefinitions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"/> <label for="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"><a href="/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning"><span class="">Versions in CustomResourceDefinitions</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-setup-extension-api-server-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-setup-extension-api-server-check"/> <label for="m-docs-tasks-extend-kubernetes-setup-extension-api-server-check"><a href="/docs/tasks/extend-kubernetes/setup-extension-api-server/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-setup-extension-api-server"><span class="">Set up an Extension API Server</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-configure-multiple-schedulers-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"/> <label for="m-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"><a href="/docs/tasks/extend-kubernetes/configure-multiple-schedulers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-configure-multiple-schedulers"><span class="">Configure Multiple Schedulers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-http-proxy-access-api-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-http-proxy-access-api-check"/> <label for="m-docs-tasks-extend-kubernetes-http-proxy-access-api-check"><a href="/docs/tasks/extend-kubernetes/http-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-http-proxy-access-api"><span class="">Use an HTTP Proxy to Access the Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-socks5-proxy-access-api-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"/> <label for="m-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"><a href="/docs/tasks/extend-kubernetes/socks5-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-socks5-proxy-access-api"><span class="">Use a SOCKS5 Proxy to Access the Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubernetes-setup-konnectivity-li"> <input type="checkbox" id="m-docs-tasks-extend-kubernetes-setup-konnectivity-check"/> <label for="m-docs-tasks-extend-kubernetes-setup-konnectivity-check"><a href="/docs/tasks/extend-kubernetes/setup-konnectivity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubernetes-setup-konnectivity"><span class="">Set up Konnectivity service</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-tls-li"> <input type="checkbox" id="m-docs-tasks-tls-check"/> <label for="m-docs-tasks-tls-check"><a href="/docs/tasks/tls/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-tls"><span class="">TLS</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tls-certificate-rotation-li"> <input type="checkbox" id="m-docs-tasks-tls-certificate-rotation-check"/> <label for="m-docs-tasks-tls-certificate-rotation-check"><a href="/docs/tasks/tls/certificate-rotation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tls-certificate-rotation"><span class="">Configure Certificate Rotation for the Kubelet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tls-managing-tls-in-a-cluster-li"> <input type="checkbox" id="m-docs-tasks-tls-managing-tls-in-a-cluster-check"/> <label for="m-docs-tasks-tls-managing-tls-in-a-cluster-check"><a href="/docs/tasks/tls/managing-tls-in-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tls-managing-tls-in-a-cluster"><span class="">Manage TLS Certificates in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-tls-manual-rotation-of-ca-certificates-li"> <input type="checkbox" id="m-docs-tasks-tls-manual-rotation-of-ca-certificates-check"/> <label for="m-docs-tasks-tls-manual-rotation-of-ca-certificates-check"><a href="/docs/tasks/tls/manual-rotation-of-ca-certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-tls-manual-rotation-of-ca-certificates"><span class="">Manual Rotation of CA Certificates</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-manage-daemon-li"> <input type="checkbox" id="m-docs-tasks-manage-daemon-check"/> <label for="m-docs-tasks-manage-daemon-check"><a href="/docs/tasks/manage-daemon/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-manage-daemon"><span class="">Manage Cluster Daemons</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-daemon-update-daemon-set-li"> <input type="checkbox" id="m-docs-tasks-manage-daemon-update-daemon-set-check"/> <label for="m-docs-tasks-manage-daemon-update-daemon-set-check"><a href="/docs/tasks/manage-daemon/update-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-daemon-update-daemon-set"><span class="">Perform a Rolling Update on a DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-daemon-rollback-daemon-set-li"> <input type="checkbox" id="m-docs-tasks-manage-daemon-rollback-daemon-set-check"/> <label for="m-docs-tasks-manage-daemon-rollback-daemon-set-check"><a href="/docs/tasks/manage-daemon/rollback-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-daemon-rollback-daemon-set"><span class="">Perform a Rollback on a DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-daemon-pods-some-nodes-li"> <input type="checkbox" id="m-docs-tasks-manage-daemon-pods-some-nodes-check"/> <label for="m-docs-tasks-manage-daemon-pods-some-nodes-check"><a href="/docs/tasks/manage-daemon/pods-some-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-daemon-pods-some-nodes"><span class="">Running Pods on Only Some Nodes</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tasks-network-li"> <input type="checkbox" id="m-docs-tasks-network-check"/> <label for="m-docs-tasks-network-check"><a href="/docs/tasks/network/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tasks-network"><span class="">Networking</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-network-customize-hosts-file-for-pods-li"> <input type="checkbox" id="m-docs-tasks-network-customize-hosts-file-for-pods-check"/> <label for="m-docs-tasks-network-customize-hosts-file-for-pods-check"><a href="/docs/tasks/network/customize-hosts-file-for-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-network-customize-hosts-file-for-pods"><span class="">Adding entries to Pod /etc/hosts with HostAliases</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-network-validate-dual-stack-li"> <input type="checkbox" id="m-docs-tasks-network-validate-dual-stack-check"/> <label for="m-docs-tasks-network-validate-dual-stack-check"><a href="/docs/tasks/network/validate-dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-network-validate-dual-stack"><span class="">Validate IPv4/IPv6 dual-stack</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-extend-kubectl-kubectl-plugins-li"> <input type="checkbox" id="m-docs-tasks-extend-kubectl-kubectl-plugins-check"/> <label for="m-docs-tasks-extend-kubectl-kubectl-plugins-check"><a href="/docs/tasks/extend-kubectl/kubectl-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-extend-kubectl-kubectl-plugins"><span class="">Extend kubectl with plugins</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-hugepages-scheduling-hugepages-li"> <input type="checkbox" id="m-docs-tasks-manage-hugepages-scheduling-hugepages-check"/> <label for="m-docs-tasks-manage-hugepages-scheduling-hugepages-check"><a href="/docs/tasks/manage-hugepages/scheduling-hugepages/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-hugepages-scheduling-hugepages"><span class="">Manage HugePages</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tasks-manage-gpus-scheduling-gpus-li"> <input type="checkbox" id="m-docs-tasks-manage-gpus-scheduling-gpus-check"/> <label for="m-docs-tasks-manage-gpus-scheduling-gpus-check"><a href="/docs/tasks/manage-gpus/scheduling-gpus/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tasks-manage-gpus-scheduling-gpus"><span class="">Schedule GPUs</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-li"> <input type="checkbox" id="m-docs-tutorials-check"/> <label for="m-docs-tutorials-check"><a href="/docs/tutorials/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials"><span class="">Tutorials</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-hello-minikube-li"> <input type="checkbox" id="m-docs-tutorials-hello-minikube-check"/> <label for="m-docs-tutorials-hello-minikube-check"><a href="/docs/tutorials/hello-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-hello-minikube"><span class="">Hello Minikube</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-check"/> <label for="m-docs-tutorials-kubernetes-basics-check"><a href="/docs/tutorials/kubernetes-basics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics"><span class="">Learn Kubernetes Basics</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-create-cluster-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-create-cluster-check"/> <label for="m-docs-tutorials-kubernetes-basics-create-cluster-check"><a href="/docs/tutorials/kubernetes-basics/create-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-create-cluster"><span class="">Create a Cluster</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"><a href="/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro"><span class="">Using Minikube to Create a Cluster</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-deploy-app-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-deploy-app-check"/> <label for="m-docs-tutorials-kubernetes-basics-deploy-app-check"><a href="/docs/tutorials/kubernetes-basics/deploy-app/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-deploy-app"><span class="">Deploy an App</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"><a href="/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro"><span class="">Using kubectl to Create a Deployment</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-explore-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-explore-check"/> <label for="m-docs-tutorials-kubernetes-basics-explore-check"><a href="/docs/tutorials/kubernetes-basics/explore/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-explore"><span class="">Explore Your App</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-explore-explore-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-explore-explore-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-explore-explore-intro-check"><a href="/docs/tutorials/kubernetes-basics/explore/explore-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-explore-explore-intro"><span class="">Viewing Pods and Nodes</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-expose-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-expose-check"/> <label for="m-docs-tutorials-kubernetes-basics-expose-check"><a href="/docs/tutorials/kubernetes-basics/expose/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-expose"><span class="">Expose Your App Publicly</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-expose-expose-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-expose-expose-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-expose-expose-intro-check"><a href="/docs/tutorials/kubernetes-basics/expose/expose-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-expose-expose-intro"><span class="">Using a Service to Expose Your App</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-scale-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-scale-check"/> <label for="m-docs-tutorials-kubernetes-basics-scale-check"><a href="/docs/tutorials/kubernetes-basics/scale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-scale"><span class="">Scale Your App</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-scale-scale-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-scale-scale-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-scale-scale-intro-check"><a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-scale-scale-intro"><span class="">Running Multiple Instances of Your App</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-kubernetes-basics-update-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-update-check"/> <label for="m-docs-tutorials-kubernetes-basics-update-check"><a href="/docs/tutorials/kubernetes-basics/update/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-kubernetes-basics-update"><span class="">Update Your App</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-kubernetes-basics-update-update-intro-li"> <input type="checkbox" id="m-docs-tutorials-kubernetes-basics-update-update-intro-check"/> <label for="m-docs-tutorials-kubernetes-basics-update-update-intro-check"><a href="/docs/tutorials/kubernetes-basics/update/update-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-kubernetes-basics-update-update-intro"><span class="">Performing a Rolling Update</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-configuration-li"> <input type="checkbox" id="m-docs-tutorials-configuration-check"/> <label for="m-docs-tutorials-configuration-check"><a href="/docs/tutorials/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-configuration"><span class="">Configuration</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-configuration-configure-java-microservice-li"> <input type="checkbox" id="m-docs-tutorials-configuration-configure-java-microservice-check"/> <label for="m-docs-tutorials-configuration-configure-java-microservice-check"><a href="/docs/tutorials/configuration/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-configuration-configure-java-microservice"><span class="">Example: Configuring a Java Microservice</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-li"> <input type="checkbox" id="m-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"/> <label for="m-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"><a href="/docs/tutorials/configuration/configure-java-microservice/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice"><span class="">Externalizing config using MicroProfile, ConfigMaps and Secrets</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-configuration-configure-redis-using-configmap-li"> <input type="checkbox" id="m-docs-tutorials-configuration-configure-redis-using-configmap-check"/> <label for="m-docs-tutorials-configuration-configure-redis-using-configmap-check"><a href="/docs/tutorials/configuration/configure-redis-using-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-configuration-configure-redis-using-configmap"><span class="">Configuring Redis using a ConfigMap</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-security-li"> <input type="checkbox" id="m-docs-tutorials-security-check"/> <label for="m-docs-tutorials-security-check"><a href="/docs/tutorials/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-security"><span class="">Security</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-security-cluster-level-pss-li"> <input type="checkbox" id="m-docs-tutorials-security-cluster-level-pss-check"/> <label for="m-docs-tutorials-security-cluster-level-pss-check"><a href="/docs/tutorials/security/cluster-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-security-cluster-level-pss"><span class="">Apply Pod Security Standards at the Cluster Level</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-security-ns-level-pss-li"> <input type="checkbox" id="m-docs-tutorials-security-ns-level-pss-check"/> <label for="m-docs-tutorials-security-ns-level-pss-check"><a href="/docs/tutorials/security/ns-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-security-ns-level-pss"><span class="">Apply Pod Security Standards at the Namespace Level</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-security-apparmor-li"> <input type="checkbox" id="m-docs-tutorials-security-apparmor-check"/> <label for="m-docs-tutorials-security-apparmor-check"><a href="/docs/tutorials/security/apparmor/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-security-apparmor"><span class="">Restrict a Container's Access to Resources with AppArmor</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-security-seccomp-li"> <input type="checkbox" id="m-docs-tutorials-security-seccomp-check"/> <label for="m-docs-tutorials-security-seccomp-check"><a href="/docs/tutorials/security/seccomp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-security-seccomp"><span class="">Restrict a Container's Syscalls with seccomp</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-stateless-application-li"> <input type="checkbox" id="m-docs-tutorials-stateless-application-check"/> <label for="m-docs-tutorials-stateless-application-check"><a href="/docs/tutorials/stateless-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-stateless-application"><span class="">Stateless Applications</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateless-application-expose-external-ip-address-li"> <input type="checkbox" id="m-docs-tutorials-stateless-application-expose-external-ip-address-check"/> <label for="m-docs-tutorials-stateless-application-expose-external-ip-address-check"><a href="/docs/tutorials/stateless-application/expose-external-ip-address/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateless-application-expose-external-ip-address"><span class="">Exposing an External IP Address to Access an Application in a Cluster</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateless-application-guestbook-li"> <input type="checkbox" id="m-docs-tutorials-stateless-application-guestbook-check"/> <label for="m-docs-tutorials-stateless-application-guestbook-check"><a href="/docs/tutorials/stateless-application/guestbook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateless-application-guestbook"><span class="">Example: Deploying PHP Guestbook application with Redis</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-stateful-application-li"> <input type="checkbox" id="m-docs-tutorials-stateful-application-check"/> <label for="m-docs-tutorials-stateful-application-check"><a href="/docs/tutorials/stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-stateful-application"><span class="">Stateful Applications</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateful-application-basic-stateful-set-li"> <input type="checkbox" id="m-docs-tutorials-stateful-application-basic-stateful-set-check"/> <label for="m-docs-tutorials-stateful-application-basic-stateful-set-check"><a href="/docs/tutorials/stateful-application/basic-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateful-application-basic-stateful-set"><span class="">StatefulSet Basics</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-li"> <input type="checkbox" id="m-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"/> <label for="m-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"><a href="/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume"><span class="">Example: Deploying WordPress and MySQL with Persistent Volumes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateful-application-cassandra-li"> <input type="checkbox" id="m-docs-tutorials-stateful-application-cassandra-check"/> <label for="m-docs-tutorials-stateful-application-cassandra-check"><a href="/docs/tutorials/stateful-application/cassandra/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateful-application-cassandra"><span class="">Example: Deploying Cassandra with a StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-stateful-application-zookeeper-li"> <input type="checkbox" id="m-docs-tutorials-stateful-application-zookeeper-check"/> <label for="m-docs-tutorials-stateful-application-zookeeper-check"><a href="/docs/tutorials/stateful-application/zookeeper/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-stateful-application-zookeeper"><span class="">Running ZooKeeper, A Distributed System Coordinator</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-tutorials-services-li"> <input type="checkbox" id="m-docs-tutorials-services-check"/> <label for="m-docs-tutorials-services-check"><a href="/docs/tutorials/services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-tutorials-services"><span class="">Services</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-services-connect-applications-service-li"> <input type="checkbox" id="m-docs-tutorials-services-connect-applications-service-check"/> <label for="m-docs-tutorials-services-connect-applications-service-check"><a href="/docs/tutorials/services/connect-applications-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-services-connect-applications-service"><span class="">Connecting Applications with Services</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-services-source-ip-li"> <input type="checkbox" id="m-docs-tutorials-services-source-ip-check"/> <label for="m-docs-tutorials-services-source-ip-check"><a href="/docs/tutorials/services/source-ip/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-services-source-ip"><span class="">Using Source IP</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-tutorials-services-pods-and-endpoint-termination-flow-li"> <input type="checkbox" id="m-docs-tutorials-services-pods-and-endpoint-termination-flow-check"/> <label for="m-docs-tutorials-services-pods-and-endpoint-termination-flow-check"><a href="/docs/tutorials/services/pods-and-endpoint-termination-flow/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-tutorials-services-pods-and-endpoint-termination-flow"><span class="">Explore Termination Behavior for Pods And Their Endpoints</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-li"> <input type="checkbox" id="m-docs-reference-check"/> <label for="m-docs-reference-check"><a href="/docs/reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference"><span class="">Reference</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-glossary-li"> <input type="checkbox" id="m-docs-reference-glossary-check"/> <label for="m-docs-reference-glossary-check"><a href="/docs/reference/glossary/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-glossary"><span class="">Glossary</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-using-api-li"> <input type="checkbox" id="m-docs-reference-using-api-check"/> <label for="m-docs-reference-using-api-check"><a href="/docs/reference/using-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-using-api"><span class="">API Overview</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-api-concepts-li"> <input type="checkbox" id="m-docs-reference-using-api-api-concepts-check"/> <label for="m-docs-reference-using-api-api-concepts-check"><a href="/docs/reference/using-api/api-concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-api-concepts"><span class="">Kubernetes API Concepts</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-server-side-apply-li"> <input type="checkbox" id="m-docs-reference-using-api-server-side-apply-check"/> <label for="m-docs-reference-using-api-server-side-apply-check"><a href="/docs/reference/using-api/server-side-apply/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-server-side-apply"><span class="">Server-Side Apply</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-client-libraries-li"> <input type="checkbox" id="m-docs-reference-using-api-client-libraries-check"/> <label for="m-docs-reference-using-api-client-libraries-check"><a href="/docs/reference/using-api/client-libraries/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-client-libraries"><span class="">Client Libraries</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-cel-li"> <input type="checkbox" id="m-docs-reference-using-api-cel-check"/> <label for="m-docs-reference-using-api-cel-check"><a href="/docs/reference/using-api/cel/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-cel"><span class="">Common Expression Language in Kubernetes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-deprecation-policy-li"> <input type="checkbox" id="m-docs-reference-using-api-deprecation-policy-check"/> <label for="m-docs-reference-using-api-deprecation-policy-check"><a href="/docs/reference/using-api/deprecation-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-deprecation-policy"><span class="">Kubernetes Deprecation Policy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-deprecation-guide-li"> <input type="checkbox" id="m-docs-reference-using-api-deprecation-guide-check"/> <label for="m-docs-reference-using-api-deprecation-guide-check"><a href="/docs/reference/using-api/deprecation-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-deprecation-guide"><span class="">Deprecated API Migration Guide</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-using-api-health-checks-li"> <input type="checkbox" id="m-docs-reference-using-api-health-checks-check"/> <label for="m-docs-reference-using-api-health-checks-check"><a href="/docs/reference/using-api/health-checks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-using-api-health-checks"><span class="">Kubernetes API health endpoints</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-access-authn-authz-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-check"/> <label for="m-docs-reference-access-authn-authz-check"><a href="/docs/reference/access-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-access-authn-authz"><span class="">API Access Control</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-authentication-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-authentication-check"/> <label for="m-docs-reference-access-authn-authz-authentication-check"><a href="/docs/reference/access-authn-authz/authentication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-authentication"><span class="">Authenticating</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-bootstrap-tokens-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-bootstrap-tokens-check"/> <label for="m-docs-reference-access-authn-authz-bootstrap-tokens-check"><a href="/docs/reference/access-authn-authz/bootstrap-tokens/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-bootstrap-tokens"><span class="">Authenticating with Bootstrap Tokens</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-certificate-signing-requests-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-certificate-signing-requests-check"/> <label for="m-docs-reference-access-authn-authz-certificate-signing-requests-check"><a href="/docs/reference/access-authn-authz/certificate-signing-requests/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-certificate-signing-requests"><span class="">Certificates and Certificate Signing Requests</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-admission-controllers-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-admission-controllers-check"/> <label for="m-docs-reference-access-authn-authz-admission-controllers-check"><a href="/docs/reference/access-authn-authz/admission-controllers/" title="Admission Controllers Reference" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-admission-controllers"><span class="">Admission Controllers</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-extensible-admission-controllers-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-extensible-admission-controllers-check"/> <label for="m-docs-reference-access-authn-authz-extensible-admission-controllers-check"><a href="/docs/reference/access-authn-authz/extensible-admission-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-extensible-admission-controllers"><span class="">Dynamic Admission Control</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-service-accounts-admin-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-service-accounts-admin-check"/> <label for="m-docs-reference-access-authn-authz-service-accounts-admin-check"><a href="/docs/reference/access-authn-authz/service-accounts-admin/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-service-accounts-admin"><span class="">Managing Service Accounts</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-authorization-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-authorization-check"/> <label for="m-docs-reference-access-authn-authz-authorization-check"><a href="/docs/reference/access-authn-authz/authorization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-authorization"><span class="">Authorization Overview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-rbac-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-rbac-check"/> <label for="m-docs-reference-access-authn-authz-rbac-check"><a href="/docs/reference/access-authn-authz/rbac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-rbac"><span class="">Using RBAC Authorization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-abac-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-abac-check"/> <label for="m-docs-reference-access-authn-authz-abac-check"><a href="/docs/reference/access-authn-authz/abac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-abac"><span class="">Using ABAC Authorization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-node-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-node-check"/> <label for="m-docs-reference-access-authn-authz-node-check"><a href="/docs/reference/access-authn-authz/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-node"><span class="">Using Node Authorization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-psp-to-pod-security-standards-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"/> <label for="m-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"><a href="/docs/reference/access-authn-authz/psp-to-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-psp-to-pod-security-standards"><span class="">Mapping PodSecurityPolicies to Pod Security Standards</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-webhook-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-webhook-check"/> <label for="m-docs-reference-access-authn-authz-webhook-check"><a href="/docs/reference/access-authn-authz/webhook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-webhook"><span class="">Webhook Mode</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-kubelet-authn-authz-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-kubelet-authn-authz-check"/> <label for="m-docs-reference-access-authn-authz-kubelet-authn-authz-check"><a href="/docs/reference/access-authn-authz/kubelet-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-kubelet-authn-authz"><span class="">Kubelet authentication/authorization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"/> <label for="m-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"><a href="/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-kubelet-tls-bootstrapping"><span class="">TLS bootstrapping</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-access-authn-authz-validating-admission-policy-li"> <input type="checkbox" id="m-docs-reference-access-authn-authz-validating-admission-policy-check"/> <label for="m-docs-reference-access-authn-authz-validating-admission-policy-check"><a href="/docs/reference/access-authn-authz/validating-admission-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-access-authn-authz-validating-admission-policy"><span class="">Validating Admission Policy</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-labels-annotations-taints-li"> <input type="checkbox" id="m-docs-reference-labels-annotations-taints-check"/> <label for="m-docs-reference-labels-annotations-taints-check"><a href="/docs/reference/labels-annotations-taints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-labels-annotations-taints"><span class="">Well-Known Labels, Annotations and Taints</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-labels-annotations-taints-audit-annotations-li"> <input type="checkbox" id="m-docs-reference-labels-annotations-taints-audit-annotations-check"/> <label for="m-docs-reference-labels-annotations-taints-audit-annotations-check"><a href="/docs/reference/labels-annotations-taints/audit-annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-labels-annotations-taints-audit-annotations"><span class="">Audit Annotations</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-check"/> <label for="m-docs-reference-kubernetes-api-check"><a href="/docs/reference/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api"><span class="">Kubernetes API</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-workload-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-check"><a href="/docs/reference/kubernetes-api/workload-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-workload-resources"><span class="">Workload Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-pod-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-pod-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-pod-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/pod-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-pod-v1"><span class="">Pod</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-pod-template-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/pod-template-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-pod-template-v1"><span class="">PodTemplate</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/replication-controller-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-replication-controller-v1"><span class="">ReplicationController</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-replica-set-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/replica-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-replica-set-v1"><span class="">ReplicaSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-deployment-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/deployment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-deployment-v1"><span class="">Deployment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/stateful-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-stateful-set-v1"><span class="">StatefulSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/controller-revision-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-controller-revision-v1"><span class="">ControllerRevision</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-daemon-set-v1"><span class="">DaemonSet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-job-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-job-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-job-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-job-v1"><span class="">Job</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-cron-job-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/cron-job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-cron-job-v1"><span class="">CronJob</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1"><span class="">HorizontalPodAutoscaler</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"><a href="/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2"><span class="">HorizontalPodAutoscaler</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-priority-class-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"><a href="/docs/reference/kubernetes-api/workload-resources/priority-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-priority-class-v1"><span class="">PriorityClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"><a href="/docs/reference/kubernetes-api/workload-resources/pod-scheduling-context-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2"><span class="">PodSchedulingContext v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"><a href="/docs/reference/kubernetes-api/workload-resources/resource-claim-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2"><span class="">ResourceClaim v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"><a href="/docs/reference/kubernetes-api/workload-resources/resource-claim-template-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2"><span class="">ResourceClaimTemplate v1alpha2</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"/> <label for="m-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"><a href="/docs/reference/kubernetes-api/workload-resources/resource-class-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2"><span class="">ResourceClass v1alpha2</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-service-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-check"><a href="/docs/reference/kubernetes-api/service-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-service-resources"><span class="">Service Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-service-resources-service-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-service-v1-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-service-v1-check"><a href="/docs/reference/kubernetes-api/service-resources/service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-service-resources-service-v1"><span class="">Service</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-service-resources-endpoints-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"><a href="/docs/reference/kubernetes-api/service-resources/endpoints-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-service-resources-endpoints-v1"><span class="">Endpoints</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"><a href="/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1"><span class="">EndpointSlice</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-service-resources-ingress-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-ingress-v1-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-ingress-v1-check"><a href="/docs/reference/kubernetes-api/service-resources/ingress-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-service-resources-ingress-v1"><span class="">Ingress</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-service-resources-ingress-class-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"/> <label for="m-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"><a href="/docs/reference/kubernetes-api/service-resources/ingress-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-service-resources-ingress-class-v1"><span class="">IngressClass</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-config-and-storage-resources"><span class="">Config and Storage Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1"><span class="">ConfigMap</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1"><span class="">Secret</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume"><span class="">Volume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1"><span class="">PersistentVolumeClaim</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1"><span class="">PersistentVolume</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1"><span class="">StorageClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1"><span class="">VolumeAttachment</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1"><span class="">CSIDriver</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1"><span class="">CSINode</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"/> <label for="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"><a href="/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1"><span class="">CSIStorageCapacity</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-authentication-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-check"><a href="/docs/reference/kubernetes-api/authentication-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-authentication-resources"><span class="">Authentication Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-service-account-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/service-account-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-service-account-v1"><span class="">ServiceAccount</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-token-request-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/token-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-token-request-v1"><span class="">TokenRequest</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-token-review-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/token-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-token-review-v1"><span class="">TokenReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1"><span class="">CertificateSigningRequest</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/cluster-trust-bundle-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1"><span class="">ClusterTrustBundle v1alpha1</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1beta1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1beta1-check"/> <label for="m-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1beta1-check"><a href="/docs/reference/kubernetes-api/authentication-resources/self-subject-review-v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1beta1"><span class="">SelfSubjectReview v1beta1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-authorization-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-check"><a href="/docs/reference/kubernetes-api/authorization-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-authorization-resources"><span class="">Authorization Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1"><span class="">LocalSubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1"><span class="">SelfSubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1"><span class="">SelfSubjectRulesReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1"><span class="">SubjectAccessReview</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-review-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-review-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-self-subject-review-v1alpha1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/self-subject-review-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-self-subject-review-v1alpha1"><span class="">SelfSubjectReview v1alpha1</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1"><span class="">ClusterRole</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1"><span class="">ClusterRoleBinding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-role-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-role-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-role-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-role-v1"><span class="">Role</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"/> <label for="m-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"><a href="/docs/reference/kubernetes-api/authorization-resources/role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-authorization-resources-role-binding-v1"><span class="">RoleBinding</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-policy-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-check"><a href="/docs/reference/kubernetes-api/policy-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-policy-resources"><span class="">Policy Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-policy-resources-limit-range-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"><a href="/docs/reference/kubernetes-api/policy-resources/limit-range-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-policy-resources-limit-range-v1"><span class="">LimitRange</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"><a href="/docs/reference/kubernetes-api/policy-resources/resource-quota-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-policy-resources-resource-quota-v1"><span class="">ResourceQuota</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-policy-resources-network-policy-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"><a href="/docs/reference/kubernetes-api/policy-resources/network-policy-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-policy-resources-network-policy-v1"><span class="">NetworkPolicy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"><a href="/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1"><span class="">PodDisruptionBudget</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"><a href="/docs/reference/kubernetes-api/policy-resources/ip-address-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1"><span class="">IPAddress v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-extend-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-check"><a href="/docs/reference/kubernetes-api/extend-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-extend-resources"><span class="">Extend Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"><a href="/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1"><span class="">CustomResourceDefinition</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"><a href="/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1"><span class="">MutatingWebhookConfiguration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"><a href="/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1"><span class="">ValidatingWebhookConfiguration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1alpha1-check"><a href="/docs/reference/kubernetes-api/extend-resources/validating-admission-policy-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1alpha1"><span class="">ValidatingAdmissionPolicy v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-cluster-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-check"><a href="/docs/reference/kubernetes-api/cluster-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-cluster-resources"><span class="">Cluster Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-node-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-node-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-node-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-node-v1"><span class="">Node</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-namespace-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/namespace-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-namespace-v1"><span class="">Namespace</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-event-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-event-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-event-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/event-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-event-v1"><span class="">Event</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-api-service-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/api-service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-api-service-v1"><span class="">APIService</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-lease-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/lease-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-lease-v1"><span class="">Lease</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1"><span class="">RuntimeClass</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"><a href="/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3"><span class="">FlowSchema v1beta3</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"><a href="/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3"><span class="">PriorityLevelConfiguration v1beta3</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-binding-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-binding-v1"><span class="">Binding</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-component-status-v1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/component-status-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-component-status-v1"><span class="">ComponentStatus</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"><a href="/docs/reference/kubernetes-api/cluster-resources/cluster-cidr-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1"><span class="">ClusterCIDR v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-common-definitions-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-check"><a href="/docs/reference/kubernetes-api/common-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-common-definitions"><span class="">Common Definitions</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-delete-options-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-delete-options-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-delete-options-check"><a href="/docs/reference/kubernetes-api/common-definitions/delete-options/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-delete-options"><span class="">DeleteOptions</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-label-selector-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-label-selector-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-label-selector-check"><a href="/docs/reference/kubernetes-api/common-definitions/label-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-label-selector"><span class="">LabelSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-list-meta-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-list-meta-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-list-meta-check"><a href="/docs/reference/kubernetes-api/common-definitions/list-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-list-meta"><span class="">ListMeta</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-local-object-reference-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"><a href="/docs/reference/kubernetes-api/common-definitions/local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-local-object-reference"><span class="">LocalObjectReference</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"><a href="/docs/reference/kubernetes-api/common-definitions/node-selector-requirement/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-node-selector-requirement"><span class="">NodeSelectorRequirement</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-object-field-selector-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"><a href="/docs/reference/kubernetes-api/common-definitions/object-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-object-field-selector"><span class="">ObjectFieldSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-object-meta-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-object-meta-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-object-meta-check"><a href="/docs/reference/kubernetes-api/common-definitions/object-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-object-meta"><span class="">ObjectMeta</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-object-reference-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-object-reference-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-object-reference-check"><a href="/docs/reference/kubernetes-api/common-definitions/object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-object-reference"><span class="">ObjectReference</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-patch-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-patch-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-patch-check"><a href="/docs/reference/kubernetes-api/common-definitions/patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-patch"><span class="">Patch</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-quantity-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-quantity-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-quantity-check"><a href="/docs/reference/kubernetes-api/common-definitions/quantity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-quantity"><span class="">Quantity</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-resource-field-selector-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"><a href="/docs/reference/kubernetes-api/common-definitions/resource-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-resource-field-selector"><span class="">ResourceFieldSelector</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-status-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-status-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-status-check"><a href="/docs/reference/kubernetes-api/common-definitions/status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-status"><span class="">Status</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"/> <label for="m-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"><a href="/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference"><span class="">TypedLocalObjectReference</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubernetes-api-other-resources-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-other-resources-check"/> <label for="m-docs-reference-kubernetes-api-other-resources-check"><a href="/docs/reference/kubernetes-api/other-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubernetes-api-other-resources"><span class="">Other Resources</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-check"/> <label for="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-check"><a href="/docs/reference/kubernetes-api/other-resources/validating-admission-policy-binding-list-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1"><span class="">ValidatingAdmissionPolicyBindingList v1alpha1</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-common-parameters-common-parameters-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-common-parameters-common-parameters-check"/> <label for="m-docs-reference-kubernetes-api-common-parameters-common-parameters-check"><a href="/docs/reference/kubernetes-api/common-parameters/common-parameters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-common-parameters-common-parameters"><span class="">Common Parameters</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-instrumentation-li"> <input type="checkbox" id="m-docs-reference-instrumentation-check"/> <label for="m-docs-reference-instrumentation-check"><a href="/docs/reference/instrumentation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-instrumentation"><span class="">Instrumentation</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-slis-li"> <input type="checkbox" id="m-docs-reference-instrumentation-slis-check"/> <label for="m-docs-reference-instrumentation-slis-check"><a href="/docs/reference/instrumentation/slis/" title="Kubernetes Component SLI Metrics" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-slis"><span class="">Service Level Indicator Metrics</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-cri-pod-container-metrics-li"> <input type="checkbox" id="m-docs-reference-instrumentation-cri-pod-container-metrics-check"/> <label for="m-docs-reference-instrumentation-cri-pod-container-metrics-check"><a href="/docs/reference/instrumentation/cri-pod-container-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-cri-pod-container-metrics"><span class="">CRI Pod & Container Metrics</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-node-metrics-li"> <input type="checkbox" id="m-docs-reference-instrumentation-node-metrics-check"/> <label for="m-docs-reference-instrumentation-node-metrics-check"><a href="/docs/reference/instrumentation/node-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-node-metrics"><span class="">Node metrics data</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-metrics-li"> <input type="checkbox" id="m-docs-reference-instrumentation-metrics-check"/> <label for="m-docs-reference-instrumentation-metrics-check"><a href="/docs/reference/instrumentation/metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-metrics"><span class="">Kubernetes Metrics Reference</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-issues-security-li"> <input type="checkbox" id="m-docs-reference-issues-security-check"/> <label for="m-docs-reference-issues-security-check"><a href="/docs/reference/issues-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-issues-security"><span class="">Kubernetes Issues and Security</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-issues-security-issues-li"> <input type="checkbox" id="m-docs-reference-issues-security-issues-check"/> <label for="m-docs-reference-issues-security-issues-check"><a href="/docs/reference/issues-security/issues/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-issues-security-issues"><span class="">Kubernetes Issue Tracker</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-issues-security-security-li"> <input type="checkbox" id="m-docs-reference-issues-security-security-check"/> <label for="m-docs-reference-issues-security-security-check"><a href="/docs/reference/issues-security/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-issues-security-security"><span class="">Kubernetes Security and Disclosure Information</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-issues-security-official-cve-feed-li"> <input type="checkbox" id="m-docs-reference-issues-security-official-cve-feed-check"/> <label for="m-docs-reference-issues-security-official-cve-feed-check"><a href="/docs/reference/issues-security/official-cve-feed/" title="Official CVE Feed" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-issues-security-official-cve-feed"><span class="">CVE feed</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-node-li"> <input type="checkbox" id="m-docs-reference-node-check"/> <label for="m-docs-reference-node-check"><a href="/docs/reference/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-node"><span class="">Node Reference Information</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-node-kubelet-checkpoint-api-li"> <input type="checkbox" id="m-docs-reference-node-kubelet-checkpoint-api-check"/> <label for="m-docs-reference-node-kubelet-checkpoint-api-check"><a href="/docs/reference/node/kubelet-checkpoint-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-node-kubelet-checkpoint-api"><span class="">Kubelet Checkpoint API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-li"> <input type="checkbox" id="m-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"/> <label for="m-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"><a href="/docs/reference/node/topics-on-dockershim-and-cri-compatible-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes"><span class="">Articles on dockershim Removal and on Using CRI-compatible Runtimes</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-node-node-labels-li"> <input type="checkbox" id="m-docs-reference-node-node-labels-check"/> <label for="m-docs-reference-node-node-labels-check"><a href="/docs/reference/node/node-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-node-node-labels"><span class="">Node Labels Populated By The Kubelet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-node-device-plugin-api-versions-li"> <input type="checkbox" id="m-docs-reference-node-device-plugin-api-versions-check"/> <label for="m-docs-reference-node-device-plugin-api-versions-check"><a href="/docs/reference/node/device-plugin-api-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-node-device-plugin-api-versions"><span class="">Kubelet Device Manager API Versions</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-networking-li"> <input type="checkbox" id="m-docs-reference-networking-check"/> <label for="m-docs-reference-networking-check"><a href="/docs/reference/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-networking"><span class="">Networking Reference</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-networking-service-protocols-li"> <input type="checkbox" id="m-docs-reference-networking-service-protocols-check"/> <label for="m-docs-reference-networking-service-protocols-check"><a href="/docs/reference/networking/service-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-networking-service-protocols"><span class="">Protocols for Services</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-networking-ports-and-protocols-li"> <input type="checkbox" id="m-docs-reference-networking-ports-and-protocols-check"/> <label for="m-docs-reference-networking-ports-and-protocols-check"><a href="/docs/reference/networking/ports-and-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-networking-ports-and-protocols"><span class="">Ports and Protocols</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-networking-virtual-ips-li"> <input type="checkbox" id="m-docs-reference-networking-virtual-ips-check"/> <label for="m-docs-reference-networking-virtual-ips-check"><a href="/docs/reference/networking/virtual-ips/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-networking-virtual-ips"><span class="">Virtual IPs and Service Proxies</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-setup-tools-li"> <input type="checkbox" id="m-docs-reference-setup-tools-check"/> <label for="m-docs-reference-setup-tools-check"><a href="/docs/reference/setup-tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-setup-tools"><span class="">Setup tools</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-setup-tools-kubeadm-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-check"/> <label for="m-docs-reference-setup-tools-kubeadm-check"><a href="/docs/reference/setup-tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-setup-tools-kubeadm"><span class="">Kubeadm</span></a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-init-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-init/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init"><span class="">kubeadm init</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-join-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-join/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join"><span class="">kubeadm join</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade"><span class="">kubeadm upgrade</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-config-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-config-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-config-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-config"><span class="">kubeadm config</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-reset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset"><span class="">kubeadm reset</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-token-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-token-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-token-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-token/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-token"><span class="">kubeadm token</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-version-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-version-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-version-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-version/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-version"><span class="">kubeadm version</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-alpha-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-alpha/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-alpha"><span class="">kubeadm alpha</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-certs"><span class="">kubeadm certs</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-init-phase"><span class="">kubeadm init phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-join-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-join-phase"><span class="">kubeadm join phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig"><span class="">kubeadm kubeconfig</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-reset-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase"><span class="">kubeadm reset phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"/> <label for="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"><a href="/docs/reference/setup-tools/kubeadm/kubeadm-upgrade-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase"><span class="">kubeadm upgrade phase</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-setup-tools-kubeadm-implementation-details-li"> <input type="checkbox" id="m-docs-reference-setup-tools-kubeadm-implementation-details-check"/> <label for="m-docs-reference-setup-tools-kubeadm-implementation-details-check"><a href="/docs/reference/setup-tools/kubeadm/implementation-details/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-setup-tools-kubeadm-implementation-details"><span class="">Implementation details</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-kubectl-li"> <input type="checkbox" id="m-docs-reference-kubectl-check"/> <label for="m-docs-reference-kubectl-check"><a href="/docs/reference/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-kubectl"><span class="">Command line tool (kubectl)</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-cheatsheet-li"> <input type="checkbox" id="m-docs-reference-kubectl-cheatsheet-check"/> <label for="m-docs-reference-kubectl-cheatsheet-check"><a href="/docs/reference/kubectl/cheatsheet/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-cheatsheet"><span class="">kubectl Cheat Sheet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-kubectl-cmds-li"> <input type="checkbox" id="m-docs-reference-kubectl-kubectl-cmds-check"/> <label for="m-docs-reference-kubectl-kubectl-cmds-check"><a href="/docs/reference/kubectl/kubectl-cmds/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-kubectl-cmds"><span class="">kubectl Commands</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-kubectl-li"> <input type="checkbox" id="m-docs-reference-kubectl-kubectl-check"/> <label for="m-docs-reference-kubectl-kubectl-check"><a href="/docs/reference/kubectl/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-kubectl"><span class="">kubectl</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-jsonpath-li"> <input type="checkbox" id="m-docs-reference-kubectl-jsonpath-check"/> <label for="m-docs-reference-kubectl-jsonpath-check"><a href="/docs/reference/kubectl/jsonpath/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-jsonpath"><span class="">JSONPath Support</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-docker-cli-to-kubectl-li"> <input type="checkbox" id="m-docs-reference-kubectl-docker-cli-to-kubectl-check"/> <label for="m-docs-reference-kubectl-docker-cli-to-kubectl-check"><a href="/docs/reference/kubectl/docker-cli-to-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-docker-cli-to-kubectl"><span class="">kubectl for Docker Users</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubectl-conventions-li"> <input type="checkbox" id="m-docs-reference-kubectl-conventions-check"/> <label for="m-docs-reference-kubectl-conventions-check"><a href="/docs/reference/kubectl/conventions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubectl-conventions"><span class="">kubectl Usage Conventions</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-command-line-tools-reference-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-check"/> <label for="m-docs-reference-command-line-tools-reference-check"><a href="/docs/reference/command-line-tools-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-command-line-tools-reference"><span class="">Component tools</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-feature-gates-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-feature-gates-check"/> <label for="m-docs-reference-command-line-tools-reference-feature-gates-check"><a href="/docs/reference/command-line-tools-reference/feature-gates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-feature-gates"><span class="">Feature Gates</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-feature-gates-removed-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-feature-gates-removed-check"/> <label for="m-docs-reference-command-line-tools-reference-feature-gates-removed-check"><a href="/docs/reference/command-line-tools-reference/feature-gates-removed/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-feature-gates-removed"><span class="">Feature Gates (removed)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-kubelet-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-kubelet-check"/> <label for="m-docs-reference-command-line-tools-reference-kubelet-check"><a href="/docs/reference/command-line-tools-reference/kubelet/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-kubelet"><span class="">kubelet</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-kube-apiserver-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-kube-apiserver-check"/> <label for="m-docs-reference-command-line-tools-reference-kube-apiserver-check"><a href="/docs/reference/command-line-tools-reference/kube-apiserver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-kube-apiserver"><span class="">kube-apiserver</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-kube-controller-manager-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-kube-controller-manager-check"/> <label for="m-docs-reference-command-line-tools-reference-kube-controller-manager-check"><a href="/docs/reference/command-line-tools-reference/kube-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-kube-controller-manager"><span class="">kube-controller-manager</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-kube-proxy-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-kube-proxy-check"/> <label for="m-docs-reference-command-line-tools-reference-kube-proxy-check"><a href="/docs/reference/command-line-tools-reference/kube-proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-kube-proxy"><span class="">kube-proxy</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-command-line-tools-reference-kube-scheduler-li"> <input type="checkbox" id="m-docs-reference-command-line-tools-reference-kube-scheduler-check"/> <label for="m-docs-reference-command-line-tools-reference-kube-scheduler-check"><a href="/docs/reference/command-line-tools-reference/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-command-line-tools-reference-kube-scheduler"><span class="">kube-scheduler</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-config-api-li"> <input type="checkbox" id="m-docs-reference-config-api-check"/> <label for="m-docs-reference-config-api-check"><a href="/docs/reference/config-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-config-api"><span class="">Configuration APIs</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-client-authentication-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-client-authentication-v1-check"/> <label for="m-docs-reference-config-api-client-authentication-v1-check"><a href="/docs/reference/config-api/client-authentication.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-client-authentication-v1"><span class="">Client Authentication (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-client-authentication-v1beta1-li"> <input type="checkbox" id="m-docs-reference-config-api-client-authentication-v1beta1-check"/> <label for="m-docs-reference-config-api-client-authentication-v1beta1-check"><a href="/docs/reference/config-api/client-authentication.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-client-authentication-v1beta1"><span class="">Client Authentication (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"/> <label for="m-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"><a href="/docs/reference/config-api/apiserver-eventratelimit.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-eventratelimit-v1alpha1"><span class="">Event Rate Limit Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-imagepolicy-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-imagepolicy-v1alpha1-check"/> <label for="m-docs-reference-config-api-imagepolicy-v1alpha1-check"><a href="/docs/reference/config-api/imagepolicy.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-imagepolicy-v1alpha1"><span class="">Image Policy API (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-admission-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-admission-v1-check"/> <label for="m-docs-reference-config-api-apiserver-admission-v1-check"><a href="/docs/reference/config-api/apiserver-admission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-admission-v1"><span class="">kube-apiserver Admission (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-audit-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-audit-v1-check"/> <label for="m-docs-reference-config-api-apiserver-audit-v1-check"><a href="/docs/reference/config-api/apiserver-audit.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-audit-v1"><span class="">kube-apiserver Audit Configuration (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-config-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-config-v1-check"/> <label for="m-docs-reference-config-api-apiserver-config-v1-check"><a href="/docs/reference/config-api/apiserver-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-config-v1"><span class="">kube-apiserver Configuration (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-config-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-config-v1alpha1-check"/> <label for="m-docs-reference-config-api-apiserver-config-v1alpha1-check"><a href="/docs/reference/config-api/apiserver-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-config-v1alpha1"><span class="">kube-apiserver Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-config-v1beta1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-config-v1beta1-check"/> <label for="m-docs-reference-config-api-apiserver-config-v1beta1-check"><a href="/docs/reference/config-api/apiserver-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-config-v1beta1"><span class="">kube-apiserver Configuration (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-encryption-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-encryption-v1-check"/> <label for="m-docs-reference-config-api-apiserver-encryption-v1-check"><a href="/docs/reference/config-api/apiserver-encryption.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-encryption-v1"><span class="">kube-apiserver Encryption Configuration (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"/> <label for="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"><a href="/docs/reference/config-api/kube-controller-manager-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1"><span class="">kube-controller-manager Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-proxy-config-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-proxy-config-v1alpha1-check"/> <label for="m-docs-reference-config-api-kube-proxy-config-v1alpha1-check"><a href="/docs/reference/config-api/kube-proxy-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-proxy-config-v1alpha1"><span class="">kube-proxy Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-scheduler-config-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-scheduler-config-v1-check"/> <label for="m-docs-reference-config-api-kube-scheduler-config-v1-check"><a href="/docs/reference/config-api/kube-scheduler-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-scheduler-config-v1"><span class="">kube-scheduler Configuration (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-scheduler-config-v1beta2-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-scheduler-config-v1beta2-check"/> <label for="m-docs-reference-config-api-kube-scheduler-config-v1beta2-check"><a href="/docs/reference/config-api/kube-scheduler-config.v1beta2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-scheduler-config-v1beta2"><span class="">kube-scheduler Configuration (v1beta2)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-scheduler-config-v1beta3-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-scheduler-config-v1beta3-check"/> <label for="m-docs-reference-config-api-kube-scheduler-config-v1beta3-check"><a href="/docs/reference/config-api/kube-scheduler-config.v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-scheduler-config-v1beta3"><span class="">kube-scheduler Configuration (v1beta3)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubeadm-config-v1beta3-li"> <input type="checkbox" id="m-docs-reference-config-api-kubeadm-config-v1beta3-check"/> <label for="m-docs-reference-config-api-kubeadm-config-v1beta3-check"><a href="/docs/reference/config-api/kubeadm-config.v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubeadm-config-v1beta3"><span class="">kubeadm Configuration (v1beta3)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubeconfig-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubeconfig-v1-check"/> <label for="m-docs-reference-config-api-kubeconfig-v1-check"><a href="/docs/reference/config-api/kubeconfig.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubeconfig-v1"><span class="">kubeconfig (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-config-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-config-v1-check"/> <label for="m-docs-reference-config-api-kubelet-config-v1-check"><a href="/docs/reference/config-api/kubelet-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-config-v1"><span class="">Kubelet Configuration (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-config-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-config-v1alpha1-check"/> <label for="m-docs-reference-config-api-kubelet-config-v1alpha1-check"><a href="/docs/reference/config-api/kubelet-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-config-v1alpha1"><span class="">Kubelet Configuration (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-config-v1beta1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-config-v1beta1-check"/> <label for="m-docs-reference-config-api-kubelet-config-v1beta1-check"><a href="/docs/reference/config-api/kubelet-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-config-v1beta1"><span class="">Kubelet Configuration (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-credentialprovider-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-credentialprovider-v1-check"/> <label for="m-docs-reference-config-api-kubelet-credentialprovider-v1-check"><a href="/docs/reference/config-api/kubelet-credentialprovider.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-credentialprovider-v1"><span class="">Kubelet CredentialProvider (v1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-check"/> <label for="m-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-check"><a href="/docs/reference/config-api/kubelet-credentialprovider.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-credentialprovider-v1alpha1"><span class="">Kubelet CredentialProvider (v1alpha1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubelet-credentialprovider-v1beta1-li"> <input type="checkbox" id="m-docs-reference-config-api-kubelet-credentialprovider-v1beta1-check"/> <label for="m-docs-reference-config-api-kubelet-credentialprovider-v1beta1-check"><a href="/docs/reference/config-api/kubelet-credentialprovider.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubelet-credentialprovider-v1beta1"><span class="">Kubelet CredentialProvider (v1beta1)</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-apiserver-webhookadmission-v1-li"> <input type="checkbox" id="m-docs-reference-config-api-apiserver-webhookadmission-v1-check"/> <label for="m-docs-reference-config-api-apiserver-webhookadmission-v1-check"><a href="/docs/reference/config-api/apiserver-webhookadmission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-apiserver-webhookadmission-v1"><span class="">WebhookAdmission Configuration (v1)</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-scheduling-li"> <input type="checkbox" id="m-docs-reference-scheduling-check"/> <label for="m-docs-reference-scheduling-check"><a href="/docs/reference/scheduling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-scheduling"><span class="">Scheduling</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-scheduling-config-li"> <input type="checkbox" id="m-docs-reference-scheduling-config-check"/> <label for="m-docs-reference-scheduling-config-check"><a href="/docs/reference/scheduling/config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-scheduling-config"><span class="">Scheduler Configuration</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-scheduling-policies-li"> <input type="checkbox" id="m-docs-reference-scheduling-policies-check"/> <label for="m-docs-reference-scheduling-policies-check"><a href="/docs/reference/scheduling/policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-scheduling-policies"><span class="">Scheduling Policies</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-reference-tools-li"> <input type="checkbox" id="m-docs-reference-tools-check"/> <label for="m-docs-reference-tools-check"><a href="/docs/reference/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-reference-tools"><span class="">Other Tools</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-tools-map-crictl-dockercli-li"> <input type="checkbox" id="m-docs-reference-tools-map-crictl-dockercli-check"/> <label for="m-docs-reference-tools-map-crictl-dockercli-check"><a href="/docs/reference/tools/map-crictl-dockercli/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-tools-map-crictl-dockercli"><span class="">Mapping from dockercli to crictl</span></a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-li"> <input type="checkbox" id="m-docs-contribute-check"/> <label for="m-docs-contribute-check"><a href="/docs/contribute/" title="Contribute to K8s docs" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute"><span class="">Contribute</span></a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-suggesting-improvements-li"> <input type="checkbox" id="m-docs-contribute-suggesting-improvements-check"/> <label for="m-docs-contribute-suggesting-improvements-check"><a href="/docs/contribute/suggesting-improvements/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-suggesting-improvements"><span class="">Suggesting content improvements</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-new-content-li"> <input type="checkbox" id="m-docs-contribute-new-content-check"/> <label for="m-docs-contribute-new-content-check"><a href="/docs/contribute/new-content/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute-new-content"><span class="">Contributing new content</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-new-content-open-a-pr-li"> <input type="checkbox" id="m-docs-contribute-new-content-open-a-pr-check"/> <label for="m-docs-contribute-new-content-open-a-pr-check"><a href="/docs/contribute/new-content/open-a-pr/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-new-content-open-a-pr"><span class="">Opening a pull request</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-new-content-new-features-li"> <input type="checkbox" id="m-docs-contribute-new-content-new-features-check"/> <label for="m-docs-contribute-new-content-new-features-check"><a href="/docs/contribute/new-content/new-features/" title="Documenting a feature for a release" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-new-content-new-features"><span class="">Documenting for a release</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-new-content-blogs-case-studies-li"> <input type="checkbox" id="m-docs-contribute-new-content-blogs-case-studies-check"/> <label for="m-docs-contribute-new-content-blogs-case-studies-check"><a href="/docs/contribute/new-content/blogs-case-studies/" title="Submitting blog posts and case studies" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-new-content-blogs-case-studies"><span class="">Blogs and case studies</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-review-li"> <input type="checkbox" id="m-docs-contribute-review-check"/> <label for="m-docs-contribute-review-check"><a href="/docs/contribute/review/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute-review"><span class="">Reviewing changes</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-review-reviewing-prs-li"> <input type="checkbox" id="m-docs-contribute-review-reviewing-prs-check"/> <label for="m-docs-contribute-review-reviewing-prs-check"><a href="/docs/contribute/review/reviewing-prs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-review-reviewing-prs"><span class="">Reviewing pull requests</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-review-for-approvers-li"> <input type="checkbox" id="m-docs-contribute-review-for-approvers-check"/> <label for="m-docs-contribute-review-for-approvers-check"><a href="/docs/contribute/review/for-approvers/" title="Reviewing for approvers and reviewers" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-review-for-approvers"><span class="">For approvers and reviewers</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-localization-li"> <input type="checkbox" id="m-docs-contribute-localization-check"/> <label for="m-docs-contribute-localization-check"><a href="/docs/contribute/localization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-localization"><span class="">Localizing Kubernetes documentation</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-participate-li"> <input type="checkbox" id="m-docs-contribute-participate-check"/> <label for="m-docs-contribute-participate-check"><a href="/docs/contribute/participate/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute-participate"><span class="">Participating in SIG Docs</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-participate-roles-and-responsibilities-li"> <input type="checkbox" id="m-docs-contribute-participate-roles-and-responsibilities-check"/> <label for="m-docs-contribute-participate-roles-and-responsibilities-check"><a href="/docs/contribute/participate/roles-and-responsibilities/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-participate-roles-and-responsibilities"><span class="">Roles and responsibilities</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-participate-pr-wranglers-li"> <input type="checkbox" id="m-docs-contribute-participate-pr-wranglers-check"/> <label for="m-docs-contribute-participate-pr-wranglers-check"><a href="/docs/contribute/participate/pr-wranglers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-participate-pr-wranglers"><span class="">PR wranglers</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-style-li"> <input type="checkbox" id="m-docs-contribute-style-check"/> <label for="m-docs-contribute-style-check"><a href="/docs/contribute/style/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute-style"><span class="">Documentation style overview</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-content-guide-li"> <input type="checkbox" id="m-docs-contribute-style-content-guide-check"/> <label for="m-docs-contribute-style-content-guide-check"><a href="/docs/contribute/style/content-guide/" title="Documentation Content Guide" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-content-guide"><span class="">Content guide</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-style-guide-li"> <input type="checkbox" id="m-docs-contribute-style-style-guide-check"/> <label for="m-docs-contribute-style-style-guide-check"><a href="/docs/contribute/style/style-guide/" title="Documentation Style Guide" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-style-guide"><span class="">Style guide</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-diagram-guide-li"> <input type="checkbox" id="m-docs-contribute-style-diagram-guide-check"/> <label for="m-docs-contribute-style-diagram-guide-check"><a href="/docs/contribute/style/diagram-guide/" title="Diagram Guide" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-diagram-guide"><span class="">Diagram guide</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-write-new-topic-li"> <input type="checkbox" id="m-docs-contribute-style-write-new-topic-check"/> <label for="m-docs-contribute-style-write-new-topic-check"><a href="/docs/contribute/style/write-new-topic/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-write-new-topic"><span class="">Writing a new topic</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-page-content-types-li"> <input type="checkbox" id="m-docs-contribute-style-page-content-types-check"/> <label for="m-docs-contribute-style-page-content-types-check"><a href="/docs/contribute/style/page-content-types/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-page-content-types"><span class="">Page content types</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-content-organization-li"> <input type="checkbox" id="m-docs-contribute-style-content-organization-check"/> <label for="m-docs-contribute-style-content-organization-check"><a href="/docs/contribute/style/content-organization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-content-organization"><span class="">Content organization</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-style-hugo-shortcodes-li"> <input type="checkbox" id="m-docs-contribute-style-hugo-shortcodes-check"/> <label for="m-docs-contribute-style-hugo-shortcodes-check"><a href="/docs/contribute/style/hugo-shortcodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-style-hugo-shortcodes"><span class="">Custom Hugo Shortcodes</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-docs-contribute-generate-ref-docs-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-check"/> <label for="m-docs-contribute-generate-ref-docs-check"><a href="/docs/contribute/generate-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-docs-contribute-generate-ref-docs"><span class="">Updating Reference Documentation</span></a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-quickstart-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-quickstart-check"/> <label for="m-docs-contribute-generate-ref-docs-quickstart-check"><a href="/docs/contribute/generate-ref-docs/quickstart/" title="Reference Documentation Quickstart" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-quickstart"><span class="">Quickstart</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-contribute-upstream-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-contribute-upstream-check"/> <label for="m-docs-contribute-generate-ref-docs-contribute-upstream-check"><a href="/docs/contribute/generate-ref-docs/contribute-upstream/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-contribute-upstream"><span class="">Contributing to the Upstream Kubernetes Code</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-kubernetes-api-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-kubernetes-api-check"/> <label for="m-docs-contribute-generate-ref-docs-kubernetes-api-check"><a href="/docs/contribute/generate-ref-docs/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-kubernetes-api"><span class="">Generating Reference Documentation for the Kubernetes API</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-kubectl-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-kubectl-check"/> <label for="m-docs-contribute-generate-ref-docs-kubectl-check"><a href="/docs/contribute/generate-ref-docs/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-kubectl"><span class="">Generating Reference Documentation for kubectl Commands</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-kubernetes-components-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-kubernetes-components-check"/> <label for="m-docs-contribute-generate-ref-docs-kubernetes-components-check"><a href="/docs/contribute/generate-ref-docs/kubernetes-components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-kubernetes-components"><span class="">Generating Reference Pages for Kubernetes Components and Tools</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-generate-ref-docs-prerequisites-ref-docs-li"> <input type="checkbox" id="m-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"/> <label for="m-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"><a href="/docs/contribute/generate-ref-docs/prerequisites-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-generate-ref-docs-prerequisites-ref-docs"><span class=""></span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-advanced-li"> <input type="checkbox" id="m-docs-contribute-advanced-check"/> <label for="m-docs-contribute-advanced-check"><a href="/docs/contribute/advanced/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-advanced"><span class="">Advanced contributing</span></a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-contribute-analytics-li"> <input type="checkbox" id="m-docs-contribute-analytics-check"/> <label for="m-docs-contribute-analytics-check"><a href="/docs/contribute/analytics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-contribute-analytics"><span class="">Viewing Site Analytics</span></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-test-li"> <input type="checkbox" id="m-docs-test-check"/> <label for="m-docs-test-check"><a href="/docs/test/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-test"><span class="">Docs smoke test page</span></a></label> </li> </ul> </li> </ul> </nav> </div> </div> <main class="col-12 col-md-9 col-xl-8 pl-md-5" role="main"> <nav aria-label="breadcrumb" class="td-breadcrumbs"> <ol class="breadcrumb"> <li class="breadcrumb-item"> <a href="https://kubernetes.io/docs/">Kubernetes Documentation</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/docs/tutorials/">Tutorials</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/docs/tutorials/security/">Security</a> </li> <li class="breadcrumb-item active" aria-current="page"> <a href="https://kubernetes.io/docs/tutorials/security/seccomp/">Restrict a Container's Syscalls with seccomp</a> </li> </ol> </nav> <section id="deprecation-warning"> <div class="content deprecation-warning pageinfo"> <h3> You are viewing documentation for Kubernetes version: v1.27 </h3> <p> Kubernetes v1.27 documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date information, see the <a href="https://kubernetes.io/docs/home/">latest version.</a> </p> </div> </section> <div class="td-content"> <h1>Restrict a Container's Syscalls with seccomp</h1> <!-- overview --> <div style="margin-top: 10px; margin-bottom: 10px;"> <b>FEATURE STATE:</b> <code>Kubernetes v1.19 [stable]</code> </div> <p>Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel. Kubernetes lets you automatically apply seccomp profiles loaded onto a <a class='glossary-tooltip' title='A node is a worker machine in Kubernetes.' data-toggle='tooltip' data-placement='top' href='/docs/concepts/architecture/nodes/' target='_blank' aria-label='node'>node</a> to your Pods and containers.</p> <p>Identifying the privileges required for your workloads can be difficult. In this tutorial, you will go through how to load seccomp profiles into a local Kubernetes cluster, how to apply them to a Pod, and how you can begin to craft profiles that give only the necessary privileges to your container processes.</p> <h2 id="objectives">Objectives</h2> <ul> <li>Learn how to load seccomp profiles on a node</li> <li>Learn how to apply a seccomp profile to a container</li> <li>Observe auditing of syscalls made by a container process</li> <li>Observe behavior when a missing profile is specified</li> <li>Observe a violation of a seccomp profile</li> <li>Learn how to create fine-grained seccomp profiles</li> <li>Learn how to apply a container runtime default seccomp profile</li> </ul> <h2 id="before-you-begin">Before you begin</h2> <p>In order to complete all steps in this tutorial, you must install <a href="/docs/tasks/tools/#kind">kind</a> and <a href="/docs/tasks/tools/#kubectl">kubectl</a>.</p> <p>The commands used in the tutorial assume that you are using <a href="https://www.docker.com/">Docker</a> as your container runtime. (The cluster that <code>kind</code> creates may use a different container runtime internally). You could also use <a href="https://podman.io/">Podman</a> but in that case, you would have to follow specific <a href="https://kind.sigs.k8s.io/docs/user/rootless/">instructions</a> in order to complete the tasks successfully.</p> <p>This tutorial shows some examples that are still beta (since v1.25) and others that use only generally available seccomp functionality. You should make sure that your cluster is <a href="https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version">configured correctly</a> for the version you are using.</p> <p>The tutorial also uses the <code>curl</code> tool for downloading examples to your computer. You can adapt the steps to use a different tool if you prefer.</p> <div class="alert alert-info note callout" role="alert"> <strong>Note:</strong> It is not possible to apply a seccomp profile to a container running with <code>privileged: true</code> set in the container's <code>securityContext</code>. Privileged containers always run as <code>Unconfined</code>. </div> <!-- steps --> <h2 id="download-profiles">Download example seccomp profiles</h2> <p>The contents of these profiles will be explored later on, but for now go ahead and download them into a directory named <code>profiles/</code> so that they can be loaded into the cluster.</p> <ul class="nav nav-tabs" id="tab-with-code" role="tablist"><li class="nav-item"><a data-toggle="tab" class="nav-link active" href="#tab-with-code-0" role="tab" aria-controls="tab-with-code-0" aria-selected="true">audit.json</a></li> <li class="nav-item"><a data-toggle="tab" class="nav-link" href="#tab-with-code-1" role="tab" aria-controls="tab-with-code-1">violation.json</a></li> <li class="nav-item"><a data-toggle="tab" class="nav-link" href="#tab-with-code-2" role="tab" aria-controls="tab-with-code-2">fine-grained.json</a></li></ul> <div class="tab-content" id="tab-with-code"><div id="tab-with-code-0" class="tab-pane show active" role="tabpanel" aria-labelledby="tab-with-code-0"> <p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/profiles/audit.json" download="pods/security/seccomp/profiles/audit.json"><code>pods/security/seccomp/profiles/audit.json</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-profiles-audit-json')" title="Copy pods/security/seccomp/profiles/audit.json to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-profiles-audit-json"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json"><span style="display:flex;"><span>{ </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"defaultAction"</span>: <span style="color:#b44">"SCMP_ACT_LOG"</span> </span></span><span style="display:flex;"><span>}</span></span></code></pre></div></div> </div> </div> <div id="tab-with-code-1" class="tab-pane" role="tabpanel" aria-labelledby="tab-with-code-1"> <p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/profiles/violation.json" download="pods/security/seccomp/profiles/violation.json"><code>pods/security/seccomp/profiles/violation.json</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-profiles-violation-json')" title="Copy pods/security/seccomp/profiles/violation.json to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-profiles-violation-json"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json"><span style="display:flex;"><span>{ </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"defaultAction"</span>: <span style="color:#b44">"SCMP_ACT_ERRNO"</span> </span></span><span style="display:flex;"><span>}</span></span></code></pre></div></div> </div> </div> <div id="tab-with-code-2" class="tab-pane" role="tabpanel" aria-labelledby="tab-with-code-2"> <p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/profiles/fine-grained.json" download="pods/security/seccomp/profiles/fine-grained.json"><code>pods/security/seccomp/profiles/fine-grained.json</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-profiles-fine-grained-json')" title="Copy pods/security/seccomp/profiles/fine-grained.json to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-profiles-fine-grained-json"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json"><span style="display:flex;"><span>{ </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"defaultAction"</span>: <span style="color:#b44">"SCMP_ACT_ERRNO"</span>, </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"architectures"</span>: [ </span></span><span style="display:flex;"><span> <span style="color:#b44">"SCMP_ARCH_X86_64"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"SCMP_ARCH_X86"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"SCMP_ARCH_X32"</span> </span></span><span style="display:flex;"><span> ], </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"syscalls"</span>: [ </span></span><span style="display:flex;"><span> { </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"names"</span>: [ </span></span><span style="display:flex;"><span> <span style="color:#b44">"accept4"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"epoll_wait"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"pselect6"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"futex"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"madvise"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"epoll_ctl"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"getsockname"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"setsockopt"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"vfork"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"mmap"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"read"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"write"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"close"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"arch_prctl"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"sched_getaffinity"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"munmap"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"brk"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"rt_sigaction"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"rt_sigprocmask"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"sigaltstack"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"gettid"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"clone"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"bind"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"socket"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"openat"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"readlinkat"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"exit_group"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"epoll_create1"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"listen"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"rt_sigreturn"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"sched_yield"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"clock_gettime"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"connect"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"dup2"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"epoll_pwait"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"execve"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"exit"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"fcntl"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"getpid"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"getuid"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"ioctl"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"mprotect"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"nanosleep"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"open"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"poll"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"recvfrom"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"sendto"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"set_tid_address"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"setitimer"</span>, </span></span><span style="display:flex;"><span> <span style="color:#b44">"writev"</span> </span></span><span style="display:flex;"><span> ], </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"action"</span>: <span style="color:#b44">"SCMP_ACT_ALLOW"</span> </span></span><span style="display:flex;"><span> } </span></span><span style="display:flex;"><span> ] </span></span><span style="display:flex;"><span>}</span></span></code></pre></div></div> </div> </div></div> <p>Run these commands:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>mkdir ./profiles </span></span><span style="display:flex;"><span>curl -L -o profiles/audit.json https://k8s.io/examples/pods/security/seccomp/profiles/audit.json </span></span><span style="display:flex;"><span>curl -L -o profiles/violation.json https://k8s.io/examples/pods/security/seccomp/profiles/violation.json </span></span><span style="display:flex;"><span>curl -L -o profiles/fine-grained.json https://k8s.io/examples/pods/security/seccomp/profiles/fine-grained.json </span></span><span style="display:flex;"><span>ls profiles </span></span></code></pre></div><p>You should see three profiles listed at the end of the final step:</p> <pre tabindex="0"><code>audit.json fine-grained.json violation.json </code></pre><h2 id="create-a-local-kubernetes-cluster-with-kind">Create a local Kubernetes cluster with kind</h2> <p>For simplicity, <a href="https://kind.sigs.k8s.io/">kind</a> can be used to create a single node cluster with the seccomp profiles loaded. Kind runs Kubernetes in Docker, so each node of the cluster is a container. This allows for files to be mounted in the filesystem of each container similar to loading files onto a node.</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/kind.yaml" download="pods/security/seccomp/kind.yaml"><code>pods/security/seccomp/kind.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-kind-yaml')" title="Copy pods/security/seccomp/kind.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-kind-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>kind.x-k8s.io/v1alpha4<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Cluster<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">nodes</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span>- <span style="color:#008000;font-weight:bold">role</span>:<span style="color:#bbb"> </span>control-plane<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">extraMounts</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">hostPath</span>:<span style="color:#bbb"> </span><span style="color:#b44">"./profiles"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containerPath</span>:<span style="color:#bbb"> </span><span style="color:#b44">"/var/lib/kubelet/seccomp/profiles"</span></span></span></code></pre></div></div> </div> <p>Download that example kind configuration, and save it to a file named <code>kind.yaml</code>:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>curl -L -O https://k8s.io/examples/pods/security/seccomp/kind.yaml </span></span></code></pre></div><p>You can set a specific Kubernetes version by setting the node's container image. See <a href="https://kind.sigs.k8s.io/docs/user/configuration/#nodes">Nodes</a> within the kind documentation about configuration for more details on this. This tutorial assumes you are using Kubernetes v1.27.</p> <p>As a beta feature, you can configure Kubernetes to use the profile that the <a class='glossary-tooltip' title='The container runtime is the software that is responsible for running containers.' data-toggle='tooltip' data-placement='top' href='/docs/setup/production-environment/container-runtimes' target='_blank' aria-label='container runtime'>container runtime</a> prefers by default, rather than falling back to <code>Unconfined</code>. If you want to try that, see <a href="#enable-the-use-of-runtimedefault-as-the-default-seccomp-profile-for-all-workloads">enable the use of <code>RuntimeDefault</code> as the default seccomp profile for all workloads</a> before you continue.</p> <p>Once you have a kind configuration in place, create the kind cluster with that configuration:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kind create cluster --config<span style="color:#666">=</span>kind.yaml </span></span></code></pre></div><p>After the new Kubernetes cluster is ready, identify the Docker container running as the single node cluster:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>docker ps </span></span></code></pre></div><p>You should see output indicating that a container is running with name <code>kind-control-plane</code>. The output is similar to:</p> <pre tabindex="0"><code>CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 6a96207fed4b kindest/node:v1.18.2 "/usr/local/bin/entr…" 27 seconds ago Up 24 seconds 127.0.0.1:42223->6443/tcp kind-control-plane </code></pre><p>If observing the filesystem of that container, you should see that the <code>profiles/</code> directory has been successfully loaded into the default seccomp path of the kubelet. Use <code>docker exec</code> to run a command in the Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#080;font-style:italic"># Change 6a96207fed4b to the container ID you saw from "docker ps"</span> </span></span><span style="display:flex;"><span>docker <span style="color:#a2f">exec</span> -it 6a96207fed4b ls /var/lib/kubelet/seccomp/profiles </span></span></code></pre></div><pre tabindex="0"><code>audit.json fine-grained.json violation.json </code></pre><p>You have verified that these seccomp profiles are available to the kubelet running within kind.</p> <h2 id="create-a-pod-that-uses-the-container-runtime-default-seccomp-profile">Create a Pod that uses the container runtime default seccomp profile</h2> <p>Most container runtimes provide a sane set of default syscalls that are allowed or not. You can adopt these defaults for your workload by setting the seccomp type in the security context of a pod or container to <code>RuntimeDefault</code>.</p> <div class="alert alert-info note callout" role="alert"> <strong>Note:</strong> If you have the <code>seccompDefault</code> <a href="/docs/reference/config-api/kubelet-config.v1beta1/">configuration</a> enabled, then Pods use the <code>RuntimeDefault</code> seccomp profile whenever no other seccomp profile is specified. Otherwise, the default is <code>Unconfined</code>. </div> <p>Here's a manifest for a Pod that requests the <code>RuntimeDefault</code> seccomp profile for all its containers:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/ga/default-pod.yaml" download="pods/security/seccomp/ga/default-pod.yaml"><code>pods/security/seccomp/ga/default-pod.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-ga-default-pod-yaml')" title="Copy pods/security/seccomp/ga/default-pod.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-ga-default-pod-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>default-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">labels</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">app</span>:<span style="color:#bbb"> </span>default-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>RuntimeDefault<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>test-container<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>hashicorp/http-echo:0.2.3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">args</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#b44">"-text=just made some more syscalls!"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span></span></span></code></pre></div></div> </div> <p>Create that Pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/seccomp/ga/default-pod.yaml </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod default-pod </span></span></code></pre></div><p>The Pod should be showing as having started successfully:</p> <pre tabindex="0"><code>NAME READY STATUS RESTARTS AGE default-pod 1/1 Running 0 20s </code></pre><p>Delete the Pod before moving to the next section:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl delete pod default-pod --wait --now </span></span></code></pre></div><h2 id="create-a-pod-with-a-seccomp-profile-for-syscall-auditing">Create a Pod with a seccomp profile for syscall auditing</h2> <p>To start off, apply the <code>audit.json</code> profile, which will log all syscalls of the process, to a new Pod.</p> <p>Here's a manifest for that Pod:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/ga/audit-pod.yaml" download="pods/security/seccomp/ga/audit-pod.yaml"><code>pods/security/seccomp/ga/audit-pod.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-ga-audit-pod-yaml')" title="Copy pods/security/seccomp/ga/audit-pod.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-ga-audit-pod-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>audit-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">labels</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">app</span>:<span style="color:#bbb"> </span>audit-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>Localhost<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">localhostProfile</span>:<span style="color:#bbb"> </span>profiles/audit.json<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>test-container<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>hashicorp/http-echo:0.2.3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">args</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#b44">"-text=just made some syscalls!"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span></span></span></code></pre></div></div> </div> <div class="alert alert-info note callout" role="alert"> <strong>Note:</strong> Older versions of Kubernetes allowed you to configure seccomp behavior using <a class='glossary-tooltip' title='A key-value pair that is used to attach arbitrary non-identifying metadata to objects.' data-toggle='tooltip' data-placement='top' href='/docs/concepts/overview/working-with-objects/annotations' target='_blank' aria-label='annotations'>annotations</a>. Kubernetes 1.27 only supports using fields within <code>.spec.securityContext</code> to configure seccomp, and this tutorial explains that approach. </div> <p>Create the Pod in the cluster:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/seccomp/ga/audit-pod.yaml </span></span></code></pre></div><p>This profile does not restrict any syscalls, so the Pod should start successfully.</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod audit-pod </span></span></code></pre></div><pre tabindex="0"><code>NAME READY STATUS RESTARTS AGE audit-pod 1/1 Running 0 30s </code></pre><p>In order to be able to interact with this endpoint exposed by this container, create a NodePort <a class='glossary-tooltip' title='A way to expose an application running on a set of Pods as a network service.' data-toggle='tooltip' data-placement='top' href='/docs/concepts/services-networking/service/' target='_blank' aria-label='Service'>Service</a> that allows access to the endpoint from inside the kind control plane container.</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl expose pod audit-pod --type NodePort --port <span style="color:#666">5678</span> </span></span></code></pre></div><p>Check what port the Service has been assigned on the node.</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get service audit-pod </span></span></code></pre></div><p>The output is similar to:</p> <pre tabindex="0"><code>NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE audit-pod NodePort 10.111.36.142 <none> 5678:32373/TCP 72s </code></pre><p>Now you can use <code>curl</code> to access that endpoint from inside the kind control plane container, at the port exposed by this Service. Use <code>docker exec</code> to run the <code>curl</code> command within the container belonging to that control plane container:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#080;font-style:italic"># Change 6a96207fed4b to the control plane container ID and 32373 to the port number you saw from "docker ps"</span> </span></span><span style="display:flex;"><span>docker <span style="color:#a2f">exec</span> -it 6a96207fed4b curl localhost:32373 </span></span></code></pre></div><pre tabindex="0"><code>just made some syscalls! </code></pre><p>You can see that the process is running, but what syscalls did it actually make? Because this Pod is running in a local cluster, you should be able to see those in <code>/var/log/syslog</code> on your local system. Open up a new terminal window and <code>tail</code> the output for calls from <code>http-echo</code>:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#080;font-style:italic"># The log path on your computer might be different from "/var/log/syslog"</span> </span></span><span style="display:flex;"><span>tail -f /var/log/syslog | grep <span style="color:#b44">'http-echo'</span> </span></span></code></pre></div><p>You should already see some logs of syscalls made by <code>http-echo</code>, and if you run <code>curl</code> again inside the control plane container you will see more output written to the log.</p> <p>For example:</p> <pre tabindex="0"><code>Jul 6 15:37:40 my-machine kernel: [369128.669452] audit: type=1326 audit(1594067860.484:14536): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=51 compat=0 ip=0x46fe1f code=0x7ffc0000 Jul 6 15:37:40 my-machine kernel: [369128.669453] audit: type=1326 audit(1594067860.484:14537): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=54 compat=0 ip=0x46fdba code=0x7ffc0000 Jul 6 15:37:40 my-machine kernel: [369128.669455] audit: type=1326 audit(1594067860.484:14538): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e53 code=0x7ffc0000 Jul 6 15:37:40 my-machine kernel: [369128.669456] audit: type=1326 audit(1594067860.484:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=288 compat=0 ip=0x46fdba code=0x7ffc0000 Jul 6 15:37:40 my-machine kernel: [369128.669517] audit: type=1326 audit(1594067860.484:14540): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=0 compat=0 ip=0x46fd44 code=0x7ffc0000 Jul 6 15:37:40 my-machine kernel: [369128.669519] audit: type=1326 audit(1594067860.484:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=270 compat=0 ip=0x4559b1 code=0x7ffc0000 Jul 6 15:38:40 my-machine kernel: [369188.671648] audit: type=1326 audit(1594067920.488:14559): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=270 compat=0 ip=0x4559b1 code=0x7ffc0000 Jul 6 15:38:40 my-machine kernel: [369188.671726] audit: type=1326 audit(1594067920.488:14560): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29064 comm="http-echo" exe="/http-echo" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e53 code=0x7ffc0000 </code></pre><p>You can begin to understand the syscalls required by the <code>http-echo</code> process by looking at the <code>syscall=</code> entry on each line. While these are unlikely to encompass all syscalls it uses, it can serve as a basis for a seccomp profile for this container.</p> <p>Delete the Service and the Pod before moving to the next section:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl delete service audit-pod --wait </span></span><span style="display:flex;"><span>kubectl delete pod audit-pod --wait --now </span></span></code></pre></div><h2 id="create-a-pod-with-a-seccomp-profile-that-causes-violation">Create a Pod with a seccomp profile that causes violation</h2> <p>For demonstration, apply a profile to the Pod that does not allow for any syscalls.</p> <p>The manifest for this demonstration is:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/ga/violation-pod.yaml" download="pods/security/seccomp/ga/violation-pod.yaml"><code>pods/security/seccomp/ga/violation-pod.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-ga-violation-pod-yaml')" title="Copy pods/security/seccomp/ga/violation-pod.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-ga-violation-pod-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>violation-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">labels</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">app</span>:<span style="color:#bbb"> </span>violation-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>Localhost<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">localhostProfile</span>:<span style="color:#bbb"> </span>profiles/violation.json<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>test-container<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>hashicorp/http-echo:0.2.3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">args</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#b44">"-text=just made some syscalls!"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span></span></span></code></pre></div></div> </div> <p>Attempt to create the Pod in the cluster:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/seccomp/ga/violation-pod.yaml </span></span></code></pre></div><p>The Pod creates, but there is an issue. If you check the status of the Pod, you should see that it failed to start.</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod violation-pod </span></span></code></pre></div><pre tabindex="0"><code>NAME READY STATUS RESTARTS AGE violation-pod 0/1 CrashLoopBackOff 1 6s </code></pre><p>As seen in the previous example, the <code>http-echo</code> process requires quite a few syscalls. Here seccomp has been instructed to error on any syscall by setting <code>"defaultAction": "SCMP_ACT_ERRNO"</code>. This is extremely secure, but removes the ability to do anything meaningful. What you really want is to give workloads only the privileges they need.</p> <p>Delete the Pod before moving to the next section:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl delete pod violation-pod --wait --now </span></span></code></pre></div><h2 id="create-a-pod-with-a-seccomp-profile-that-only-allows-necessary-syscalls">Create a Pod with a seccomp profile that only allows necessary syscalls</h2> <p>If you take a look at the <code>fine-grained.json</code> profile, you will notice some of the syscalls seen in syslog of the first example where the profile set <code>"defaultAction": "SCMP_ACT_LOG"</code>. Now the profile is setting <code>"defaultAction": "SCMP_ACT_ERRNO"</code>, but explicitly allowing a set of syscalls in the <code>"action": "SCMP_ACT_ALLOW"</code> block. Ideally, the container will run successfully and you will see no messages sent to <code>syslog</code>.</p> <p>The manifest for this example is:</p> <div class="highlight"> <div class="copy-code-icon" style="text-align:right"> <a href="https://raw.githubusercontent.com/kubernetes/website/release-1.27/content/en/examples/pods/security/seccomp/ga/fine-pod.yaml" download="pods/security/seccomp/ga/fine-pod.yaml"><code>pods/security/seccomp/ga/fine-pod.yaml</code> </a> <img src="/images/copycode.svg" style="max-height:24px; cursor: pointer" onclick="copyCode('pods-security-seccomp-ga-fine-pod-yaml')" title="Copy pods/security/seccomp/ga/fine-pod.yaml to clipboard"> </img> </div> <div class="includecode" id="pods-security-seccomp-ga-fine-pod-yaml"><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>v1<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">metadata</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>fine-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">labels</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">app</span>:<span style="color:#bbb"> </span>fine-pod<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">spec</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">seccompProfile</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">type</span>:<span style="color:#bbb"> </span>Localhost<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">localhostProfile</span>:<span style="color:#bbb"> </span>profiles/fine-grained.json<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">containers</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">name</span>:<span style="color:#bbb"> </span>test-container<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>hashicorp/http-echo:0.2.3<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">args</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#b44">"-text=just made some syscalls!"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">securityContext</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">allowPrivilegeEscalation</span>:<span style="color:#bbb"> </span><span style="color:#a2f;font-weight:bold">false</span></span></span></code></pre></div></div> </div> <p>Create the Pod in your cluster:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://k8s.io/examples/pods/security/seccomp/ga/fine-pod.yaml </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get pod fine-pod </span></span></code></pre></div><p>The Pod should be showing as having started successfully:</p> <pre tabindex="0"><code>NAME READY STATUS RESTARTS AGE fine-pod 1/1 Running 0 30s </code></pre><p>Open up a new terminal window and use <code>tail</code> to monitor for log entries that mention calls from <code>http-echo</code>:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#080;font-style:italic"># The log path on your computer might be different from "/var/log/syslog"</span> </span></span><span style="display:flex;"><span>tail -f /var/log/syslog | grep <span style="color:#b44">'http-echo'</span> </span></span></code></pre></div><p>Next, expose the Pod with a NodePort Service:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl expose pod fine-pod --type NodePort --port <span style="color:#666">5678</span> </span></span></code></pre></div><p>Check what port the Service has been assigned on the node:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl get service fine-pod </span></span></code></pre></div><p>The output is similar to:</p> <pre tabindex="0"><code>NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE fine-pod NodePort 10.111.36.142 <none> 5678:32373/TCP 72s </code></pre><p>Use <code>curl</code> to access that endpoint from inside the kind control plane container:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#080;font-style:italic"># Change 6a96207fed4b to the control plane container ID and 32373 to the port number you saw from "docker ps"</span> </span></span><span style="display:flex;"><span>docker <span style="color:#a2f">exec</span> -it 6a96207fed4b curl localhost:32373 </span></span></code></pre></div><pre tabindex="0"><code>just made some syscalls! </code></pre><p>You should see no output in the <code>syslog</code>. This is because the profile allowed all necessary syscalls and specified that an error should occur if one outside of the list is invoked. This is an ideal situation from a security perspective, but required some effort in analyzing the program. It would be nice if there was a simple way to get closer to this security without requiring as much effort.</p> <p>Delete the Service and the Pod before moving to the next section:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl delete service fine-pod --wait </span></span><span style="display:flex;"><span>kubectl delete pod fine-pod --wait --now </span></span></code></pre></div><h2 id="enable-the-use-of-runtimedefault-as-the-default-seccomp-profile-for-all-workloads">Enable the use of <code>RuntimeDefault</code> as the default seccomp profile for all workloads</h2> <div style="margin-top: 10px; margin-bottom: 10px;"> <b>FEATURE STATE:</b> <code>Kubernetes v1.27 [stable]</code> </div> <p>To use seccomp profile defaulting, you must run the kubelet with the <code>--seccomp-default</code> <a href="/docs/reference/command-line-tools-reference/kubelet">command line flag</a> enabled for each node where you want to use it.</p> <p>If enabled, the kubelet will use the <code>RuntimeDefault</code> seccomp profile by default, which is defined by the container runtime, instead of using the <code>Unconfined</code> (seccomp disabled) mode. The default profiles aim to provide a strong set of security defaults while preserving the functionality of the workload. It is possible that the default profiles differ between container runtimes and their release versions, for example when comparing those from CRI-O and containerd.</p> <div class="alert alert-info note callout" role="alert"> <strong>Note:</strong> Enabling the feature will neither change the Kubernetes <code>securityContext.seccompProfile</code> API field nor add the deprecated annotations of the workload. This provides users the possibility to rollback anytime without actually changing the workload configuration. Tools like <a href="https://github.com/kubernetes-sigs/cri-tools"><code>crictl inspect</code></a> can be used to verify which seccomp profile is being used by a container. </div> <p>Some workloads may require a lower amount of syscall restrictions than others. This means that they can fail during runtime even with the <code>RuntimeDefault</code> profile. To mitigate such a failure, you can:</p> <ul> <li>Run the workload explicitly as <code>Unconfined</code>.</li> <li>Disable the <code>SeccompDefault</code> feature for the nodes. Also making sure that workloads get scheduled on nodes where the feature is disabled.</li> <li>Create a custom seccomp profile for the workload.</li> </ul> <p>If you were introducing this feature into production-like cluster, the Kubernetes project recommends that you enable this feature gate on a subset of your nodes and then test workload execution before rolling the change out cluster-wide.</p> <p>You can find more detailed information about a possible upgrade and downgrade strategy in the related Kubernetes Enhancement Proposal (KEP): <a href="https://github.com/kubernetes/enhancements/tree/9a124fd29d1f9ddf2ff455c49a630e3181992c25/keps/sig-node/2413-seccomp-by-default#upgrade--downgrade-strategy">Enable seccomp by default</a>.</p> <p>Kubernetes 1.27 lets you configure the seccomp profile that applies when the spec for a Pod doesn't define a specific seccomp profile. However, you still need to enable this defaulting for each node where you would like to use it.</p> <p>If you are running a Kubernetes 1.27 cluster and want to enable the feature, either run the kubelet with the <code>--seccomp-default</code> command line flag, or enable it through the <a href="/docs/tasks/administer-cluster/kubelet-config-file/">kubelet configuration file</a>. To enable the feature gate in <a href="https://kind.sigs.k8s.io">kind</a>, ensure that <code>kind</code> provides the minimum required Kubernetes version and enables the <code>SeccompDefault</code> feature <a href="https://kind.sigs.k8s.io/docs/user/quick-start/#enable-feature-gates-in-your-cluster">in the kind configuration</a>:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#008000;font-weight:bold">kind</span>:<span style="color:#bbb"> </span>Cluster<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">apiVersion</span>:<span style="color:#bbb"> </span>kind.x-k8s.io/v1alpha4<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#008000;font-weight:bold">nodes</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">role</span>:<span style="color:#bbb"> </span>control-plane<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>kindest/node:v1.23.0@sha256:49824ab1727c04e56a21a5d8372a402fcd32ea51ac96a2706a12af38934f81ac<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">kubeadmConfigPatches</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- |<span style="color:#b44;font-style:italic"> </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> kind: JoinConfiguration </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> nodeRegistration: </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> kubeletExtraArgs: </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> seccomp-default: "true"</span><span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#008000;font-weight:bold">role</span>:<span style="color:#bbb"> </span>worker<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">image</span>:<span style="color:#bbb"> </span>kindest/node:v1.23.0@sha256:49824ab1727c04e56a21a5d8372a402fcd32ea51ac96a2706a12af38934f81ac<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#008000;font-weight:bold">kubeadmConfigPatches</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- |<span style="color:#b44;font-style:italic"> </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> kind: JoinConfiguration </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> nodeRegistration: </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> kubeletExtraArgs: </span></span></span><span style="display:flex;"><span><span style="color:#b44;font-style:italic"> seccomp-default: "true"</span><span style="color:#bbb"> </span></span></span></code></pre></div><p>If the cluster is ready, then running a pod:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl run --rm -it --restart<span style="color:#666">=</span>Never --image<span style="color:#666">=</span>alpine alpine -- sh </span></span></code></pre></div><p>Should now have the default seccomp profile attached. This can be verified by using <code>docker exec</code> to run <code>crictl inspect</code> for the container on the kind worker:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>docker <span style="color:#a2f">exec</span> -it kind-worker bash -c <span style="color:#b62;font-weight:bold">\ </span></span></span><span style="display:flex;"><span><span style="color:#b62;font-weight:bold"></span> <span style="color:#b44">'crictl inspect $(crictl ps --name=alpine -q) | jq .info.runtimeSpec.linux.seccomp'</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json"><span style="display:flex;"><span>{ </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"defaultAction"</span>: <span style="color:#b44">"SCMP_ACT_ERRNO"</span>, </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"architectures"</span>: [<span style="color:#b44">"SCMP_ARCH_X86_64"</span>, <span style="color:#b44">"SCMP_ARCH_X86"</span>, <span style="color:#b44">"SCMP_ARCH_X32"</span>], </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"syscalls"</span>: [ </span></span><span style="display:flex;"><span> { </span></span><span style="display:flex;"><span> <span style="color:#008000;font-weight:bold">"names"</span>: [<span style="color:#b44">"..."</span>] </span></span><span style="display:flex;"><span> } </span></span><span style="display:flex;"><span> ] </span></span><span style="display:flex;"><span>} </span></span></code></pre></div><h2 id="what-s-next">What's next</h2> <p>You can learn more about Linux seccomp:</p> <ul> <li><a href="https://lwn.net/Articles/656307/">A seccomp Overview</a></li> <li><a href="https://docs.docker.com/engine/security/seccomp/">Seccomp Security Profiles for Docker</a></li> </ul> </div> <div id="pre-footer"> <h2>Feedback</h2> <p class="feedback--prompt">Was this page helpful? </p> <button class="btn btn-primary mb-4 feedback--yes">Yes</button> <button class="btn btn-primary mb-4 feedback--no">No</button> <p class="feedback--response feedback--response__hidden"> Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on <a target="_blank" rel="noopener" href="https://stackoverflow.com/questions/tagged/kubernetes"> Stack Overflow</a>. Open an issue in the GitHub repo if you want to <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Issue%20with%20k8s.io"> report a problem</a> or <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Improvement%20for%20k8s.io"> suggest an improvement</a>. </p> </div> <script> const yes = document.querySelector('.feedback--yes'); const no = document.querySelector('.feedback--no'); document.querySelectorAll('.feedback--link').forEach(link => { link.href = link.href + window.location.pathname; }); const sendFeedback = (value) => { if (!gtag) { console.log('!gtag'); } gtag('event', 'click', { 'event_category': 'Helpful', 'event_label': window.location.pathname, value }); }; const disableButtons = () => { yes.disabled = true; yes.classList.add('feedback--button__disabled'); no.disabled = true; no.classList.add('feedback--button__disabled'); }; yes.addEventListener('click', () => { sendFeedback(1); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); no.addEventListener('click', () => { sendFeedback(0); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); </script> <div class="text-muted mt-5 pt-3 border-top"> Last modified July 31, 2023 at 9:57 AM PST: <a href="https://github.com/kubernetes/website/commit/a56d96f4b666c4022e00b468d6350cad511a8499">Use code shortcode for Tutorials section (a56d96f4b6)</a> </div> </main> <div class="d-none d-xl-block col-xl-2 td-toc d-print-none"> <div class="td-page-meta ml-2 pb-1 pt-2 mb-0"> <a href="https://github.com/kubernetes/website/edit/main/content/en/docs/tutorials/security/seccomp.md" target="_blank"><i class="fa fa-edit fa-fw"></i> Edit this page</a> <a href="https://github.com/kubernetes/website/new/main/content/en/docs/tutorials/security/seccomp.md?filename=change-me.md&value=---%0Atitle%3A+%22Long+Page+Title%22%0AlinkTitle%3A+%22Short+Nav+Title%22%0Aweight%3A+100%0Adescription%3A+%3E-%0A+++++Page+description+for+heading+and+indexes.%0A---%0A%0A%23%23+Heading%0A%0AEdit+this+template+to+create+your+new+page.%0A%0A%2A+Give+it+a+good+name%2C+ending+in+%60.md%60+-+e.g.+%60getting-started.md%60%0A%2A+Edit+the+%22front+matter%22+section+at+the+top+of+the+page+%28weight+controls+how+its+ordered+amongst+other+pages+in+the+same+directory%3B+lowest+number+first%29.%0A%2A+Add+a+good+commit+message+at+the+bottom+of+the+page+%28%3C80+characters%3B+use+the+extended+description+field+for+more+detail%29.%0A%2A+Create+a+new+branch+so+you+can+preview+your+new+file+and+request+a+review+via+Pull+Request.%0A" target="_blank"><i class="fa fa-edit fa-fw"></i> Create child page</a> <a href="https://github.com/kubernetes/website/issues/new?title=Restrict%20a%20Container&#39;s%20Syscalls%20with%20seccomp" target="_blank"><i class="fab fa-github fa-fw"></i> Create an issue</a> <a id="print" href="https://kubernetes.io/docs/tutorials/security/_print/"><i class="fa fa-print fa-fw"></i> Print entire section</a> </div> <nav id="TableOfContents"> <ul> <li><a href="#objectives">Objectives</a></li> <li><a href="#before-you-begin">Before you begin</a></li> <li><a href="#download-profiles">Download example seccomp profiles</a></li> <li><a href="#create-a-local-kubernetes-cluster-with-kind">Create a local Kubernetes cluster with kind</a></li> <li><a href="#create-a-pod-that-uses-the-container-runtime-default-seccomp-profile">Create a Pod that uses the container runtime default seccomp profile</a></li> <li><a href="#create-a-pod-with-a-seccomp-profile-for-syscall-auditing">Create a Pod with a seccomp profile for syscall auditing</a></li> <li><a href="#create-a-pod-with-a-seccomp-profile-that-causes-violation">Create a Pod with a seccomp profile that causes violation</a></li> <li><a href="#create-a-pod-with-a-seccomp-profile-that-only-allows-necessary-syscalls">Create a Pod with a seccomp profile that only allows necessary syscalls</a></li> <li><a href="#enable-the-use-of-runtimedefault-as-the-default-seccomp-profile-for-all-workloads">Enable the use of <code>RuntimeDefault</code> as the default seccomp profile for all workloads</a></li> <li><a href="#what-s-next">What's next</a></li> </ul> </nav> </div> </div> </div> </div> <footer class="d-print-none"> <div class="footer__links"> <nav> <a class="text-white" href="/docs/home/">Home</a> <a class="text-white" href="/blog/">Blog</a> <a class="text-white" href="/training/">Training</a> <a class="text-white" href="/partners/">Partners</a> <a class="text-white" href="/community/">Community</a> <a class="text-white" href="/case-studies/">Case Studies</a> </nav> </div> <div class="container-fluid"> <div class="row"> <div class="col-6 col-sm-2 text-xs-center order-sm-2"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="User mailing list" aria-label="User mailing list"> <a class="text-white" target="_blank" href="https://discuss.kubernetes.io"> <i class="fa fa-envelope"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Twitter" aria-label="Twitter"> <a class="text-white" target="_blank" href="https://twitter.com/kubernetesio"> <i class="fab fa-twitter"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Calendar" aria-label="Calendar"> <a class="text-white" target="_blank" href="https://calendar.google.com/calendar/embed?src=calendar%40kubernetes.io"> <i class="fas fa-calendar-alt"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Youtube" aria-label="Youtube"> <a class="text-white" target="_blank" href="https://youtube.com/kubernetescommunity"> <i class="fab fa-youtube"></i> </a> </li> </ul> </div> <div class="col-6 col-sm-2 text-right text-xs-center order-sm-3"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="GitHub" aria-label="GitHub"> <a class="text-white" target="_blank" href="https://github.com/kubernetes/kubernetes"> <i class="fab fa-github"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Slack" aria-label="Slack"> <a class="text-white" target="_blank" href="https://slack.k8s.io"> <i class="fab fa-slack"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Contribute" aria-label="Contribute"> <a class="text-white" target="_blank" href="https://git.k8s.io/community/contributors/guide"> <i class="fas fa-edit"></i> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Stack Overflow" aria-label="Stack Overflow"> <a class="text-white" target="_blank" href="https://stackoverflow.com/questions/tagged/kubernetes"> <i class="fab fa-stack-overflow"></i> </a> </li> </ul> </div> <div class="col-12 col-sm-8 text-center order-sm-2"> <small class="text-white">© 2024 The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a></small> <br/> <small class="text-white">Copyright © 2024 The Linux Foundation ®. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a></small> <br/> <small class="text-white">ICP license: 京ICP备17074266号-3</small> </div> </div> </div> </footer> <script src="/js/jquery-3.6.0.min.js" integrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <script src="/js/popper-1.16.1.min.js" intregrity="sha384-9/reFTGAW83EW2RDu2S0VKaIzap3H66lZH81PoYlFhbGU+6BZp6G7niu735Sk7lN" crossorigin="anonymous"></script> <script src="/js/bootstrap-4.6.1.min.js" integrity="sha384-VHvPCCyXqtD5DqJeNxl2dtTyhF78xXNXdkwX1CZeRusQfRKp+tA7hAShOK/B/fQ2" crossorigin="anonymous"></script> <script src="/js/script.js"></script> <script async src="/js/mermaid-8.13.4.min.js" integrity="sha384-5hHNvPeMrNH14oM3IcQofDoBhiclNK3g2+hnEinKzQ07C4AliMeVpnvxuiwEGpaO" crossorigin="anonymous"></script> <script src="/js/main.min.5c0bf7f21dc4f66485f74efbbeeff28a7e4f8cddaac1bae47043159c922ff3a3.js" integrity="sha256-XAv38h3E9mSF9077vu/yin5PjN2qwbrkcEMVnJIv86M=" crossorigin="anonymous"></script> <script async src="/js/sweetalert-2.1.2.min.js"></script> <script type="text/javascript"> function copyCode(elem){ if (document.getElementById(elem)) { if (navigator.clipboard) { navigator.clipboard.writeText(document.getElementById(elem).textContent).then( function () { swal("Copied to clipboard: ",elem); }, function () { swal("Oh, no…","Failed to copy to clipboard: ",elem); }, ); } else { swal("Oh, no…","Sorry, your browser doesn't support copying this example to your clipboard."); } } } </script> </body> </html>