CINXE.COM

<!doctype html> <html lang="zh-cn" class="no-js"> <head> <meta name="robots" content="noindex, nofollow"> <link rel="alternate" hreflang="en" href="https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/"> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="generator" content="Hugo 0.111.3"> <link rel="shortcut icon" type="image/png" href="/images/favicon.png"> <link rel="apple-touch-icon" href="/favicons/apple-touch-icon-180x180.png" sizes="180x180"> <link rel="manifest" href="/manifest.webmanifest"> <link rel="apple-touch-icon" href="/images/kubernetes-192x192.png"> <title>动态准入控制 | Kubernetes</title><meta property="og:title" content="动态准入控制" /> <meta property="og:description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。" /> <meta property="og:type" content="article" /> <meta property="og:url" content="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/" /><meta property="article:section" content="docs" /> <meta property="article:modified_time" content="2023-10-05T10:58:36+08:00" /><meta property="og:site_name" content="Kubernetes" /> <meta itemprop="name" content="动态准入控制"> <meta itemprop="description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。"> <meta itemprop="dateModified" content="2023-10-05T10:58:36+08:00" /> <meta itemprop="wordCount" content="2754"> <meta itemprop="keywords" content="" /><meta name="twitter:card" content="summary"/> <meta name="twitter:title" content="动态准入控制"/> <meta name="twitter:description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。"/> <link href="/scss/main.css" rel="stylesheet"> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "url": "https://kubernetes.io", "logo": "https://kubernetes.io/images/favicon.png", } </script> <meta name="theme-color" content="#326ce5"> <style> .gutter { background-color: #eee; background-repeat: no-repeat; background-position: 50%; } .gutter.gutter-horizontal { background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAeCAYAAADkftS9AAAAIklEQVQoU2M4c+bMfxAGAgYYmwGrIIiDjrELjpo5aiZeMwF+yNnOs5KSvgAAAABJRU5ErkJggg=='); cursor: col-resize; } #sidebarnav, #maindoc { max-width: 100%; } #maindoc { overflow-wrap: break-word; } @media (max-width: 768px) { #sidebarnav { padding-left: 15px; padding-right: 15px; } } </style> <link rel="stylesheet" href="/css/feature-states.css"> <meta name="description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。"> <meta property="og:description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。"> <meta name="twitter:description" content="除了内置的 admission 插件，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。什么是准入 Webhook？准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即验证性质的准入 Webhook 和变更性质的准入 Webhook。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。说明：如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。尝试准入 Webhook 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读用户指南以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。先决条件确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。这里是一组推荐的 admission 控制器，通常可以启用。确保启用了 admissionregistration.k8s.io/v1 API。编写一个准入 Webhook 服务器请参阅 Kubernetes e2e 测试中的 Admission Webhook 服务器的实现。Webhook 处理由 API 服务器发送的 AdmissionReview 请求，并且将其决定作为 AdmissionReview 对象以相同版本发送回去。"> <meta property="og:url" content="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/"> <meta property="og:title" content="动态准入控制"> <meta name="twitter:title" content="动态准入控制"> <meta name="twitter:image" content="https://kubernetes.io/images/favicon.png" /> <meta name="twitter:image:alt" content="Kubernetes"> <meta property="og:image" content="/images/kubernetes-horizontal-color.png"> <meta property="og:type" content="article"> <script src="/js/jquery-3.6.0.min.js" intregrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <script src="/js/split-1.6.0.js" intregrity="sha384-0blL3GqHy6+9fw0cyY2Aoiwg4onHAtslAs4OkqZY7UQBrR65/K4gI+hxLdWDrjpz"></script> <title>动态准入控制 | Kubernetes</title> </head> <body class="td-page td-documentation"> <header> <nav class="js-navbar-scroll navbar navbar-expand navbar-dark flex-column flex-md-row td-navbar" data-auto-burger="primary"> <a class="navbar-brand img-fluid" href="/zh-cn/"></a> <div class="td-navbar-nav-scroll ml-md-auto" id="main_navbar"> <ul class="navbar-nav mt-2 mt-lg-0"> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link active" href="/zh-cn/docs/" >文档</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/blog/" >Kubernetes 博客</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/training/" >培训</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/partners/" >合作伙伴</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/community/" >社区</a> </li> <li class="nav-item mr-2 mb-lg-0"> <a class="nav-link" href="/zh-cn/case-studies/" >案例分析</a> </li> <li class="nav-item mr-n3 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> 版本列表 </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/zh-cn/releases">发布信息</a> <a class="dropdown-item" href="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">v1.31</a> <a class="dropdown-item" href="https://v1-30.docs.kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">v1.30</a> <a class="dropdown-item" href="https://v1-29.docs.kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">v1.29</a> <a class="dropdown-item" href="https://v1-28.docs.kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">v1.28</a> <a class="dropdown-item" href="https://v1-27.docs.kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">v1.27</a> </div> </li> <li class="nav-item mr-n4 mr-lg-0 dropdown"> <a class="nav-link dropdown-toggle" href="#" id="navbarDropdownMenuLink" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> 中文 (Chinese) </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink"> <a class="dropdown-item" href="/docs/reference/access-authn-authz/extensible-admission-controllers/">English</a> </div> </li> </ul> </div> <button id="hamburger" onclick="kub.toggleMenu()" data-auto-burger-exclude><div></div></button> </nav> <section class="header-hero filler"> </section> </header> <div class="container-fluid td-outer"> <div class="td-main"> <div class="row flex-column flex-md-row"> <div id="sidebarnav" class="split td-sidebar d-print-none"> <script> $(function() { $("#td-section-nav a").removeClass("active"); $("#td-section-nav #m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers").addClass("active"); $("#td-section-nav #m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-li span").addClass("td-sidebar-nav-active-item"); $("#td-section-nav #m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers").parents("li").addClass("active-path"); $("#td-section-nav li.active-path").addClass("show"); $("#td-section-nav li.active-path").children("input").prop('checked', true); $("#td-section-nav #m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-li").siblings("li").addClass("show"); $("#td-section-nav #m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-li").children("ul").children("li").addClass("show"); $("#td-sidebar-menu").toggleClass("d-none"); }); </script> <div id="td-sidebar-menu" class="td-sidebar__inner d-none"> <form class="td-sidebar__search d-flex align-items-center"> <input type="search" class="form-control td-search-input" name="q" placeholder="&#xf002 搜索" aria-label="搜索" autocomplete="off" > <button class="btn btn-link td-sidebar__toggle d-md-none p-0 ml-3 fas fa-bars" type="button" data-toggle="collapse" data-target="#td-section-nav" aria-controls="td-docs-nav" aria-expanded="false" aria-label="Toggle section navigation"> </button> </form> <nav class="collapse td-sidebar-nav foldable-nav" id="td-section-nav"> <ul class="td-sidebar-nav__section pr-md-3 ul-0"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-li"> <ul class="ul-1"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-home-li"> <input type="checkbox" id="m-zh-cn-docs-home-check"/> <label for="m-zh-cn-docs-home-check"><a href="/zh-cn/docs/home/" title="Kubernetes 文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-home">文档</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-home-supported-doc-versions-li"> <input type="checkbox" id="m-zh-cn-docs-home-supported-doc-versions-check"/> <label for="m-zh-cn-docs-home-supported-doc-versions-check"><a href="/zh-cn/docs/home/supported-doc-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-home-supported-doc-versions">Kubernetes 文档支持的版本</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-li"> <input type="checkbox" id="m-zh-cn-docs-setup-check"/> <label for="m-zh-cn-docs-setup-check"><a href="/zh-cn/docs/setup/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup">入门</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-learning-environment-li"> <input type="checkbox" id="m-zh-cn-docs-setup-learning-environment-check"/> <label for="m-zh-cn-docs-setup-learning-environment-check"><a href="/zh-cn/docs/setup/learning-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-learning-environment">学习环境</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-check"/> <label for="m-zh-cn-docs-setup-production-environment-check"><a href="/zh-cn/docs/setup/production-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment">生产环境</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-container-runtimes-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-container-runtimes-check"/> <label for="m-zh-cn-docs-setup-production-environment-container-runtimes-check"><a href="/zh-cn/docs/setup/production-environment/container-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-container-runtimes">容器运行时</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-tools-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-check"><a href="/zh-cn/docs/setup/production-environment/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment-tools">使用部署工具安装 Kubernetes</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm">使用 kubeadm 引导集群</a></label> <ul class="ul-5 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-install-kubeadm">安装 kubeadm</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-troubleshooting-kubeadm">对 kubeadm 进行故障排查</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-create-cluster-kubeadm">使用 kubeadm 创建集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/control-plane-flags/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-control-plane-flags">使用 kubeadm API 定制组件</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/ha-topology/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-ha-topology">高可用拓扑选项</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/high-availability/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-high-availability">利用 kubeadm 创建高可用集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-setup-ha-etcd-with-kubeadm">使用 kubeadm 创建一个高可用 etcd 集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/kubelet-integration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-kubelet-integration">使用 kubeadm 配置集群中的每个 kubelet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubeadm/dual-stack-support/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubeadm-dual-stack-support">使用 kubeadm 支持双协议栈</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kops-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kops-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kops-check"><a href="/zh-cn/docs/setup/production-environment/tools/kops/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kops">使用 kOps 安装 Kubernetes</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-tools-kubespray-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-tools-kubespray-check"/> <label for="m-zh-cn-docs-setup-production-environment-tools-kubespray-check"><a href="/zh-cn/docs/setup/production-environment/tools/kubespray/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-tools-kubespray">使用 Kubespray 安装 Kubernetes</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions-li"> <input type="checkbox" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions-check"/> <label for="m-zh-cn-docs-setup-production-environment-turnkey-solutions-check"><a href="/zh-cn/docs/setup/production-environment/turnkey-solutions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-production-environment-turnkey-solutions">Turnkey 云解决方案</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-setup-best-practices-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-check"/> <label for="m-zh-cn-docs-setup-best-practices-check"><a href="/zh-cn/docs/setup/best-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-setup-best-practices">最佳实践</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-cluster-large-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-cluster-large-check"/> <label for="m-zh-cn-docs-setup-best-practices-cluster-large-check"><a href="/zh-cn/docs/setup/best-practices/cluster-large/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-cluster-large">大规模集群的注意事项</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-multiple-zones-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-multiple-zones-check"/> <label for="m-zh-cn-docs-setup-best-practices-multiple-zones-check"><a href="/zh-cn/docs/setup/best-practices/multiple-zones/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-multiple-zones">运行于多可用区环境</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-node-conformance-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-node-conformance-check"/> <label for="m-zh-cn-docs-setup-best-practices-node-conformance-check"><a href="/zh-cn/docs/setup/best-practices/node-conformance/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-node-conformance">校验节点设置</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-check"/> <label for="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards-check"><a href="/zh-cn/docs/setup/best-practices/enforcing-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-enforcing-pod-security-standards">强制实施 Pod 安全性标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-setup-best-practices-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-setup-best-practices-certificates-check"/> <label for="m-zh-cn-docs-setup-best-practices-certificates-check"><a href="/zh-cn/docs/setup/best-practices/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-setup-best-practices-certificates">PKI 证书和要求</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-check"/> <label for="m-zh-cn-docs-concepts-check"><a href="/zh-cn/docs/concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts">概念</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-overview-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-check"/> <label for="m-zh-cn-docs-concepts-overview-check"><a href="/zh-cn/docs/concepts/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-overview">概述</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-overview-working-with-objects">Kubernetes 对象</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-object-management-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/object-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-object-management">Kubernetes 对象管理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-names-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-names-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-names-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/names/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-names">对象名称和 ID</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-labels-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-labels">标签和选择算符</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-namespaces">名字空间</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-annotations-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-annotations">注解</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/field-selectors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-field-selectors">字段选择器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/finalizers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-finalizers">Finalizers</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/owners-dependents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-owners-dependents">属主与附属</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-check"/> <label for="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels-check"><a href="/zh-cn/docs/concepts/overview/working-with-objects/common-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-working-with-objects-common-labels">推荐使用的标签</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-components-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-components-check"/> <label for="m-zh-cn-docs-concepts-overview-components-check"><a href="/zh-cn/docs/concepts/overview/components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-components">Kubernetes 组件</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-overview-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-overview-kubernetes-api-check"/> <label for="m-zh-cn-docs-concepts-overview-kubernetes-api-check"><a href="/zh-cn/docs/concepts/overview/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-overview-kubernetes-api">Kubernetes API</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-architecture-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-check"/> <label for="m-zh-cn-docs-concepts-architecture-check"><a href="/zh-cn/docs/concepts/architecture/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-architecture">Kubernetes 架构</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-nodes-check"/> <label for="m-zh-cn-docs-concepts-architecture-nodes-check"><a href="/zh-cn/docs/concepts/architecture/nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-nodes">节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-check"/> <label for="m-zh-cn-docs-concepts-architecture-control-plane-node-communication-check"><a href="/zh-cn/docs/concepts/architecture/control-plane-node-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-control-plane-node-communication">节点与控制面之间的通信</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-controller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-controller-check"/> <label for="m-zh-cn-docs-concepts-architecture-controller-check"><a href="/zh-cn/docs/concepts/architecture/controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-controller">控制器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-leases-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-leases-check"/> <label for="m-zh-cn-docs-concepts-architecture-leases-check"><a href="/zh-cn/docs/concepts/architecture/leases/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-leases">租约（Lease）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cloud-controller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cloud-controller-check"/> <label for="m-zh-cn-docs-concepts-architecture-cloud-controller-check"><a href="/zh-cn/docs/concepts/architecture/cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cloud-controller">云控制器管理器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cgroups-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cgroups-check"/> <label for="m-zh-cn-docs-concepts-architecture-cgroups-check"><a href="/zh-cn/docs/concepts/architecture/cgroups/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cgroups">关于 cgroup v2</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-cri-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-cri-check"/> <label for="m-zh-cn-docs-concepts-architecture-cri-check"><a href="/zh-cn/docs/concepts/architecture/cri/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-cri">容器运行时接口（CRI）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-garbage-collection-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-garbage-collection-check"/> <label for="m-zh-cn-docs-concepts-architecture-garbage-collection-check"><a href="/zh-cn/docs/concepts/architecture/garbage-collection/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-garbage-collection">垃圾收集</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-check"/> <label for="m-zh-cn-docs-concepts-architecture-mixed-version-proxy-check"><a href="/zh-cn/docs/concepts/architecture/mixed-version-proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-architecture-mixed-version-proxy">混合版本代理</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-check"/> <label for="m-zh-cn-docs-concepts-containers-check"><a href="/zh-cn/docs/concepts/containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-containers">容器</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-images-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-images-check"/> <label for="m-zh-cn-docs-concepts-containers-images-check"><a href="/zh-cn/docs/concepts/containers/images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-images">镜像</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-container-environment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-container-environment-check"/> <label for="m-zh-cn-docs-concepts-containers-container-environment-check"><a href="/zh-cn/docs/concepts/containers/container-environment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-container-environment">容器环境</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-runtime-class-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-runtime-class-check"/> <label for="m-zh-cn-docs-concepts-containers-runtime-class-check"><a href="/zh-cn/docs/concepts/containers/runtime-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-runtime-class">容器运行时类（Runtime Class）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-check"/> <label for="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks-check"><a href="/zh-cn/docs/concepts/containers/container-lifecycle-hooks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-containers-container-lifecycle-hooks">容器生命周期回调</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-check"/> <label for="m-zh-cn-docs-concepts-workloads-check"><a href="/zh-cn/docs/concepts/workloads/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads">工作负载</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-pods-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-check"><a href="/zh-cn/docs/concepts/workloads/pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads-pods">Pod</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle-check"><a href="/zh-cn/docs/concepts/workloads/pods/pod-lifecycle/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-pod-lifecycle">Pod 的生命周期</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-init-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-init-containers-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-init-containers-check"><a href="/zh-cn/docs/concepts/workloads/pods/init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-init-containers">Init 容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-workloads-pods-sidecar-containers-li"> <input type="checkbox" id="m-docs-concepts-workloads-pods-sidecar-containers-check"/> <label for="m-docs-concepts-workloads-pods-sidecar-containers-check"><a href="/docs/concepts/workloads/pods/sidecar-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-workloads-pods-sidecar-containers">Sidecar Containers</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-disruptions-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-disruptions-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-disruptions-check"><a href="/zh-cn/docs/concepts/workloads/pods/disruptions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-disruptions">干扰（Disruptions）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers-check"><a href="/zh-cn/docs/concepts/workloads/pods/ephemeral-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-ephemeral-containers">临时容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-pod-qos-check"><a href="/zh-cn/docs/concepts/workloads/pods/pod-qos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-pod-qos">Pod QoS 类</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-user-namespaces-check"><a href="/zh-cn/docs/concepts/workloads/pods/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-user-namespaces">用户命名空间</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-pods-downward-api-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-pods-downward-api-check"/> <label for="m-zh-cn-docs-concepts-workloads-pods-downward-api-check"><a href="/zh-cn/docs/concepts/workloads/pods/downward-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-pods-downward-api">Downward API</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-workloads-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-check"><a href="/zh-cn/docs/concepts/workloads/controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-workloads-controllers">工作负载资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-deployment-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-deployment-check"><a href="/zh-cn/docs/concepts/workloads/controllers/deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-deployment">Deployments</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-replicaset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/replicaset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-replicaset">ReplicaSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-statefulset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-statefulset">StatefulSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-daemonset-check"><a href="/zh-cn/docs/concepts/workloads/controllers/daemonset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-daemonset">DaemonSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-job-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-job-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-job-check"><a href="/zh-cn/docs/concepts/workloads/controllers/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-job">Job</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished-check"><a href="/zh-cn/docs/concepts/workloads/controllers/ttlafterfinished/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-ttlafterfinished">已完成 Job 的自动清理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs-check"><a href="/zh-cn/docs/concepts/workloads/controllers/cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-cron-jobs">CronJob</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-check"/> <label for="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller-check"><a href="/zh-cn/docs/concepts/workloads/controllers/replicationcontroller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-workloads-controllers-replicationcontroller">ReplicationController</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-services-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-check"/> <label for="m-zh-cn-docs-concepts-services-networking-check"><a href="/zh-cn/docs/concepts/services-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-services-networking">服务、负载均衡和联网</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-service-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-service-check"/> <label for="m-zh-cn-docs-concepts-services-networking-service-check"><a href="/zh-cn/docs/concepts/services-networking/service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-service">服务（Service）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-ingress-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-ingress-check"/> <label for="m-zh-cn-docs-concepts-services-networking-ingress-check"><a href="/zh-cn/docs/concepts/services-networking/ingress/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-ingress">Ingress</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers-check"/> <label for="m-zh-cn-docs-concepts-services-networking-ingress-controllers-check"><a href="/zh-cn/docs/concepts/services-networking/ingress-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-ingress-controllers">Ingress 控制器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-services-networking-gateway-li"> <input type="checkbox" id="m-docs-concepts-services-networking-gateway-check"/> <label for="m-docs-concepts-services-networking-gateway-check"><a href="/docs/concepts/services-networking/gateway/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-services-networking-gateway">Gateway API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices-check"/> <label for="m-zh-cn-docs-concepts-services-networking-endpoint-slices-check"><a href="/zh-cn/docs/concepts/services-networking/endpoint-slices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-endpoint-slices">EndpointSlice</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-network-policies-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-network-policies-check"/> <label for="m-zh-cn-docs-concepts-services-networking-network-policies-check"><a href="/zh-cn/docs/concepts/services-networking/network-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-network-policies">网络策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service-check"/> <label for="m-zh-cn-docs-concepts-services-networking-dns-pod-service-check"><a href="/zh-cn/docs/concepts/services-networking/dns-pod-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-dns-pod-service">Service 与 Pod 的 DNS</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-dual-stack-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-dual-stack-check"/> <label for="m-zh-cn-docs-concepts-services-networking-dual-stack-check"><a href="/zh-cn/docs/concepts/services-networking/dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-dual-stack">IPv4/IPv6 双协议栈</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-check"/> <label for="m-zh-cn-docs-concepts-services-networking-topology-aware-routing-check"><a href="/zh-cn/docs/concepts/services-networking/topology-aware-routing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-topology-aware-routing">拓扑感知路由</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-windows-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-windows-networking-check"/> <label for="m-zh-cn-docs-concepts-services-networking-windows-networking-check"><a href="/zh-cn/docs/concepts/services-networking/windows-networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-windows-networking">Windows 网络</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-check"/> <label for="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation-check"><a href="/zh-cn/docs/concepts/services-networking/cluster-ip-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-cluster-ip-allocation">Service ClusterIP 分配</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-check"/> <label for="m-zh-cn-docs-concepts-services-networking-service-traffic-policy-check"><a href="/zh-cn/docs/concepts/services-networking/service-traffic-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-services-networking-service-traffic-policy">服务内部流量策略</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-storage-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-check"/> <label for="m-zh-cn-docs-concepts-storage-check"><a href="/zh-cn/docs/concepts/storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-storage">存储</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-volumes-check"><a href="/zh-cn/docs/concepts/storage/volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volumes">卷</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-persistent-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-persistent-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-persistent-volumes-check"><a href="/zh-cn/docs/concepts/storage/persistent-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-persistent-volumes">持久卷</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-projected-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-projected-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-projected-volumes-check"><a href="/zh-cn/docs/concepts/storage/projected-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-projected-volumes">投射卷</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes-check"/> <label for="m-zh-cn-docs-concepts-storage-ephemeral-volumes-check"><a href="/zh-cn/docs/concepts/storage/ephemeral-volumes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-ephemeral-volumes">临时卷</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-classes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-classes-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-classes-check"><a href="/zh-cn/docs/concepts/storage/storage-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-classes">存储类</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning-check"/> <label for="m-zh-cn-docs-concepts-storage-dynamic-provisioning-check"><a href="/zh-cn/docs/concepts/storage/dynamic-provisioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-dynamic-provisioning">动态卷制备</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-snapshots-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-snapshots-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-snapshots-check"><a href="/zh-cn/docs/concepts/storage/volume-snapshots/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-snapshots">卷快照</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-snapshot-classes-check"><a href="/zh-cn/docs/concepts/storage/volume-snapshot-classes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-snapshot-classes">卷快照类</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-pvc-datasource-check"><a href="/zh-cn/docs/concepts/storage/volume-pvc-datasource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-pvc-datasource">CSI 卷克隆</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-capacity-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-capacity-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-capacity-check"><a href="/zh-cn/docs/concepts/storage/storage-capacity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-capacity">存储容量</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-storage-limits-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-storage-limits-check"/> <label for="m-zh-cn-docs-concepts-storage-storage-limits-check"><a href="/zh-cn/docs/concepts/storage/storage-limits/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-storage-limits">特定于节点的卷数限制</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring-check"/> <label for="m-zh-cn-docs-concepts-storage-volume-health-monitoring-check"><a href="/zh-cn/docs/concepts/storage/volume-health-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-volume-health-monitoring">卷健康监测</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-storage-windows-storage-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-storage-windows-storage-check"/> <label for="m-zh-cn-docs-concepts-storage-windows-storage-check"><a href="/zh-cn/docs/concepts/storage/windows-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-storage-windows-storage">Windows 存储</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-configuration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-check"/> <label for="m-zh-cn-docs-concepts-configuration-check"><a href="/zh-cn/docs/concepts/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-configuration">配置</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-overview-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-overview-check"/> <label for="m-zh-cn-docs-concepts-configuration-overview-check"><a href="/zh-cn/docs/concepts/configuration/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-overview">配置最佳实践</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-configmap-check"/> <label for="m-zh-cn-docs-concepts-configuration-configmap-check"><a href="/zh-cn/docs/concepts/configuration/configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-configmap">ConfigMap</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-secret-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-secret-check"/> <label for="m-zh-cn-docs-concepts-configuration-secret-check"><a href="/zh-cn/docs/concepts/configuration/secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-secret">Secret</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers-check"/> <label for="m-zh-cn-docs-concepts-configuration-manage-resources-containers-check"><a href="/zh-cn/docs/concepts/configuration/manage-resources-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-manage-resources-containers">为 Pod 和容器管理资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"/> <label for="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig-check"><a href="/zh-cn/docs/concepts/configuration/organize-cluster-access-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-organize-cluster-access-kubeconfig">使用 kubeconfig 文件组织集群访问</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-configuration-windows-resource-management-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-configuration-windows-resource-management-check"/> <label for="m-zh-cn-docs-concepts-configuration-windows-resource-management-check"><a href="/zh-cn/docs/concepts/configuration/windows-resource-management/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-configuration-windows-resource-management">Windows 节点的资源管理</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-security-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-check"/> <label for="m-zh-cn-docs-concepts-security-check"><a href="/zh-cn/docs/concepts/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-security">安全</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-overview-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-overview-check"/> <label for="m-zh-cn-docs-concepts-security-overview-check"><a href="/zh-cn/docs/concepts/security/overview/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-overview">云原生安全概述</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-standards-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-standards-check"><a href="/zh-cn/docs/concepts/security/pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-standards">Pod 安全性标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-service-accounts-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-service-accounts-check"/> <label for="m-zh-cn-docs-concepts-security-service-accounts-check"><a href="/zh-cn/docs/concepts/security/service-accounts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-service-accounts">服务账号</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-admission-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-admission-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-admission-check"><a href="/zh-cn/docs/concepts/security/pod-security-admission/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-admission">Pod 安全性准入</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-pod-security-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-pod-security-policy-check"/> <label for="m-zh-cn-docs-concepts-security-pod-security-policy-check"><a href="/zh-cn/docs/concepts/security/pod-security-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-pod-security-policy">Pod 安全策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-windows-security-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-windows-security-check"/> <label for="m-zh-cn-docs-concepts-security-windows-security-check"><a href="/zh-cn/docs/concepts/security/windows-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-windows-security">Windows 节点的安全性</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-controlling-access-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-controlling-access-check"/> <label for="m-zh-cn-docs-concepts-security-controlling-access-check"><a href="/zh-cn/docs/concepts/security/controlling-access/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-controlling-access">Kubernetes API 访问控制</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-rbac-good-practices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-rbac-good-practices-check"/> <label for="m-zh-cn-docs-concepts-security-rbac-good-practices-check"><a href="/zh-cn/docs/concepts/security/rbac-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-rbac-good-practices">基于角色的访问控制良好实践</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-secrets-good-practices-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-secrets-good-practices-check"/> <label for="m-zh-cn-docs-concepts-security-secrets-good-practices-check"><a href="/zh-cn/docs/concepts/security/secrets-good-practices/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-secrets-good-practices">Kubernetes Secret 良好实践</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-multi-tenancy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-multi-tenancy-check"/> <label for="m-zh-cn-docs-concepts-security-multi-tenancy-check"><a href="/zh-cn/docs/concepts/security/multi-tenancy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-multi-tenancy">多租户</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms-li"> <input type="checkbox" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms-check"/> <label for="m-docs-concepts-security-hardening-guide-authentication-mechanisms-check"><a href="/docs/concepts/security/hardening-guide/authentication-mechanisms/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-concepts-security-hardening-guide-authentication-mechanisms">Hardening Guide - Authentication Mechanisms</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks-check"/> <label for="m-zh-cn-docs-concepts-security-api-server-bypass-risks-check"><a href="/zh-cn/docs/concepts/security/api-server-bypass-risks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-api-server-bypass-risks">Kubernetes API 服务器旁路风险</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-security-security-checklist-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-security-security-checklist-check"/> <label for="m-zh-cn-docs-concepts-security-security-checklist-check"><a href="/zh-cn/docs/concepts/security/security-checklist/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-security-security-checklist">安全检查清单</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-policy-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-check"/> <label for="m-zh-cn-docs-concepts-policy-check"><a href="/zh-cn/docs/concepts/policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-policy">策略</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-limit-range-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-limit-range-check"/> <label for="m-zh-cn-docs-concepts-policy-limit-range-check"><a href="/zh-cn/docs/concepts/policy/limit-range/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-limit-range">限制范围</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-resource-quotas-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-resource-quotas-check"/> <label for="m-zh-cn-docs-concepts-policy-resource-quotas-check"><a href="/zh-cn/docs/concepts/policy/resource-quotas/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-resource-quotas">资源配额</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-pid-limiting-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-pid-limiting-check"/> <label for="m-zh-cn-docs-concepts-policy-pid-limiting-check"><a href="/zh-cn/docs/concepts/policy/pid-limiting/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-pid-limiting">进程 ID 约束与预留</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-policy-node-resource-managers-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-policy-node-resource-managers-check"/> <label for="m-zh-cn-docs-concepts-policy-node-resource-managers-check"><a href="/zh-cn/docs/concepts/policy/node-resource-managers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-policy-node-resource-managers">节点资源管理器</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-scheduling-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-scheduling-eviction">调度、抢占和驱逐</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-kube-scheduler">Kubernetes 调度器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/assign-pod-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-assign-pod-node">将 Pod 指派给节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-overhead/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-overhead">Pod 开销</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-scheduling-readiness/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-scheduling-readiness">Pod 调度就绪态</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/topology-spread-constraints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-topology-spread-constraints">Pod 拓扑分布约束</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/taint-and-toleration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-taint-and-toleration">污点和容忍度</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/scheduling-framework/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduling-framework">调度框架</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/dynamic-resource-allocation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-dynamic-resource-allocation">动态资源分配</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-scheduler-perf-tuning">调度器性能调优</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/resource-bin-packing/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-resource-bin-packing">资源装箱</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/pod-priority-preemption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-pod-priority-preemption">Pod 优先级和抢占</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/node-pressure-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-node-pressure-eviction">节点压力驱逐</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-check"/> <label for="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction-check"><a href="/zh-cn/docs/concepts/scheduling-eviction/api-eviction/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-scheduling-eviction-api-eviction">API 发起的驱逐</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-cluster-administration-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-check"><a href="/zh-cn/docs/concepts/cluster-administration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-cluster-administration">集群管理</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-certificates-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-certificates-check"><a href="/zh-cn/docs/concepts/cluster-administration/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-certificates">证书</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-manage-deployment-check"><a href="/zh-cn/docs/concepts/cluster-administration/manage-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-manage-deployment">管理资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-networking-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-networking-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-networking-check"><a href="/zh-cn/docs/concepts/cluster-administration/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-networking">集群网络系统</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-logging-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-logging-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-logging-check"><a href="/zh-cn/docs/concepts/cluster-administration/logging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-logging">日志架构</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-metrics-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-metrics">Kubernetes 系统组件指标</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-logs-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-logs-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-logs-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-logs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-logs">系统日志</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-system-traces-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-system-traces-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-system-traces-check"><a href="/zh-cn/docs/concepts/cluster-administration/system-traces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-system-traces">追踪 Kubernetes 系统组件</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-proxies-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-proxies-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-proxies-check"><a href="/zh-cn/docs/concepts/cluster-administration/proxies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-proxies">Kubernetes 中的代理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-flow-control-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-flow-control-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-flow-control-check"><a href="/zh-cn/docs/concepts/cluster-administration/flow-control/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-flow-control">API 优先级和公平性</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-cluster-administration-addons-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-cluster-administration-addons-check"/> <label for="m-zh-cn-docs-concepts-cluster-administration-addons-check"><a href="/zh-cn/docs/concepts/cluster-administration/addons/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-cluster-administration-addons">安装扩展（Addon）</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-windows-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-check"/> <label for="m-zh-cn-docs-concepts-windows-check"><a href="/zh-cn/docs/concepts/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-windows">Kubernetes 中的 Windows</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-windows-intro-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-intro-check"/> <label for="m-zh-cn-docs-concepts-windows-intro-check"><a href="/zh-cn/docs/concepts/windows/intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-windows-intro">Kubernetes 中的 Windows 容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-windows-user-guide-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-windows-user-guide-check"/> <label for="m-zh-cn-docs-concepts-windows-user-guide-check"><a href="/zh-cn/docs/concepts/windows/user-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-windows-user-guide">Kubernetes 中的 Windows 容器调度指南</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes">扩展 Kubernetes</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-operator-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-operator-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-operator-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/operator/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-operator">Operator 模式</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net">计算、存储和网络扩展</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-network-plugins">网络插件</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-compute-storage-net-device-plugins">设备插件</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension">扩展 Kubernetes API</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-custom-resources">定制资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-li"> <input type="checkbox" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"/> <label for="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation-check"><a href="/zh-cn/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-concepts-extend-kubernetes-api-extension-apiserver-aggregation">Kubernetes API 聚合层</a></label> </li> </ul> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-check"/> <label for="m-zh-cn-docs-tasks-check"><a href="/zh-cn/docs/tasks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks">任务</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-tools-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-check"/> <label for="m-zh-cn-docs-tasks-tools-check"><a href="/zh-cn/docs/tasks/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-tools">安装工具</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-linux-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-linux/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-linux">在 Linux 系统中安装并设置 kubectl</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-macos-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-macos/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-macos">在 macOS 系统上安装和设置 kubectl</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows-check"/> <label for="m-zh-cn-docs-tasks-tools-install-kubectl-windows-check"><a href="/zh-cn/docs/tasks/tools/install-kubectl-windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tools-install-kubectl-windows">在 Windows 上安装 kubectl</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster">管理集群</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm">用 kubeadm 进行管理</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-certs">使用 kubeadm 进行证书管理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-configure-cgroup-driver">配置 cgroup 驱动</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-reconfigure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-reconfigure">重新配置 kubeadm 集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-kubeadm-upgrade">升级 kubeadm 集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/upgrading-linux-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-linux-nodes">升级 Linux 节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-upgrading-windows-nodes">升级 Windows 节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubeadm/change-package-repository/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubeadm-change-package-repository">更改 Kubernetes 软件包仓库</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim">从 dockershim 迁移</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/change-runtime-containerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-change-runtime-containerd">将节点上的容器运行时从 Docker Engine 改为 containerd</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/migrate-dockershim-dockerd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrate-dockershim-dockerd">将 Docker Engine 节点从 dockershim 迁移到 cri-dockerd</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/find-out-runtime-you-use/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-find-out-runtime-you-use">查明节点上所使用的容器运行时</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/troubleshooting-cni-plugin-related-errors/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-troubleshooting-cni-plugin-related-errors">排查 CNI 插件相关的错误</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-removal-affects-you/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-check-if-dockershim-removal-affects-you">检查移除 Dockershim 是否对你有影响</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents-check"><a href="/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/migrating-telemetry-and-security-agents/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-migrating-from-dockershim-migrating-telemetry-and-security-agents">从 dockershim 迁移遥测和安全代理</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-certificates-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-certificates-check"><a href="/zh-cn/docs/tasks/administer-cluster/certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-certificates">手动生成证书</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources">管理内存、CPU 和 API 资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-default-namespace">为命名空间配置默认的内存请求和限制</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-default-namespace">为命名空间配置默认的 CPU 请求和限制</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-memory-constraint-namespace">配置命名空间的最小和最大内存约束</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-cpu-constraint-namespace">为命名空间配置 CPU 最小和最大约束</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-memory-cpu-namespace">为命名空间配置内存和 CPU 配额</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace-check"><a href="/zh-cn/docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-manage-resources-quota-pod-namespace">配置命名空间下 Pod 配额</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider">安装网络策略驱动</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-antrea-network-policy">使用 Antrea 提供 NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-calico-network-policy">使用 Calico 提供 NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-cilium-network-policy">使用 Cilium 提供 NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/kube-router-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-kube-router-network-policy">使用 kube-router 提供 NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-romana-network-policy">使用 Romana 提供 NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-network-policy-provider-weave-network-policy">使用 Weave Net 提供 NetworkPolicy</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api-check"><a href="/zh-cn/docs/tasks/administer-cluster/access-cluster-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-access-cluster-api">使用 Kubernetes API 访问集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node-check"><a href="/zh-cn/docs/tasks/administer-cluster/extended-resource-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-extended-resource-node">为节点发布扩展资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-horizontal-autoscaling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-horizontal-autoscaling">自动扩缩集群 DNS 服务</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg-check"><a href="/zh-cn/docs/tasks/administer-cluster/switch-to-evented-pleg/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-switch-to-evented-pleg">从轮询切换为基于 CRI 事件的更新来获取容器状态</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class-check"><a href="/zh-cn/docs/tasks/administer-cluster/change-default-storage-class/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-change-default-storage-class">改变默认 StorageClass</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/change-pv-reclaim-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-change-pv-reclaim-policy">更改 PersistentVolume 的回收策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller-check"><a href="/zh-cn/docs/tasks/administer-cluster/running-cloud-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-running-cloud-controller">Kubernetes 云管理控制器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-credential-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-credential-provider">配置 kubelet 镜像凭据提供程序</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-quota-api-object-check"><a href="/zh-cn/docs/tasks/administer-cluster/quota-api-object/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-quota-api-object">配置 API 对象配额</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies-check"><a href="/zh-cn/docs/tasks/administer-cluster/cpu-management-policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-cpu-management-policies">控制节点上的 CPU 管理策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-topology-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/topology-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-topology-manager">控制节点上的拓扑管理策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-custom-nameservers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-custom-nameservers">自定义 DNS 服务</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution-check"><a href="/zh-cn/docs/tasks/administer-cluster/dns-debugging-resolution/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-dns-debugging-resolution">调试 DNS 问题</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy-check"><a href="/zh-cn/docs/tasks/administer-cluster/declare-network-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-declare-network-policy">声明网络策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/developing-cloud-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-developing-cloud-controller-manager">开发云控制器管理器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api-check"><a href="/zh-cn/docs/tasks/administer-cluster/enable-disable-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-enable-disable-api">启用/禁用 Kubernetes API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-encrypt-data-check"><a href="/zh-cn/docs/tasks/administer-cluster/encrypt-data/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-encrypt-data">静态加密机密数据</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-decrypt-data-check"><a href="/zh-cn/docs/tasks/administer-cluster/decrypt-data/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-decrypt-data">解密已静态加密的机密数据</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods-check"><a href="/zh-cn/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-guaranteed-scheduling-critical-addon-pods">关键插件 Pod 的调度保证</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent-check"><a href="/zh-cn/docs/tasks/administer-cluster/ip-masq-agent/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-ip-masq-agent">IP Masquerade Agent 用户指南</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption-check"><a href="/zh-cn/docs/tasks/administer-cluster/limit-storage-consumption/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-limit-storage-consumption">限制存储使用量</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration-check"><a href="/zh-cn/docs/tasks/administer-cluster/controller-manager-leader-migration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-controller-manager-leader-migration">迁移多副本的控制面以使用云控制器管理器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough-check"><a href="/zh-cn/docs/tasks/administer-cluster/namespaces-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-walkthrough">名字空间演练</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd-check"><a href="/zh-cn/docs/tasks/administer-cluster/configure-upgrade-etcd/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-configure-upgrade-etcd">操作 Kubernetes 中的 etcd 集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources-check"><a href="/zh-cn/docs/tasks/administer-cluster/reserve-compute-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-reserve-compute-resources">为系统守护进程预留计算资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-in-userns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-in-userns">以非 root 用户身份运行 Kubernetes 节点组件</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node-check"><a href="/zh-cn/docs/tasks/administer-cluster/safely-drain-node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-safely-drain-node">安全地清空一个节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/securing-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-securing-a-cluster">保护集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file-check"><a href="/zh-cn/docs/tasks/administer-cluster/kubelet-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kubelet-config-file">通过配置文件设置 kubelet 参数</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-namespaces-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-namespaces-check"><a href="/zh-cn/docs/tasks/administer-cluster/namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-namespaces">通过名字空间共享集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade-check"><a href="/zh-cn/docs/tasks/administer-cluster/cluster-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-cluster-upgrade">升级集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion-check"><a href="/zh-cn/docs/tasks/administer-cluster/use-cascading-deletion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-use-cascading-deletion">在集群中使用级联删除</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-kms-provider-check"><a href="/zh-cn/docs/tasks/administer-cluster/kms-provider/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-kms-provider">使用 KMS 驱动进行数据加密</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-coredns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-coredns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-coredns-check"><a href="/zh-cn/docs/tasks/administer-cluster/coredns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-coredns">使用 CoreDNS 进行服务发现</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns-check"><a href="/zh-cn/docs/tasks/administer-cluster/nodelocaldns/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-nodelocaldns">在 Kubernetes 集群中使用 NodeLocal DNSCache</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster-check"><a href="/zh-cn/docs/tasks/administer-cluster/sysctl-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-sysctl-cluster">在 Kubernetes 集群中使用 sysctl</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-memory-manager-check"><a href="/zh-cn/docs/tasks/administer-cluster/memory-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-memory-manager">使用 NUMA 感知的内存管理器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-check"/> <label for="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts-check"><a href="/zh-cn/docs/tasks/administer-cluster/verify-signed-artifacts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-administer-cluster-verify-signed-artifacts">验证已签名容器镜像</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-configure-pod-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-check"><a href="/zh-cn/docs/tasks/configure-pod-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-configure-pod-container">配置 Pods 和容器</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-memory-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-memory-resource">为容器和 Pod 分配内存资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-cpu-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-cpu-resource">为容器和 Pods 分配 CPU 资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources-check"><a href="/zh-cn/docs/tasks/configure-pod-container/resize-container-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-resize-container-resources">调整分配给容器的 CPU 和内存资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-gmsa/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-gmsa">为 Windows Pod 和容器配置 GMSA</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-runasusername/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-runasusername">为 Windows 的 Pod 和容器配置 RunAsUserName</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/create-hostprocess-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-create-hostprocess-pod">创建 Windows HostProcess Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/quality-service-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-quality-service-pod">配置 Pod 的服务质量</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-extended-resource-check"><a href="/zh-cn/docs/tasks/configure-pod-container/extended-resource/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-extended-resource">为容器分派扩展资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-volume-storage">配置 Pod 以使用卷进行存储</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-persistent-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-persistent-volume-storage">配置 Pod 以使用 PersistentVolume 作为存储</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-projected-volume-storage/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-projected-volume-storage">配置 Pod 使用投射卷作存储</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-security-context-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-security-context-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-security-context-check"><a href="/zh-cn/docs/tasks/configure-pod-container/security-context/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-security-context">为 Pod 或容器配置安全上下文</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-service-account/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-service-account">为 Pod 配置服务账号</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry-check"><a href="/zh-cn/docs/tasks/configure-pod-container/pull-image-private-registry/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-pull-image-private-registry">从私有仓库拉取镜像</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-liveness-readiness-startup-probes">配置存活、就绪和启动探针</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-pods-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes">将 Pod 分配给节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity-check"><a href="/zh-cn/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-assign-pods-nodes-using-node-affinity">用节点亲和性把 Pod 分配到节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-pod-initialization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-initialization">配置 Pod 初始化</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event-check"><a href="/zh-cn/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-attach-handler-lifecycle-event">为容器的生命周期事件设置处理函数</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap-check"><a href="/zh-cn/docs/tasks/configure-pod-container/configure-pod-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-configure-pod-configmap">配置 Pod 使用 ConfigMap</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace-check"><a href="/zh-cn/docs/tasks/configure-pod-container/share-process-namespace/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-share-process-namespace">在 Pod 中的容器之间共享进程命名空间</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces-check"><a href="/zh-cn/docs/tasks/configure-pod-container/user-namespaces/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-user-namespaces">为 Pod 配置用户名字空间</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-static-pod-check"><a href="/zh-cn/docs/tasks/configure-pod-container/static-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-static-pod">创建静态 Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes-check"><a href="/zh-cn/docs/tasks/configure-pod-container/translate-compose-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-translate-compose-kubernetes">将 Docker Compose 文件转换为 Kubernetes 资源</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller-check"><a href="/zh-cn/docs/tasks/configure-pod-container/enforce-standards-admission-controller/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-admission-controller">通过配置内置准入控制器实施 Pod 安全标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels-check"><a href="/zh-cn/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-enforce-standards-namespace-labels">使用名字空间标签来实施 Pod 安全性标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-check"/> <label for="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp-check"><a href="/zh-cn/docs/tasks/configure-pod-container/migrate-from-psp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configure-pod-container-migrate-from-psp">从 PodSecurityPolicy 迁移到内置的 PodSecurity 准入控制器</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-check"/> <label for="m-zh-cn-docs-tasks-debug-check"><a href="/zh-cn/docs/tasks/debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug">监控、日志和调试</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug-debug-cluster">集群故障排查</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/troubleshoot-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-troubleshoot-kubectl">kubectl 故障排查</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/resource-usage-monitoring/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-usage-monitoring">资源监控工具</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-resource-metrics-pipeline">资源指标管道</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/monitor-node-health/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-monitor-node-health">节点健康监测</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-crictl-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/crictl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-crictl">使用 crictl 对 Kubernetes 节点进行调试</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-windows-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/windows/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-windows">Windows 调试技巧</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-audit-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/audit/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-audit">审计</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/local-debugging/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-local-debugging">使用 telepresence 在本地开发和调试服务</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug-check"><a href="/zh-cn/docs/tasks/debug/debug-cluster/kubectl-node-debug/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-cluster-kubectl-node-debug">用 Kubectl 调试 Kubernetes 节点</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-debug-debug-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-check"><a href="/zh-cn/docs/tasks/debug/debug-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-debug-debug-application">应用故障排除</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-pods-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-pods">调试 Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-service-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-service">调试 Service</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-statefulset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-statefulset">调试 StatefulSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure-check"><a href="/zh-cn/docs/tasks/debug/debug-application/determine-reason-pod-failure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-determine-reason-pod-failure">确定 Pod 失败的原因</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-init-containers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-init-containers">调试 Init 容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod-check"><a href="/zh-cn/docs/tasks/debug/debug-application/debug-running-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-debug-running-pod">调试运行中的 Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-check"/> <label for="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container-check"><a href="/zh-cn/docs/tasks/debug/debug-application/get-shell-running-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-debug-debug-application-get-shell-running-container">获取正在运行容器的 Shell</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-manage-kubernetes-objects">管理 Kubernetes 对象</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/declarative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-declarative-config">使用配置文件对 Kubernetes 对象进行声明式管理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/kustomization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-kustomization">使用 Kustomize 对 Kubernetes 对象进行声明式管理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/imperative-command/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-command">使用指令式命令管理 Kubernetes 对象</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/imperative-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-imperative-config">使用配置文件对 Kubernetes 对象进行命令式管理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"/> <label for="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch-check"><a href="/zh-cn/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-kubernetes-objects-update-api-object-kubectl-patch">使用 kubectl patch 更新 API 对象</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-configmap-secret-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-check"><a href="/zh-cn/docs/tasks/configmap-secret/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-configmap-secret">管理 Secrets</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kubectl">使用 kubectl 管理 Secret</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-config-file/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-config-file">使用配置文件管理 Secret</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"/> <label for="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize-check"><a href="/zh-cn/docs/tasks/configmap-secret/managing-secret-using-kustomize/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-configmap-secret-managing-secret-using-kustomize">使用 Kustomize 管理 Secret</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-inject-data-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-check"><a href="/zh-cn/docs/tasks/inject-data-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-inject-data-application">给应用注入数据</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-command-argument-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-command-argument-container">为容器设置启动时要执行的命令和参数</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-interdependent-environment-variables/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-interdependent-environment-variables">定义相互依赖的环境变量</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container-check"><a href="/zh-cn/docs/tasks/inject-data-application/define-environment-variable-container/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-define-environment-variable-container">为容器设置环境变量</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information-check"><a href="/zh-cn/docs/tasks/inject-data-application/environment-variable-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-environment-variable-expose-pod-information">通过环境变量将 Pod 信息呈现给容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information-check"><a href="/zh-cn/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-downward-api-volume-expose-pod-information">通过文件将 Pod 信息呈现给容器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-check"/> <label for="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure-check"><a href="/zh-cn/docs/tasks/inject-data-application/distribute-credentials-secure/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-inject-data-application-distribute-credentials-secure">使用 Secret 安全地分发凭据</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-run-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-check"><a href="/zh-cn/docs/tasks/run-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-run-application">运行应用</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment-check"><a href="/zh-cn/docs/tasks/run-application/run-stateless-application-deployment/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-stateless-application-deployment">使用 Deployment 运行一个无状态应用</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application-check"><a href="/zh-cn/docs/tasks/run-application/run-single-instance-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-single-instance-stateful-application">运行一个单实例有状态应用</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-check"/> <label for="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application-check"><a href="/zh-cn/docs/tasks/run-application/run-replicated-stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-run-replicated-stateful-application">运行一个有状态的应用程序</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set-check"/> <label for="m-zh-cn-docs-tasks-run-application-scale-stateful-set-check"><a href="/zh-cn/docs/tasks/run-application/scale-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-scale-stateful-set">扩缩 StatefulSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set-check"/> <label for="m-zh-cn-docs-tasks-run-application-delete-stateful-set-check"><a href="/zh-cn/docs/tasks/run-application/delete-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-delete-stateful-set">删除 StatefulSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-check"/> <label for="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod-check"><a href="/zh-cn/docs/tasks/run-application/force-delete-stateful-set-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-force-delete-stateful-set-pod">强制删除 StatefulSet 中的 Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-check"/> <label for="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-check"><a href="/zh-cn/docs/tasks/run-application/horizontal-pod-autoscale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale">Pod 水平自动扩缩</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"/> <label for="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough-check"><a href="/zh-cn/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-horizontal-pod-autoscale-walkthrough">HorizontalPodAutoscaler 演练</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-configure-pdb-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-configure-pdb-check"/> <label for="m-zh-cn-docs-tasks-run-application-configure-pdb-check"><a href="/zh-cn/docs/tasks/run-application/configure-pdb/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-configure-pdb">为应用程序设置干扰预算（Disruption Budget）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod-check"/> <label for="m-zh-cn-docs-tasks-run-application-access-api-from-pod-check"><a href="/zh-cn/docs/tasks/run-application/access-api-from-pod/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-run-application-access-api-from-pod">从 Pod 中访问 Kubernetes API</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-job-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-check"/> <label for="m-zh-cn-docs-tasks-job-check"><a href="/zh-cn/docs/tasks/job/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-job">运行 Jobs</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-check"/> <label for="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs-check"><a href="/zh-cn/docs/tasks/job/automated-tasks-with-cron-jobs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-automated-tasks-with-cron-jobs">使用 CronJob 运行自动化任务</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-check"/> <label for="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue-check"><a href="/zh-cn/docs/tasks/job/coarse-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-coarse-parallel-processing-work-queue">使用工作队列进行粗粒度并行处理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-check"/> <label for="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication-check"><a href="/zh-cn/docs/tasks/job/job-with-pod-to-pod-communication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-job-with-pod-to-pod-communication">带 Pod 间通信的 Job</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-check"/> <label for="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue-check"><a href="/zh-cn/docs/tasks/job/fine-parallel-processing-work-queue/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-fine-parallel-processing-work-queue">使用工作队列进行精细的并行处理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-check"/> <label for="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static-check"><a href="/zh-cn/docs/tasks/job/indexed-parallel-processing-static/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-indexed-parallel-processing-static">使用索引作业完成静态工作分配下的并行处理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion-check"/> <label for="m-zh-cn-docs-tasks-job-parallel-processing-expansion-check"><a href="/zh-cn/docs/tasks/job/parallel-processing-expansion/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-parallel-processing-expansion">使用展开的方式进行并行处理</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-job-pod-failure-policy-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-job-pod-failure-policy-check"/> <label for="m-zh-cn-docs-tasks-job-pod-failure-policy-check"><a href="/zh-cn/docs/tasks/job/pod-failure-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-job-pod-failure-policy">使用 Pod 失效策略处理可重试和不可重试的 Pod 失效</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-access-application-cluster">访问集群中的应用程序</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard-check"><a href="/zh-cn/docs/tasks/access-application-cluster/web-ui-dashboard/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-web-ui-dashboard">部署和访问 Kubernetes 仪表板（Dashboard）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/access-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster">访问集群</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters-check"><a href="/zh-cn/docs/tasks/access-application-cluster/configure-access-multiple-clusters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-configure-access-multiple-clusters">配置对多集群的访问</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-port-forward-access-application-cluster">使用端口转发来访问集群中的应用</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/service-access-application-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-service-access-application-cluster">使用服务来访问集群中的应用</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend-check"><a href="/zh-cn/docs/tasks/access-application-cluster/connecting-frontend-backend/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-connecting-frontend-backend">使用 Service 把前端连接到后端</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer-check"><a href="/zh-cn/docs/tasks/access-application-cluster/create-external-load-balancer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-create-external-load-balancer">创建外部负载均衡器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images-check"><a href="/zh-cn/docs/tasks/access-application-cluster/list-all-running-container-images/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-list-all-running-container-images">列出集群中所有运行容器的镜像</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube-check"><a href="/zh-cn/docs/tasks/access-application-cluster/ingress-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-ingress-minikube">在 Minikube 环境中使用 NGINX Ingress 控制器配置 Ingress</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume-check"><a href="/zh-cn/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-communicate-containers-same-pod-shared-volume">同 Pod 内的容器使用共享卷通信</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster-check"><a href="/zh-cn/docs/tasks/access-application-cluster/configure-dns-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-configure-dns-cluster">为集群配置 DNS</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-check"/> <label for="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services-check"><a href="/zh-cn/docs/tasks/access-application-cluster/access-cluster-services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-access-application-cluster-access-cluster-services">访问集群上运行的服务</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-extend-kubernetes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-extend-kubernetes">扩展 Kubernetes</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/configure-aggregation-layer/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-aggregation-layer">配置聚合层</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources">使用自定义资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definitions">使用 CustomResourceDefinition 扩展 Kubernetes API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-custom-resources-custom-resource-definition-versioning">CustomResourceDefinition 的版本</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/setup-extension-api-server/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-extension-api-server">安装一个扩展的 API server</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/configure-multiple-schedulers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-configure-multiple-schedulers">配置多个调度器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/http-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-http-proxy-access-api">使用 HTTP 代理访问 Kubernetes API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/socks5-proxy-access-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-socks5-proxy-access-api">使用 SOCKS5 代理访问 Kubernetes API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-check"/> <label for="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity-check"><a href="/zh-cn/docs/tasks/extend-kubernetes/setup-konnectivity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubernetes-setup-konnectivity">设置 Konnectivity 服务</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-tls-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-check"/> <label for="m-zh-cn-docs-tasks-tls-check"><a href="/zh-cn/docs/tasks/tls/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-tls">TLS</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-check"/> <label for="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster-check"><a href="/zh-cn/docs/tasks/tls/managing-tls-in-a-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-managing-tls-in-a-cluster">管理集群中的 TLS 认证</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-check"/> <label for="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates-check"><a href="/zh-cn/docs/tasks/tls/manual-rotation-of-ca-certificates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-manual-rotation-of-ca-certificates">手动轮换 CA 证书</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-tls-certificate-rotation-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-tls-certificate-rotation-check"/> <label for="m-zh-cn-docs-tasks-tls-certificate-rotation-check"><a href="/zh-cn/docs/tasks/tls/certificate-rotation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-tls-certificate-rotation">为 kubelet 配置证书轮换</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-manage-daemon-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-check"><a href="/zh-cn/docs/tasks/manage-daemon/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-manage-daemon">管理集群守护进程</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set-check"><a href="/zh-cn/docs/tasks/manage-daemon/update-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-update-daemon-set">对 DaemonSet 执行滚动更新</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set-check"><a href="/zh-cn/docs/tasks/manage-daemon/rollback-daemon-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-rollback-daemon-set">对 DaemonSet 执行回滚</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-check"/> <label for="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes-check"><a href="/zh-cn/docs/tasks/manage-daemon/pods-some-nodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-daemon-pods-some-nodes">仅在某些节点上运行 Pod</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tasks-network-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-check"/> <label for="m-zh-cn-docs-tasks-network-check"><a href="/zh-cn/docs/tasks/network/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tasks-network">网络</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-check"/> <label for="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods-check"><a href="/zh-cn/docs/tasks/network/customize-hosts-file-for-pods/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-network-customize-hosts-file-for-pods">使用 HostAliases 向 Pod /etc/hosts 文件添加条目</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-network-validate-dual-stack-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-network-validate-dual-stack-check"/> <label for="m-zh-cn-docs-tasks-network-validate-dual-stack-check"><a href="/zh-cn/docs/tasks/network/validate-dual-stack/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-network-validate-dual-stack">验证 IPv4/IPv6 双协议栈</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-check"/> <label for="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus-check"><a href="/zh-cn/docs/tasks/manage-gpus/scheduling-gpus/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-gpus-scheduling-gpus">调度 GPU</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-check"/> <label for="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages-check"><a href="/zh-cn/docs/tasks/manage-hugepages/scheduling-hugepages/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-manage-hugepages-scheduling-hugepages">管理巨页（HugePage）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-li"> <input type="checkbox" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-check"/> <label for="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins-check"><a href="/zh-cn/docs/tasks/extend-kubectl/kubectl-plugins/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tasks-extend-kubectl-kubectl-plugins">用插件扩展 kubectl</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-check"/> <label for="m-zh-cn-docs-tutorials-check"><a href="/zh-cn/docs/tutorials/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials">教程</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-hello-minikube-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-hello-minikube-check"/> <label for="m-zh-cn-docs-tutorials-hello-minikube-check"><a href="/zh-cn/docs/tutorials/hello-minikube/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-hello-minikube">你好，Minikube</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics">学习 Kubernetes 基础知识</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/create-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster">创建集群</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-create-cluster-cluster-intro">使用 Minikube 创建集群</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/deploy-app/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app">部署应用</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-deploy-app-deploy-intro">使用 kubectl 创建 Deployment</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore">了解你的应用</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/explore-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-intro">查看 Pod 和节点</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/explore/explore-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-explore-explore-interactive">交互式教程 - 探索你的应用</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-expose-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/expose/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose">公开地暴露你的应用</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/expose/expose-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-expose-expose-intro">使用 Service 暴露你的应用</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-scale-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/scale/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale">扩缩你的应用</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/scale/scale-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-scale-scale-intro">运行应用程序的多个实例</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-kubernetes-basics-update">更新你的应用</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/update-intro/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-intro">执行滚动更新</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-check"/> <label for="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive-check"><a href="/zh-cn/docs/tutorials/kubernetes-basics/update/update-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-kubernetes-basics-update-update-interactive">交互式教程 - 更新你的应用</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-configuration-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-check"/> <label for="m-zh-cn-docs-tutorials-configuration-check"><a href="/zh-cn/docs/tutorials/configuration/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-configuration">配置</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice">示例：配置 java 微服务</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/configure-java-microservice/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice">使用 MicroProfile、ConfigMaps、Secrets 实现外部化应用配置</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive-check"><a href="/zh-cn/docs/tutorials/configuration/configure-java-microservice/configure-java-microservice-interactive/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-java-microservice-configure-java-microservice-interactive">互动教程 - 配置 java 微服务</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-check"/> <label for="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap-check"><a href="/zh-cn/docs/tutorials/configuration/configure-redis-using-configmap/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-configuration-configure-redis-using-configmap">使用 ConfigMap 来配置 Redis</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-security-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-check"/> <label for="m-zh-cn-docs-tutorials-security-check"><a href="/zh-cn/docs/tutorials/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-security">安全</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-cluster-level-pss-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-cluster-level-pss-check"/> <label for="m-zh-cn-docs-tutorials-security-cluster-level-pss-check"><a href="/zh-cn/docs/tutorials/security/cluster-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-cluster-level-pss">在集群级别应用 Pod 安全标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-ns-level-pss-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-ns-level-pss-check"/> <label for="m-zh-cn-docs-tutorials-security-ns-level-pss-check"><a href="/zh-cn/docs/tutorials/security/ns-level-pss/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-ns-level-pss">在名字空间级别应用 Pod 安全标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-apparmor-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-apparmor-check"/> <label for="m-zh-cn-docs-tutorials-security-apparmor-check"><a href="/zh-cn/docs/tutorials/security/apparmor/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-apparmor">使用 AppArmor 限制容器对资源的访问</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-security-seccomp-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-security-seccomp-check"/> <label for="m-zh-cn-docs-tutorials-security-seccomp-check"><a href="/zh-cn/docs/tutorials/security/seccomp/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-security-seccomp">使用 seccomp 限制容器的系统调用</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-stateless-application-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-check"><a href="/zh-cn/docs/tutorials/stateless-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-stateless-application">无状态的应用</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address-check"><a href="/zh-cn/docs/tutorials/stateless-application/expose-external-ip-address/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateless-application-expose-external-ip-address">公开外部 IP 地址以访问集群中应用程序</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateless-application-guestbook-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateless-application-guestbook-check"/> <label for="m-zh-cn-docs-tutorials-stateless-application-guestbook-check"><a href="/zh-cn/docs/tutorials/stateless-application/guestbook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateless-application-guestbook">示例：使用 Redis 部署 PHP 留言板应用</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-stateful-application-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-check"><a href="/zh-cn/docs/tutorials/stateful-application/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-stateful-application">有状态的应用</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set-check"><a href="/zh-cn/docs/tutorials/stateful-application/basic-stateful-set/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-basic-stateful-set">StatefulSet 基础</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume-check"><a href="/zh-cn/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-mysql-wordpress-persistent-volume">示例：使用持久卷部署 WordPress 和 MySQL</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-cassandra-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-cassandra-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-cassandra-check"><a href="/zh-cn/docs/tutorials/stateful-application/cassandra/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-cassandra">示例：使用 StatefulSet 部署 Cassandra</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper-check"/> <label for="m-zh-cn-docs-tutorials-stateful-application-zookeeper-check"><a href="/zh-cn/docs/tutorials/stateful-application/zookeeper/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-stateful-application-zookeeper">运行 ZooKeeper，一个分布式协调系统</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-tutorials-services-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-check"/> <label for="m-zh-cn-docs-tutorials-services-check"><a href="/zh-cn/docs/tutorials/services/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-tutorials-services">Service</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-connect-applications-service-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-connect-applications-service-check"/> <label for="m-zh-cn-docs-tutorials-services-connect-applications-service-check"><a href="/zh-cn/docs/tutorials/services/connect-applications-service/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-connect-applications-service">使用 Service 连接到应用</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-source-ip-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-source-ip-check"/> <label for="m-zh-cn-docs-tutorials-services-source-ip-check"><a href="/zh-cn/docs/tutorials/services/source-ip/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-source-ip">使用源 IP</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-li"> <input type="checkbox" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-check"/> <label for="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow-check"><a href="/zh-cn/docs/tutorials/services/pods-and-endpoint-termination-flow/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-tutorials-services-pods-and-endpoint-termination-flow">探索 Pod 及其端点的终止行为</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-check"/> <label for="m-zh-cn-docs-reference-check"><a href="/zh-cn/docs/reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference">参考</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-glossary-li"> <input type="checkbox" id="m-zh-cn-docs-reference-glossary-check"/> <label for="m-zh-cn-docs-reference-glossary-check"><a href="/zh-cn/docs/reference/glossary/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-glossary">词汇表</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-using-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-check"/> <label for="m-zh-cn-docs-reference-using-api-check"><a href="/zh-cn/docs/reference/using-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-using-api">API 概述</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-api-concepts-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-api-concepts-check"/> <label for="m-zh-cn-docs-reference-using-api-api-concepts-check"><a href="/zh-cn/docs/reference/using-api/api-concepts/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-api-concepts">Kubernetes API 概念</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-server-side-apply-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-server-side-apply-check"/> <label for="m-zh-cn-docs-reference-using-api-server-side-apply-check"><a href="/zh-cn/docs/reference/using-api/server-side-apply/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-server-side-apply">服务器端应用（Server-Side Apply）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-client-libraries-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-client-libraries-check"/> <label for="m-zh-cn-docs-reference-using-api-client-libraries-check"><a href="/zh-cn/docs/reference/using-api/client-libraries/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-client-libraries">客户端库</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-cel-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-cel-check"/> <label for="m-zh-cn-docs-reference-using-api-cel-check"><a href="/zh-cn/docs/reference/using-api/cel/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-cel">Kubernetes 中的通用表达式语言</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-deprecation-policy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-deprecation-policy-check"/> <label for="m-zh-cn-docs-reference-using-api-deprecation-policy-check"><a href="/zh-cn/docs/reference/using-api/deprecation-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-deprecation-policy">Kubernetes 弃用策略</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-deprecation-guide-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-deprecation-guide-check"/> <label for="m-zh-cn-docs-reference-using-api-deprecation-guide-check"><a href="/zh-cn/docs/reference/using-api/deprecation-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-deprecation-guide">已弃用 API 的迁移指南</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-using-api-health-checks-li"> <input type="checkbox" id="m-zh-cn-docs-reference-using-api-health-checks-check"/> <label for="m-zh-cn-docs-reference-using-api-health-checks-check"><a href="/zh-cn/docs/reference/using-api/health-checks/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-using-api-health-checks">Kubernetes API 健康端点</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-access-authn-authz-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-check"><a href="/zh-cn/docs/reference/access-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-access-authn-authz">API 访问控制</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-authentication-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-authentication-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-authentication-check"><a href="/zh-cn/docs/reference/access-authn-authz/authentication/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-authentication">用户认证</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens-check"><a href="/zh-cn/docs/reference/access-authn-authz/bootstrap-tokens/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-bootstrap-tokens">使用启动引导令牌（Bootstrap Tokens）认证</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests-check"><a href="/zh-cn/docs/reference/access-authn-authz/certificate-signing-requests/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-certificate-signing-requests">证书和证书签名请求</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-admission-controllers-check"><a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/" title="准入控制器参考" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-admission-controllers">准入控制器</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers-check"><a href="/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-extensible-admission-controllers">动态准入控制</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin-check"><a href="/zh-cn/docs/reference/access-authn-authz/service-accounts-admin/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-service-accounts-admin">管理服务账号</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-authorization-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-authorization-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-authorization-check"><a href="/zh-cn/docs/reference/access-authn-authz/authorization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-authorization">鉴权概述</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-rbac-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-rbac-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-rbac-check"><a href="/zh-cn/docs/reference/access-authn-authz/rbac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-rbac">使用 RBAC 鉴权</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-abac-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-abac-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-abac-check"><a href="/zh-cn/docs/reference/access-authn-authz/abac/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-abac">使用 ABAC 鉴权</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-node-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-node-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-node-check"><a href="/zh-cn/docs/reference/access-authn-authz/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-node">使用 Node 鉴权</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards-check"><a href="/zh-cn/docs/reference/access-authn-authz/psp-to-pod-security-standards/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-psp-to-pod-security-standards">从 PodSecurityPolicy 映射到 Pod 安全性标准</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-webhook-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-webhook-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-webhook-check"><a href="/zh-cn/docs/reference/access-authn-authz/webhook/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-webhook">Webhook 模式</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz-check"><a href="/zh-cn/docs/reference/access-authn-authz/kubelet-authn-authz/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-authn-authz">Kubelet 认证/鉴权</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping-check"><a href="/zh-cn/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-kubelet-tls-bootstrapping">TLS 启动引导</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-check"/> <label for="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy-check"><a href="/zh-cn/docs/reference/access-authn-authz/validating-admission-policy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-access-authn-authz-validating-admission-policy">验证准入策略（ValidatingAdmissionPolicy）</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-labels-annotations-taints-li"> <input type="checkbox" id="m-zh-cn-docs-reference-labels-annotations-taints-check"/> <label for="m-zh-cn-docs-reference-labels-annotations-taints-check"><a href="/zh-cn/docs/reference/labels-annotations-taints/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-labels-annotations-taints">众所周知的标签、注解和污点</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-li"> <input type="checkbox" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-check"/> <label for="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations-check"><a href="/zh-cn/docs/reference/labels-annotations-taints/audit-annotations/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-labels-annotations-taints-audit-annotations">审计注解</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-check"><a href="/zh-cn/docs/reference/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api">Kubernetes API</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources">工作负载资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-v1">Pod</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-template-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-template-v1">PodTemplate</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/replication-controller-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replication-controller-v1">ReplicationController</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/replica-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-replica-set-v1">ReplicaSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/deployment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-deployment-v1">Deployment</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/stateful-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-stateful-set-v1">StatefulSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/controller-revision-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-controller-revision-v1">ControllerRevision</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-daemon-set-v1">DaemonSet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-job-v1">Job</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/cron-job-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-cron-job-v1">CronJob</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v1">HorizontalPodAutoscaler</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-horizontal-pod-autoscaler-v2">HorizontalPodAutoscaler</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/priority-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-priority-class-v1">PriorityClass</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/pod-scheduling-context-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-pod-scheduling-context-v1alpha2">PodSchedulingContext v1alpha2</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-claim-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-v1alpha2">ResourceClaim v1alpha2</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-claim-template-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-claim-template-v1alpha2">ResourceClaimTemplate v1alpha2</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2-check"><a href="/zh-cn/docs/reference/kubernetes-api/workload-resources/resource-class-v1alpha2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-workload-resources-resource-class-v1alpha2">ResourceClass v1alpha2</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-service-resources">Service 资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-service-v1">Service</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/endpoints-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoints-v1">Endpoints</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-endpoint-slice-v1">EndpointSlice</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/ingress-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-v1">Ingress</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/service-resources/ingress-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-service-resources-ingress-class-v1">IngressClass</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources">配置和存储资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-config-map-v1">ConfigMap</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-secret-v1">Secret</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/volume/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume">Volume</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-claim-v1">PersistentVolumeClaim</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-persistent-volume-v1">PersistentVolume</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-storage-class-v1">StorageClass</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-volume-attachment-v1">VolumeAttachment</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-driver-v1">CSIDriver</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-node-v1">CSINode</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-config-and-storage-resources-csi-storage-capacity-v1">CSIStorageCapacity</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources">身份认证资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/service-account-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-service-account-v1">ServiceAccount</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/token-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-request-v1">TokenRequest</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/token-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-token-review-v1">TokenReview</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-certificate-signing-request-v1">CertificateSigningRequest</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/cluster-trust-bundle-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-cluster-trust-bundle-v1alpha1">ClusterTrustBundle v1alpha1</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authentication-resources/self-subject-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authentication-resources-self-subject-review-v1">SelfSubjectReview</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources">鉴权资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-local-subject-access-review-v1">LocalSubjectAccessReview</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-access-review-v1">SelfSubjectAccessReview</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-self-subject-rules-review-v1">SelfSubjectRulesReview</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-subject-access-review-v1">SubjectAccessReview</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-v1">ClusterRole</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-cluster-role-binding-v1">ClusterRoleBinding</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-v1">Role</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-authorization-resources-role-binding-v1">RoleBinding</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources">策略资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/limit-range-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-limit-range-v1">LimitRange</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/resource-quota-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-resource-quota-v1">ResourceQuota</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/network-policy-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-network-policy-v1">NetworkPolicy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-pod-disruption-budget-v1">PodDisruptionBudget</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/policy-resources/ip-address-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-policy-resources-ip-address-v1alpha1">IPAddress v1alpha1</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources">扩展资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-custom-resource-definition-v1">CustomResourceDefinition</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-mutating-webhook-configuration-v1">MutatingWebhookConfiguration</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-extend-resources-validating-webhook-configuration-v1">ValidatingWebhookConfiguration</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-check"/> <label for="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1-check"><a href="/docs/reference/kubernetes-api/extend-resources/validating-admission-policy-v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-extend-resources-validating-admission-policy-v1beta1">ValidatingAdmissionPolicy v1beta1</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources">集群资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/node-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-node-v1">Node</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/namespace-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-namespace-v1">Namespace</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/event-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-event-v1">Event</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/api-service-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-api-service-v1">APIService</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/lease-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-lease-v1">Lease</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-runtime-class-v1">RuntimeClass</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-flow-schema-v1beta3">FlowSchema v1beta3</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-priority-level-configuration-v1beta3">PriorityLevelConfiguration v1beta3</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/binding-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-binding-v1">Binding</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/component-status-v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-component-status-v1">ComponentStatus</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/cluster-resources/cluster-cidr-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-cluster-resources-cluster-cidr-v1alpha1">ClusterCIDR v1alpha1</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions">公共定义</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/delete-options/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-delete-options">DeleteOptions</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/label-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-label-selector">LabelSelector</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/list-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-list-meta">ListMeta</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-local-object-reference">LocalObjectReference</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/node-selector-requirement/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-node-selector-requirement">NodeSelectorRequirement</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-field-selector">ObjectFieldSelector</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-meta/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-meta">ObjectMeta</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-object-reference">ObjectReference</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/patch/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-patch">Patch</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/quantity/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-quantity">Quantity</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/resource-field-selector/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-resource-field-selector">ResourceFieldSelector</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-status">Status</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-definitions-typed-local-object-reference">TypedLocalObjectReference</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-other-resources-check"><a href="/zh-cn/docs/reference/kubernetes-api/other-resources/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubernetes-api-other-resources">其他资源</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-li"> <input type="checkbox" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-check"/> <label for="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1-check"><a href="/docs/reference/kubernetes-api/other-resources/validating-admission-policy-binding-list-v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1beta1">ValidatingAdmissionPolicyBindingList v1beta1</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1-check"><a href="/zh-cn/docs/reference/kubernetes-api/other-resources/validating-admission-policy-binding-list-v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-other-resources-validating-admission-policy-binding-list-v1alpha1">ValidatingAdmissionPolicyBindingList v1beta1</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-check"/> <label for="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters-check"><a href="/zh-cn/docs/reference/kubernetes-api/common-parameters/common-parameters/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubernetes-api-common-parameters-common-parameters">常用参数</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-instrumentation-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-check"/> <label for="m-zh-cn-docs-reference-instrumentation-check"><a href="/zh-cn/docs/reference/instrumentation/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-instrumentation">插桩</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-slis-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-slis-check"/> <label for="m-zh-cn-docs-reference-instrumentation-slis-check"><a href="/zh-cn/docs/reference/instrumentation/slis/" title="Kubernetes 组件 SLI 指标" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-slis">服务水平指示器指标</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-check"/> <label for="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics-check"><a href="/zh-cn/docs/reference/instrumentation/cri-pod-container-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-cri-pod-container-metrics">CRI Pod 和容器指标</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-instrumentation-node-metrics-li"> <input type="checkbox" id="m-zh-cn-docs-reference-instrumentation-node-metrics-check"/> <label for="m-zh-cn-docs-reference-instrumentation-node-metrics-check"><a href="/zh-cn/docs/reference/instrumentation/node-metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-instrumentation-node-metrics">节点指标数据</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-instrumentation-metrics-li"> <input type="checkbox" id="m-docs-reference-instrumentation-metrics-check"/> <label for="m-docs-reference-instrumentation-metrics-check"><a href="/docs/reference/instrumentation/metrics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-instrumentation-metrics">Kubernetes Metrics Reference</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-issues-security-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-check"/> <label for="m-zh-cn-docs-reference-issues-security-check"><a href="/zh-cn/docs/reference/issues-security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-issues-security">Kubernetes 问题和安全</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-issues-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-issues-check"/> <label for="m-zh-cn-docs-reference-issues-security-issues-check"><a href="/zh-cn/docs/reference/issues-security/issues/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-issues">Kubernetes 问题追踪</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-security-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-security-check"/> <label for="m-zh-cn-docs-reference-issues-security-security-check"><a href="/zh-cn/docs/reference/issues-security/security/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-security">Kubernetes 安全和信息披露</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-issues-security-official-cve-feed-li"> <input type="checkbox" id="m-zh-cn-docs-reference-issues-security-official-cve-feed-check"/> <label for="m-zh-cn-docs-reference-issues-security-official-cve-feed-check"><a href="/zh-cn/docs/reference/issues-security/official-cve-feed/" title="官方 CVE 订阅源" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-issues-security-official-cve-feed">CVE feed</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-node-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-check"/> <label for="m-zh-cn-docs-reference-node-check"><a href="/zh-cn/docs/reference/node/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-node">节点参考信息</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-check"/> <label for="m-zh-cn-docs-reference-node-kubelet-checkpoint-api-check"><a href="/zh-cn/docs/reference/node/kubelet-checkpoint-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-kubelet-checkpoint-api">Kubelet Checkpoint API</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"/> <label for="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes-check"><a href="/zh-cn/docs/reference/node/topics-on-dockershim-and-cri-compatible-runtimes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-topics-on-dockershim-and-cri-compatible-runtimes">关于 dockershim 移除和使用兼容 CRI 运行时的文章</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-device-plugin-api-versions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-device-plugin-api-versions-check"/> <label for="m-zh-cn-docs-reference-node-device-plugin-api-versions-check"><a href="/zh-cn/docs/reference/node/device-plugin-api-versions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-device-plugin-api-versions">Kubelet 设备管理器 API 版本</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-node-status-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-node-status-check"/> <label for="m-zh-cn-docs-reference-node-node-status-check"><a href="/zh-cn/docs/reference/node/node-status/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-node-status">节点状态</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-node-node-labels-li"> <input type="checkbox" id="m-zh-cn-docs-reference-node-node-labels-check"/> <label for="m-zh-cn-docs-reference-node-node-labels-check"><a href="/zh-cn/docs/reference/node/node-labels/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-node-node-labels"></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-networking-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-check"/> <label for="m-zh-cn-docs-reference-networking-check"><a href="/zh-cn/docs/reference/networking/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-networking">网络参考</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-service-protocols-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-service-protocols-check"/> <label for="m-zh-cn-docs-reference-networking-service-protocols-check"><a href="/zh-cn/docs/reference/networking/service-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-service-protocols">Service 所用的协议</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-ports-and-protocols-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-ports-and-protocols-check"/> <label for="m-zh-cn-docs-reference-networking-ports-and-protocols-check"><a href="/zh-cn/docs/reference/networking/ports-and-protocols/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-ports-and-protocols">端口和协议</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-networking-virtual-ips-li"> <input type="checkbox" id="m-zh-cn-docs-reference-networking-virtual-ips-check"/> <label for="m-zh-cn-docs-reference-networking-virtual-ips-check"><a href="/zh-cn/docs/reference/networking/virtual-ips/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-networking-virtual-ips">虚拟 IP 和服务代理</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-setup-tools-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-check"/> <label for="m-zh-cn-docs-reference-setup-tools-check"><a href="/zh-cn/docs/reference/setup-tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-setup-tools">安装工具</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-setup-tools-kubeadm">Kubeadm</a></label> <ul class="ul-4 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-init/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init">kubeadm init</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-join/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join">kubeadm join</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade">kubeadm upgrade</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-config">kubeadm config</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-reset/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset">kubeadm reset</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-token/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-token">kubeadm token</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-version/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-version">kubeadm version</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-alpha/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-alpha">kubeadm alpha</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-certs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-certs">kubeadm certs</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-init-phase">kubeadm init phase</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-join-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-join-phase">kubeadm join phase</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-kubeconfig">kubeadm kubeconfig</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-reset-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-reset-phase">kubeadm reset phase</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/kubeadm-upgrade-phase/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-kubeadm-upgrade-phase">kubeadm upgrade phase</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-li"> <input type="checkbox" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-check"/> <label for="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details-check"><a href="/zh-cn/docs/reference/setup-tools/kubeadm/implementation-details/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-setup-tools-kubeadm-implementation-details">实现细节</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-kubectl">命令行工具 (kubectl)</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-cheatsheet-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-cheatsheet-check"/> <label for="m-zh-cn-docs-reference-kubectl-cheatsheet-check"><a href="/zh-cn/docs/reference/kubectl/cheatsheet/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-cheatsheet">kubectl 备忘单</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds-check"/> <label for="m-zh-cn-docs-reference-kubectl-kubectl-cmds-check"><a href="/zh-cn/docs/reference/kubectl/kubectl-cmds/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-kubectl-cmds">kubectl 命令</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-kubectl">kubectl</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-jsonpath-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-jsonpath-check"/> <label for="m-zh-cn-docs-reference-kubectl-jsonpath-check"><a href="/zh-cn/docs/reference/kubectl/jsonpath/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-jsonpath">JSONPath 支持</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-check"/> <label for="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl-check"><a href="/zh-cn/docs/reference/kubectl/docker-cli-to-kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-docker-cli-to-kubectl">适用于 Docker 用户的 kubectl</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-kubectl-conventions-li"> <input type="checkbox" id="m-zh-cn-docs-reference-kubectl-conventions-check"/> <label for="m-zh-cn-docs-reference-kubectl-conventions-check"><a href="/zh-cn/docs/reference/kubectl/conventions/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-kubectl-conventions">kubectl 的用法约定</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-debug-cluster-li"> <input type="checkbox" id="m-zh-cn-docs-reference-debug-cluster-check"/> <label for="m-zh-cn-docs-reference-debug-cluster-check"><a href="/zh-cn/docs/reference/debug-cluster/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-debug-cluster">调试集群</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-debug-cluster-flow-control-li"> <input type="checkbox" id="m-zh-cn-docs-reference-debug-cluster-flow-control-check"/> <label for="m-zh-cn-docs-reference-debug-cluster-flow-control-check"><a href="/zh-cn/docs/reference/debug-cluster/flow-control/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-debug-cluster-flow-control">流控</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-command-line-tools-reference-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-command-line-tools-reference">组件工具</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/feature-gates/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates">特性门控</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-feature-gates-removed">特性门控（已移除）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kubelet-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kubelet/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kubelet">kubelet</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-apiserver">kube-apiserver</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-controller-manager">kube-controller-manager</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-proxy/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-proxy">kube-proxy</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-li"> <input type="checkbox" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-check"/> <label for="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler-check"><a href="/zh-cn/docs/reference/command-line-tools-reference/kube-scheduler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-command-line-tools-reference-kube-scheduler">kube-scheduler</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-config-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-check"/> <label for="m-zh-cn-docs-reference-config-api-check"><a href="/zh-cn/docs/reference/config-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-config-api">配置 API</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-eventratelimit.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-eventratelimit-v1alpha1">Event Rate Limit Configuration (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/imagepolicy.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-imagepolicy-v1alpha1">Image Policy API (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubeconfig-v1-check"><a href="/zh-cn/docs/reference/config-api/kubeconfig.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubeconfig-v1">kube 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-admission-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-admission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-admission-v1">kube-apiserver Admission (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-audit-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-audit.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-audit-v1">kube-apiserver Audit 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-encryption.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-encryption-v1">kube-apiserver 加密配置（v1）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1">kube-apiserver 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1alpha1">kube-apiserver 配置 (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-config-v1beta1">kube-apiserver 配置 (v1beta1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-li"> <input type="checkbox" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"/> <label for="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1-check"><a href="/docs/reference/config-api/kube-controller-manager-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kube-controller-manager-config-v1alpha1">kube-controller-manager Configuration (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kube-proxy-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-proxy-config-v1alpha1">kube-proxy 配置 (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1-check"><a href="/zh-cn/docs/reference/config-api/kube-scheduler-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1">kube-scheduler 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1beta3-check"/> <label for="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1beta3-check"><a href="/zh-cn/docs/reference/config-api/kube-scheduler-config.v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kube-scheduler-config-v1beta3">kube-scheduler 配置 (v1beta3)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-docs-reference-config-api-kubeadm-config-v1beta4-li"> <input type="checkbox" id="m-docs-reference-config-api-kubeadm-config-v1beta4-check"/> <label for="m-docs-reference-config-api-kubeadm-config-v1beta4-check"><a href="/docs/reference/config-api/kubeadm-config.v1beta4/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-docs-reference-config-api-kubeadm-config-v1beta4">kubeadm Configuration (v1beta4)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-check"/> <label for="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3-check"><a href="/zh-cn/docs/reference/config-api/kubeadm-config.v1beta3/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubeadm-config-v1beta3">kubeadm 配置 (v1beta3)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-credentialprovider.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1">Kubelet CredentialProvider (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-credentialprovider.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1alpha1">Kubelet CredentialProvider (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-credentialprovider.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-credentialprovider-v1beta1">Kubelet CredentialProvider (v1beta1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1">Kubelet 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1alpha1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1alpha1">Kubelet 配置 (v1alpha1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/kubelet-config.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-kubelet-config-v1beta1">Kubelet 配置 (v1beta1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1-check"><a href="/zh-cn/docs/reference/config-api/apiserver-webhookadmission.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-apiserver-webhookadmission-v1">WebhookAdmission 配置 (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-client-authentication-v1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-client-authentication-v1-check"/> <label for="m-zh-cn-docs-reference-config-api-client-authentication-v1-check"><a href="/zh-cn/docs/reference/config-api/client-authentication.v1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-client-authentication-v1">客户端身份认证（Client Authentication） (v1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-check"/> <label for="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1-check"><a href="/zh-cn/docs/reference/config-api/client-authentication.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-config-api-client-authentication-v1beta1">客户端身份认证（Client Authentication）(v1beta1)</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-external-api-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-check"/> <label for="m-zh-cn-docs-reference-external-api-check"><a href="/zh-cn/docs/reference/external-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-external-api">外部 API</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-check"/> <label for="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1-check"><a href="/zh-cn/docs/reference/external-api/external-metrics.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-external-metrics-v1beta1">Kubernetes 外部指标 (v1beta1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1-check"/> <label for="m-zh-cn-docs-reference-external-api-metrics-v1beta1-check"><a href="/zh-cn/docs/reference/external-api/metrics.v1beta1/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-metrics-v1beta1">Kubernetes 指标 (v1beta1)</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-li"> <input type="checkbox" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-check"/> <label for="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2-check"><a href="/zh-cn/docs/reference/external-api/custom-metrics.v1beta2/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-external-api-custom-metrics-v1beta2">Kubernetes 自定义指标 (v1beta2)</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-scheduling-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-check"/> <label for="m-zh-cn-docs-reference-scheduling-check"><a href="/zh-cn/docs/reference/scheduling/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-scheduling">调度</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-scheduling-config-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-config-check"/> <label for="m-zh-cn-docs-reference-scheduling-config-check"><a href="/zh-cn/docs/reference/scheduling/config/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-scheduling-config">调度器配置</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-scheduling-policies-li"> <input type="checkbox" id="m-zh-cn-docs-reference-scheduling-policies-check"/> <label for="m-zh-cn-docs-reference-scheduling-policies-check"><a href="/zh-cn/docs/reference/scheduling/policies/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-scheduling-policies">调度策略</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-reference-tools-li"> <input type="checkbox" id="m-zh-cn-docs-reference-tools-check"/> <label for="m-zh-cn-docs-reference-tools-check"><a href="/zh-cn/docs/reference/tools/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-reference-tools">其他工具</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli-li"> <input type="checkbox" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli-check"/> <label for="m-zh-cn-docs-reference-tools-map-crictl-dockercli-check"><a href="/zh-cn/docs/reference/tools/map-crictl-dockercli/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-reference-tools-map-crictl-dockercli">从 Docker 命令行映射到 crictl</a></label> </li> </ul> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-check"/> <label for="m-zh-cn-docs-contribute-check"><a href="/zh-cn/docs/contribute/" title="为 K8s 文档出一份力" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute">贡献</a></label> <ul class="ul-2 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-suggesting-improvements-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-suggesting-improvements-check"/> <label for="m-zh-cn-docs-contribute-suggesting-improvements-check"><a href="/zh-cn/docs/contribute/suggesting-improvements/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-suggesting-improvements">提出内容改进建议</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-new-content-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-check"/> <label for="m-zh-cn-docs-contribute-new-content-check"><a href="/zh-cn/docs/contribute/new-content/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-new-content">贡献新内容</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-open-a-pr-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-open-a-pr-check"/> <label for="m-zh-cn-docs-contribute-new-content-open-a-pr-check"><a href="/zh-cn/docs/contribute/new-content/open-a-pr/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-open-a-pr">发起拉取请求（PR）</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-new-features-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-new-features-check"/> <label for="m-zh-cn-docs-contribute-new-content-new-features-check"><a href="/zh-cn/docs/contribute/new-content/new-features/" title="为发行版本撰写功能特性文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-new-features">为发行版本撰写文档</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies-check"/> <label for="m-zh-cn-docs-contribute-new-content-blogs-case-studies-check"><a href="/zh-cn/docs/contribute/new-content/blogs-case-studies/" title="提交博客和案例分析" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-new-content-blogs-case-studies">博客和案例分析</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-review-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-check"/> <label for="m-zh-cn-docs-contribute-review-check"><a href="/zh-cn/docs/contribute/review/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-review">评阅变更</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-review-reviewing-prs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-reviewing-prs-check"/> <label for="m-zh-cn-docs-contribute-review-reviewing-prs-check"><a href="/zh-cn/docs/contribute/review/reviewing-prs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-review-reviewing-prs">评审 PR</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-review-for-approvers-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-review-for-approvers-check"/> <label for="m-zh-cn-docs-contribute-review-for-approvers-check"><a href="/zh-cn/docs/contribute/review/for-approvers/" title="评阅人和批准人文档" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-review-for-approvers">评阅人和批准人</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-localization-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-localization-check"/> <label for="m-zh-cn-docs-contribute-localization-check"><a href="/zh-cn/docs/contribute/localization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-localization">本地化 Kubernetes 文档</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-participate-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-check"/> <label for="m-zh-cn-docs-contribute-participate-check"><a href="/zh-cn/docs/contribute/participate/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-participate">参与 SIG Docs</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-check"/> <label for="m-zh-cn-docs-contribute-participate-roles-and-responsibilities-check"><a href="/zh-cn/docs/contribute/participate/roles-and-responsibilities/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-roles-and-responsibilities">角色与责任</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-issue-wrangler-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-issue-wrangler-check"/> <label for="m-zh-cn-docs-contribute-participate-issue-wrangler-check"><a href="/zh-cn/docs/contribute/participate/issue-wrangler/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-issue-wrangler">Issue 管理者</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-participate-pr-wranglers-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-participate-pr-wranglers-check"/> <label for="m-zh-cn-docs-contribute-participate-pr-wranglers-check"><a href="/zh-cn/docs/contribute/participate/pr-wranglers/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-participate-pr-wranglers">PR 管理者</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-generate-ref-docs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-generate-ref-docs">更新参考文档</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-quickstart-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/quickstart/" title="参考文档快速入门" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-quickstart">Quickstart</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/contribute-upstream/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-contribute-upstream">为上游 Kubernetes 代码库做出贡献</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubernetes-api/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-api">为 Kubernetes API 生成参考文档</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubectl-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubectl/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubectl">为 kubectl 命令集生成参考文档</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/kubernetes-components/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-kubernetes-components">为 Kubernetes 组件和工具生成参考文档</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"/> <label for="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs-check"><a href="/zh-cn/docs/contribute/generate-ref-docs/prerequisites-ref-docs/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-generate-ref-docs-prerequisites-ref-docs"></a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section with-child" id="m-zh-cn-docs-contribute-style-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-check"/> <label for="m-zh-cn-docs-contribute-style-check"><a href="/zh-cn/docs/contribute/style/" class="align-left pl-0 td-sidebar-link td-sidebar-link__section" id="m-zh-cn-docs-contribute-style">文档样式概述</a></label> <ul class="ul-3 foldable"> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-content-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-content-guide-check"/> <label for="m-zh-cn-docs-contribute-style-content-guide-check"><a href="/zh-cn/docs/contribute/style/content-guide/" title="文档内容指南" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-content-guide">内容指南</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-style-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-style-guide-check"/> <label for="m-zh-cn-docs-contribute-style-style-guide-check"><a href="/zh-cn/docs/contribute/style/style-guide/" title="文档样式指南" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-style-guide">样式指南</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-diagram-guide-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-diagram-guide-check"/> <label for="m-zh-cn-docs-contribute-style-diagram-guide-check"><a href="/zh-cn/docs/contribute/style/diagram-guide/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-diagram-guide">图表指南</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-write-new-topic-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-write-new-topic-check"/> <label for="m-zh-cn-docs-contribute-style-write-new-topic-check"><a href="/zh-cn/docs/contribute/style/write-new-topic/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-write-new-topic">撰写新主题</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-page-content-types-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-page-content-types-check"/> <label for="m-zh-cn-docs-contribute-style-page-content-types-check"><a href="/zh-cn/docs/contribute/style/page-content-types/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-page-content-types">页面内容类型</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-content-organization-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-content-organization-check"/> <label for="m-zh-cn-docs-contribute-style-content-organization-check"><a href="/zh-cn/docs/contribute/style/content-organization/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-content-organization">内容组织</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-style-hugo-shortcodes-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-style-hugo-shortcodes-check"/> <label for="m-zh-cn-docs-contribute-style-hugo-shortcodes-check"><a href="/zh-cn/docs/contribute/style/hugo-shortcodes/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-style-hugo-shortcodes">定制 Hugo 短代码</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-advanced-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-advanced-check"/> <label for="m-zh-cn-docs-contribute-advanced-check"><a href="/zh-cn/docs/contribute/advanced/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-advanced">进阶贡献</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-analytics-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-analytics-check"/> <label for="m-zh-cn-docs-contribute-analytics-check"><a href="/zh-cn/docs/contribute/analytics/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-analytics">查看站点分析</a></label> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-contribute-localization-zh-li"> <input type="checkbox" id="m-zh-cn-docs-contribute-localization-zh-check"/> <label for="m-zh-cn-docs-contribute-localization-zh-check"><a href="/zh-cn/docs/contribute/localization_zh/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-contribute-localization-zh">中文本地化样式指南</a></label> </li> </ul> </li> <li class="td-sidebar-nav__section-title td-sidebar-nav__section without-child" id="m-zh-cn-docs-test-li"> <input type="checkbox" id="m-zh-cn-docs-test-check"/> <label for="m-zh-cn-docs-test-check"><a href="/zh-cn/docs/test/" class="align-left pl-0 td-sidebar-link td-sidebar-link__page" id="m-zh-cn-docs-test">测试页面（中文版）</a></label> </li> </ul> </li> </ul> </nav> </div> </div> <div id="maindoc" class="split pl-md-5 row"> <main role="main" class="col-xl-8"> <nav aria-label="breadcrumb" class="td-breadcrumbs"> <ol class="breadcrumb"> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/">Kubernetes 文档</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/reference/">参考</a> </li> <li class="breadcrumb-item"> <a href="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/">API 访问控制</a> </li> <li class="breadcrumb-item active" aria-current="page"> <a href="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/">动态准入控制</a> </li> </ol> </nav> <section id="deprecation-warning"> <div class="content deprecation-warning pageinfo"> <h3> 你正在查看的文档所针对的是 Kubernetes 版本： v1.28 </h3> Kubernetes v1.28 版本的文档已不再维护。你现在看到的版本来自于一份静态的快照。如需查阅最新文档，请点击 <a href="https://kubernetes.io/docs/home/">最新版本。</a> </div> </section> <div class="td-content"> <h1>动态准入控制</h1>    除了<a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/">内置的 admission 插件</a>，准入插件可以作为扩展独立开发，并以运行时所配置的 Webhook 的形式运行。此页面描述了如何构建、配置、使用和监视准入 Webhook。   <h2 id="what-are-admission-webhooks">什么是准入 Webhook？</h2>  准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。可以定义两种类型的准入 Webhook，即<a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook">验证性质的准入 Webhook</a> 和<a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/#mutatingadmissionwebhook">变更性质的准入 Webhook</a>。变更性质的准入 Webhook 会先被调用。它们可以修改发送到 API 服务器的对象以执行自定义的设置默认值操作。  在完成了所有对象修改并且 API 服务器也验证了所传入的对象之后，验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。 <div class="alert alert-info note callout" role="alert"> 说明：  如果准入 Webhook 需要保证它们所看到的是对象的最终状态以实施某种策略。则应使用验证性质的准入 Webhook，因为对象被修改性质 Webhook 看到之后仍然可能被修改。 </div>  <h2 id="experimenting-with-admission-webhooks">尝试准入 Webhook</h2> 准入 Webhook 本质上是集群控制平面的一部分。你应该非常谨慎地编写和部署它们。如果你打算编写或者部署生产级准入 Webhook，请阅读<a href="/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/#write-an-admission-webhook-server">用户指南</a>以获取相关说明。在下文中，我们将介绍如何快速试验准入 Webhook。  <h3 id="prerequisites">先决条件</h3> <ul> <li> 确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。 <a href="/zh-cn/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use">这里</a> 是一组推荐的 admission 控制器，通常可以启用。 </li> <li> 确保启用了 <code>admissionregistration.k8s.io/v1</code> API。 </li> </ul>  <h3 id="write-an-admission-webhook-server">编写一个准入 Webhook 服务器</h3>  请参阅 Kubernetes e2e 测试中的 <a href="https://github.com/kubernetes/kubernetes/blob/release-1.21/test/images/agnhost/webhook/main.go">Admission Webhook 服务器</a> 的实现。Webhook 处理由 API 服务器发送的 <code>AdmissionReview</code> 请求，并且将其决定作为 <code>AdmissionReview</code> 对象以相同版本发送回去。  有关发送到 Webhook 的数据的详细信息，请参阅 <a href="#request">Webhook 请求</a>。  要获取来自 Webhook 的预期数据，请参阅 <a href="#response">Webhook 响应</a>。  示例准入 Webhook 服务器置 <code>ClientAuth</code> 字段为<a href="https://github.com/kubernetes/kubernetes/blob/v1.22.0/test/images/agnhost/webhook/config.go#L38-L39">空</a>，默认为 <code>NoClientCert</code> 。这意味着 Webhook 服务器不会验证客户端的身份，认为其是 API 服务器。如果你需要双向 TLS 或其他方式来验证客户端，请参阅如何<a href="#authenticate-apiservers">对 API 服务器进行身份认证</a>。  <h3 id="deploy-the-admission-webhook-service">部署准入 Webhook 服务</h3>  e2e 测试中的 Webhook 服务器通过 <a href="/docs/reference/generated/kubernetes-api/v1.28/#deployment-v1-apps">deployment API</a> 部署在 Kubernetes 集群中。该测试还将创建一个 <a href="/docs/reference/generated/kubernetes-api/v1.28/#service-v1-core">Service</a> 作为 Webhook 服务器的前端。参见<a href="https://github.com/kubernetes/kubernetes/blob/v1.22.0/test/e2e/apimachinery/webhook.go#L748">相关代码</a>。  你也可以在集群外部署 Webhook。这样做需要相应地更新你的 Webhook 配置。  <h3 id="configure-admission-webhooks-on-the-fly">即时配置准入 Webhook</h3>  你可以通过 <a href="/docs/reference/generated/kubernetes-api/v1.28/#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a> 或者 <a href="/docs/reference/generated/kubernetes-api/v1.28/#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a> 动态配置哪些资源要被哪些准入 Webhook 处理。  以下是一个 <code>ValidatingWebhookConfiguration</code> 示例，Mutating Webhook 配置与此类似。有关每个配置字段的详细信息，请参阅 <a href="#webhook-configuration">Webhook 配置</a>部分。 <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: name: "pod-policy.example.com" webhooks: - name: "pod-policy.example.com" rules: - apiGroups: [""] apiVersions: ["v1"] operations: ["CREATE"] resources: ["pods"] scope: "Namespaced" clientConfig: service: namespace: "example-namespace" name: "example-service" caBundle: <CA_BUNDLE> admissionReviewVersions: ["v1"] sideEffects: None timeoutSeconds: 5 </code></pre></div><div class="alert alert-info note callout" role="alert"> 说明：  你必须在以上示例中将 <code><CA_BUNDLE></code> 替换为一个有效的 CA 证书包，这是一个用 PEM 编码的（字段值是 Base64 编码） CA 证书包，用于校验 Webhook 的服务器证书。 </div>  <code>scope</code> 字段指定是仅集群范围的资源（Cluster）还是名字空间范围的资源资源（Namespaced）将与此规则匹配。 <code>*</code> 表示没有范围限制。 <div class="alert alert-info note callout" role="alert"> 说明：  当使用 <code>clientConfig.service</code> 时，服务器证书必须对 <code><svc_name>.<svc_namespace>.svc</code> 有效。 </div> <div class="alert alert-info note callout" role="alert"> 说明：  Webhook 调用的默认超时是 10 秒，你可以设置 <code>timeout</code> 并建议对 Webhook 设置较短的超时时间。如果 Webhook 调用超时，则根据 Webhook 的失败策略处理请求。 </div>  当一个 API 服务器收到与 <code>rules</code> 相匹配的请求时，该 API 服务器将按照 <code>clientConfig</code> 中指定的方式向 Webhook 发送一个 <code>admissionReview</code> 请求。 创建 Webhook 配置后，系统将花费几秒钟使新配置生效。  <h3 id="authenticate-apiservers">对 API 服务器进行身份认证</h3>  如果你的 Webhook 需要身份验证，则可以将 API 服务器配置为使用基本身份验证、持有者令牌或证书来向 Webhook 提供身份证明。完成此配置需要三个步骤。  <ul> <li> 启动 API 服务器时，通过 <code>--admission-control-config-file</code> 参数指定准入控制配置文件的位置。 </li> <li> 在准入控制配置文件中，指定 MutatingAdmissionWebhook 控制器和 ValidatingAdmissionWebhook 控制器应该读取凭据的位置。凭证存储在 kubeConfig 文件中（是的，与 kubectl 使用的模式相同），因此字段名称为 <code>kubeConfigFile</code>。以下是一个准入控制配置文件示例： </li> </ul> <ul class="nav nav-tabs" id="admissionconfiguration-example1" role="tablist"><li class="nav-item"><a data-toggle="tab" class="nav-link active" href="#admissionconfiguration-example1-0" role="tab" aria-controls="admissionconfiguration-example1-0" aria-selected="true">apiserver.config.k8s.io/v1</a></li> <li class="nav-item"><a data-toggle="tab" class="nav-link" href="#admissionconfiguration-example1-1" role="tab" aria-controls="admissionconfiguration-example1-1">apiserver.k8s.io/v1alpha1</a></li></ul> <div class="tab-content" id="admissionconfiguration-example1"><div id="admissionconfiguration-example1-0" class="tab-pane show active" role="tabpanel" aria-labelledby="admissionconfiguration-example1-0"> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: ValidatingAdmissionWebhook configuration: apiVersion: apiserver.config.k8s.io/v1 kind: WebhookAdmissionConfiguration kubeConfigFile: "<path-to-kubeconfig-file>" - name: MutatingAdmissionWebhook configuration: apiVersion: apiserver.config.k8s.io/v1 kind: WebhookAdmissionConfiguration kubeConfigFile: "<path-to-kubeconfig-file>" </code></pre></div></div> <div id="admissionconfiguration-example1-1" class="tab-pane" role="tabpanel" aria-labelledby="admissionconfiguration-example1-1">  <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 1.17 中被淘汰，推荐使用 apiserver.config.k8s.io/v1 apiVersion: apiserver.k8s.io/v1alpha1 kind: AdmissionConfiguration plugins: - name: ValidatingAdmissionWebhook configuration: # 1.17 中被淘汰，推荐使用 apiserver.config.k8s.io/v1，kind = WebhookAdmissionConfiguration apiVersion: apiserver.config.k8s.io/v1alpha1 kind: WebhookAdmission kubeConfigFile: "<path-to-kubeconfig-file>" - name: MutatingAdmissionWebhook configuration: # 1.17 中被淘汰，推荐使用 apiserver.config.k8s.io/v1，kind = WebhookAdmissionConfiguration apiVersion: apiserver.config.k8s.io/v1alpha1 kind: WebhookAdmission kubeConfigFile: "<path-to-kubeconfig-file>" </code></pre></div></div></div>  有关 <code>AdmissionConfiguration</code> 的更多信息，请参见 <a href="/docs/reference/config-api/apiserver-webhookadmission.v1/">AdmissionConfiguration (v1) reference</a>。有关每个配置字段的详细信息，请参见 <a href="#webhook-%E9%85%8D%E7%BD%AE">Webhook 配置</a>部分。 在 kubeConfig 文件中，提供证书凭据：  <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: v1 kind: Config users: # 名称应设置为服务的 DNS 名称或配置了 Webhook 的 URL 的主机名（包括端口）。 # 如果将非 443 端口用于服务，则在配置 1.16+ API 服务器时，该端口必须包含在名称中。 # # 对于配置在默认端口（443）上与服务对话的 Webhook，请指定服务的 DNS 名称： # - name: webhook1.ns1.svc # user: ... # # 对于配置在非默认端口（例如 8443）上与服务对话的 Webhook，请在 1.16+ 中指定服务的 DNS 名称和端口： # - name: webhook1.ns1.svc:8443 # user: ... # 并可以选择仅使用服务的 DNS 名称来创建第二节，以与 1.15 API 服务器版本兼容： # - name: webhook1.ns1.svc # user: ... # # 对于配置为使用 URL 的 webhook，请匹配在 webhook 的 URL 中指定的主机（和端口）。 # 带有 `url: https://www.example.com` 的 webhook： # - name: www.example.com # user: ... # # 带有 `url: https://www.example.com:443` 的 webhook： # - name: www.example.com:443 # user: ... # # 带有 `url: https://www.example.com:8443` 的 webhook： # - name: www.example.com:8443 # user: ... # - name: 'webhook1.ns1.svc' user: client-certificate-data: "<pem encoded certificate>" client-key-data: "<pem encoded key>" # `name` 支持使用 * 通配符匹配前缀段。 - name: '*.webhook-company.org' user: password: "<password>" username: "<name>" # '*' 是默认匹配项。 - name: '*' user: token: "<token>" </code></pre></div> 当然，你需要设置 Webhook 服务器来处理这些身份验证请求。  <h2 id="webhook-request-and-response">Webhook 请求与响应</h2>  <h3 id="request">请求</h3> Webhook 发送 POST 请求时，请设置 <code>Content-Type: application/json</code> 并对 <code>admission.k8s.io</code> API 组中的 <code>AdmissionReview</code> 对象进行序列化，将所得到的 JSON 作为请求的主体。 Webhook 可以在配置中的 <code>admissionReviewVersions</code> 字段指定可接受的 <code>AdmissionReview</code> 对象版本： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com admissionReviewVersions: ["v1", "v1beta1"] </code></pre></div> 创建 Webhook 配置时，<code>admissionReviewVersions</code> 是必填字段。 Webhook 必须支持至少一个当前和以前的 API 服务器都可以解析的 <code>AdmissionReview</code> 版本。  API 服务器将发送的是 <code>admissionReviewVersions</code> 列表中所支持的第一个 <code>AdmissionReview</code> 版本。如果 API 服务器不支持列表中的任何版本，则不允许创建配置。 如果 API 服务器遇到以前创建的 Webhook 配置，并且不支持该 API 服务器知道如何发送的任何 <code>AdmissionReview</code> 版本，则调用 Webhook 的尝试将失败，并依据<a href="#failure-policy">失败策略</a>进行处理。 此示例显示了 <code>AdmissionReview</code> 对象中包含的数据，该数据用于请求更新 <code>apps/v1</code> <code>Deployment</code> 的 <code>scale</code> 子资源： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admission.k8s.io/v1 kind: AdmissionReview request: # 唯一标识此准入回调的随机 uid uid: 705ab4f5-6393-11e8-b7cc-42010a800002 # 传入完全正确的 group/version/kind 对象 kind: group: autoscaling version: v1 kind: Scale # 修改 resource 的完全正确的的 group/version/kind resource: group: apps version: v1 resource: deployments # subResource（如果请求是针对 subResource 的） subResource: scale # 在对 API 服务器的原始请求中，传入对象的标准 group/version/kind # 仅当 Webhook 指定 `matchPolicy: Equivalent` 且将对 API 服务器的原始请求 # 转换为 Webhook 注册的版本时，这才与 `kind` 不同。 requestKind: group: autoscaling version: v1 kind: Scale # 在对 API 服务器的原始请求中正在修改的资源的标准 group/version/kind # 仅当 Webhook 指定了 `matchPolicy：Equivalent` 并且将对 API 服务器的原始请求转换为 # Webhook 注册的版本时，这才与 `resource` 不同。 requestResource: group: apps version: v1 resource: deployments # subResource（如果请求是针对 subResource 的） # 仅当 Webhook 指定了 `matchPolicy：Equivalent` 并且将对 # API 服务器的原始请求转换为该 Webhook 注册的版本时，这才与 `subResource` 不同。 requestSubResource: scale # 被修改资源的名称 name: my-deployment # 如果资源是属于名字空间（或者是名字空间对象），则这是被修改的资源的名字空间 namespace: my-namespace # 操作可以是 CREATE、UPDATE、DELETE 或 CONNECT operation: UPDATE userInfo: # 向 API 服务器发出请求的经过身份验证的用户的用户名 username: admin # 向 API 服务器发出请求的经过身份验证的用户的 UID uid: 014fbff9a07c # 向 API 服务器发出请求的经过身份验证的用户的组成员身份 groups: - system:authenticated - my-admin-group # 向 API 服务器发出请求的用户相关的任意附加信息 # 该字段由 API 服务器身份验证层填充，并且如果 webhook 执行了任何 # SubjectAccessReview 检查，则应将其包括在内。 extra: some-key: - some-value1 - some-value2 # object 是被接纳的新对象。 # 对于 DELETE 操作，它为 null。 object: apiVersion: autoscaling/v1 kind: Scale # oldObject 是现有对象。 # 对于 CREATE 和 CONNECT 操作，它为 null。 oldObject: apiVersion: autoscaling/v1 kind: Scale # options 包含要接受的操作的选项，例如 meta.k8s.io/v CreateOptions、UpdateOptions 或 DeleteOptions。 # 对于 CONNECT 操作，它为 null。 options: apiVersion: meta.k8s.io/v1 kind: UpdateOptions # dryRun 表示 API 请求正在以 `dryrun` 模式运行，并且将不会保留。 # 带有副作用的 Webhook 应该避免在 dryRun 为 true 时激活这些副作用。 # 有关更多详细信息，请参见 http://k8s.io/zh-cn/docs/reference/using-api/api-concepts/#make-a-dry-run-request dryRun: False </code></pre></div> <h3 id="response">响应</h3>  Webhook 使用 HTTP 200 状态码、<code>Content-Type: application/json</code> 和一个包含 <code>AdmissionReview</code> 对象的 JSON 序列化格式来发送响应。该 <code>AdmissionReview</code> 对象与发送的版本相同，且其中包含的 <code>response</code> 字段已被有效填充。  <code>response</code> 至少必须包含以下字段： <ul> <li><code>uid</code>，从发送到 Webhook 的 <code>request.uid</code> 中复制而来</li> <li><code>allowed</code>，设置为 <code>true</code> 或 <code>false</code></li> </ul>  Webhook 允许请求的最简单响应示例： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json">{ "apiVersion": "admission.k8s.io/v1", "kind": "AdmissionReview", "response": { "uid": "<value from request.uid>", "allowed": true } } </code></pre></div> Webhook 禁止请求的最简单响应示例： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json">{ "apiVersion": "admission.k8s.io/v1", "kind": "AdmissionReview", "response": { "uid": "<value from request.uid>", "allowed": false } } </code></pre></div> 当拒绝请求时，Webhook 可以使用 <code>status</code> 字段自定义 http 响应码和返回给用户的消息。有关状态类型的详细信息，请参见 <a href="/docs/reference/generated/kubernetes-api/v1.28/#status-v1-meta">API 文档</a>。禁止请求的响应示例，它定制了向用户显示的 HTTP 状态码和消息： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json">{ "apiVersion": "admission.k8s.io/v1", "kind": "AdmissionReview", "response": { "uid": "<value from request.uid>", "allowed": false, "status": { "code": 403, "message": "You cannot do this because it is Tuesday and your name starts with A" } } } </code></pre></div> 当允许请求时，mutating准入 Webhook 也可以选择修改传入的对象。这是通过在响应中使用 <code>patch</code> 和 <code>patchType</code> 字段来完成的。当前唯一支持的 <code>patchType</code> 是 <code>JSONPatch</code>。有关更多详细信息，请参见 <a href="https://jsonpatch.com/">JSON patch</a>。对于 <code>patchType: JSONPatch</code>，<code>patch</code> 字段包含一个以 base64 编码的 JSON patch 操作数组。  例如，设置 <code>spec.replicas</code> 的单个补丁操作将是 <code>[{"op": "add", "path": "/spec/replicas", "value": 3}]</code>。 如果以 Base64 形式编码，结果将是 <code>W3sib3AiOiAiYWRkIiwgInBhdGgiOiAiL3NwZWMvcmVwbGljYXMiLCAidmFsdWUiOiAzfV0=</code>  因此，添加该标签的 Webhook 响应为： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json">{ "apiVersion": "admission.k8s.io/v1", "kind": "AdmissionReview", "response": { "uid": "<value from request.uid>", "allowed": true, "patchType": "JSONPatch", "patch": "W3sib3AiOiAiYWRkIiwgInBhdGgiOiAiL3NwZWMvcmVwbGljYXMiLCAidmFsdWUiOiAzfV0=" } } </code></pre></div> 准入 Webhook 可以选择性地返回在 HTTP <code>Warning</code> 头中返回给请求客户端的警告消息，警告代码为 299。警告可以与允许或拒绝的准入响应一起发送。  如果你正在实现返回一条警告的 webhook，则： <ul> <li>不要在消息中包括 "Warning:" 前缀</li> <li>使用警告消息描述该客户端进行 API 请求时会遇到或应意识到的问题</li> <li>如果可能，将警告限制为 120 个字符</li> </ul> <div class="alert alert-warning caution callout" role="alert"> 注意：  超过 256 个字符的单条警告消息在返回给客户之前可能会被 API 服务器截断。如果超过 4096 个字符的警告消息（来自所有来源），则额外的警告消息会被忽略。 </div> <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-json" data-lang="json">{ "apiVersion": "admission.k8s.io/v1", "kind": "AdmissionReview", "response": { "uid": "<value from request.uid>", "allowed": true, "warnings": [ "duplicate envvar entries specified with name MY_ENV", "memory request less than 4MB specified for container mycontainer, which will not start successfully" ] } } </code></pre></div> <h2 id="webhook-configuration">Webhook 配置</h2>  要注册准入 Webhook，请创建 <code>MutatingWebhookConfiguration</code> 或 <code>ValidatingWebhookConfiguration</code> API 对象。 <code>MutatingWebhookConfiguration</code> 或<code>ValidatingWebhookConfiguration</code> 对象的名称必须是有效的 <a href="/zh-cn/docs/concepts/overview/working-with-objects/names#dns-subdomain-names">DNS 子域名</a>。 每种配置可以包含一个或多个 Webhook。如果在单个配置中指定了多个 Webhook，则应为每个 Webhook 赋予一个唯一的名称。这是必需的，以使生成的审计日志和指标更易于与激活的配置相匹配。 每个 Webhook 定义以下内容。  <h3 id="matching-requests-rules">匹配请求-规则</h3>  每个 Webhook 必须指定用于确定是否应将对 apiserver 的请求发送到 webhook 的规则列表。每个规则都指定一个或多个 operations、apiGroups、apiVersions 和 resources 以及资源的 scope：  <ul> <li> <code>operations</code> 列出一个或多个要匹配的操作。可以是 <code>CREATE</code>、<code>UPDATE</code>、<code>DELETE</code>、<code>CONNECT</code> 或 <code>*</code> 以匹配所有内容。 </li> <li> <code>apiGroups</code> 列出了一个或多个要匹配的 API 组。<code>""</code> 是核心 API 组。<code>"*"</code> 匹配所有 API 组。 </li> <li> <code>apiVersions</code> 列出了一个或多个要匹配的 API 版本。<code>"*"</code> 匹配所有 API 版本。 </li> <li> <code>resources</code> 列出了一个或多个要匹配的资源。 <ul> <li><code>"*"</code> 匹配所有资源，但不包括子资源。</li> <li><code>"*/*"</code> 匹配所有资源，包括子资源。</li> <li><code>"pods/*"</code> 匹配 pod 的所有子资源。</li> <li><code>"*/status"</code> 匹配所有 status 子资源。</li> </ul> </li> <li> <code>scope</code> 指定要匹配的范围。有效值为 <code>"Cluster"</code>、<code>"Namespaced"</code> 和 <code>"*"</code>。子资源匹配其父资源的范围。默认值为 <code>"*"</code>。 <ul> <li><code>"Cluster"</code> 表示只有集群作用域的资源才能匹配此规则（API 对象 Namespace 是集群作用域的）。</li> <li><code>"Namespaced"</code> 意味着仅具有名字空间的资源才符合此规则。</li> <li><code>"*"</code> 表示没有作用域限制。</li> </ul> </li> </ul>  如果传入请求与任何 Webhook <code>rules</code> 的指定 <code>operations</code>、<code>groups</code>、<code>versions</code>、 <code>resources</code> 和 <code>scope</code> 匹配，则该请求将发送到 Webhook。 以下是可用于指定应拦截哪些资源的规则的其他示例。 匹配针对 <code>apps/v1</code> 和 <code>apps/v1beta1</code> 组中 <code>deployments</code> 和 <code>replicasets</code> 资源的 <code>CREATE</code> 或 <code>UPDATE</code> 请求： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration ... webhooks: - name: my-webhook.example.com rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["apps"] apiVersions: ["v1", "v1beta1"] resources: ["deployments", "replicasets"] scope: "Namespaced" ... </code></pre></div> 匹配所有 API 组和版本中的所有资源（但不包括子资源）的创建请求： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com rules: - operations: ["CREATE"] apiGroups: ["*"] apiVersions: ["*"] resources: ["*"] scope: "*" </code></pre></div> 匹配所有 API 组和版本中所有 <code>status</code> 子资源的更新请求： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com rules: - operations: ["UPDATE"] apiGroups: ["*"] apiVersions: ["*"] resources: ["*/status"] scope: "*" </code></pre></div> <h3 id="matching-requests-objectselector">匹配请求：objectSelector</h3>  通过指定 <code>objectSelector</code>，Webhook 能够根据可能发送的对象的标签来限制哪些请求被拦截。如果指定，则将对 <code>objectSelector</code> 和可能发送到 Webhook 的 object 和 oldObject 进行评估。如果两个对象之一与选择器匹配，则认为该请求已匹配。  空对象（对于创建操作而言为 <code>oldObject</code>，对于删除操作而言为 <code>newObject</code>），或不能带标签的对象（例如 <code>DeploymentRollback</code> 或 <code>PodProxyOptions</code> 对象）被认为不匹配。  仅当选择使用 Webhook 时才使用对象选择器，因为最终用户可以通过设置标签来跳过准入 Webhook。  这个例子展示了一个变更性质的 Webhook，它将匹配带有标签 <code>foo:bar</code> 的所有资源（但不包括子资源）的 <code>CREATE</code> 操作： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com objectSelector: matchLabels: foo: bar rules: - operations: ["CREATE"] apiGroups: ["*"] apiVersions: ["*"] resources: ["*"] scope: "*" </code></pre></div> 有关标签选择器的更多示例，请参见<a href="/zh-cn/docs/concepts/overview/working-with-objects/labels">标签</a>。  <h3 id="matching-requests-namespaceselector">匹配请求：namespaceSelector</h3>  通过指定 <code>namespaceSelector</code>， Webhook 可以根据具有名字空间的资源所处的名字空间的标签来选择拦截哪些资源的操作。  <code>namespaceSelector</code> 根据名字空间的标签是否匹配选择器，决定是否针对具名字空间的资源（或 Namespace 对象）的请求运行 webhook。如果对象是除 Namespace 以外的集群范围的资源，则 <code>namespaceSelector</code> 标签无效。  本例给出的变更性质的 Webhook 将匹配到对名字空间中具名字空间的资源的 <code>CREATE</code> 请求，前提是这些资源不含值为 "0" 或 "1" 的 "runlevel" 标签： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com namespaceSelector: matchExpressions: - key: runlevel operator: NotIn values: ["0", "1"] rules: - operations: ["CREATE"] apiGroups: ["*"] apiVersions: ["*"] resources: ["*"] scope: "Namespaced" </code></pre></div> 此示例显示了一个验证性质的 Webhook，它将匹配到对某名字空间中的任何具名字空间的资源的 <code>CREATE</code> 请求，前提是该名字空间具有值为 "prod" 或 "staging" 的 "environment" 标签： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com namespaceSelector: matchExpressions: - key: environment operator: In values: ["prod", "staging"] rules: - operations: ["CREATE"] apiGroups: ["*"] apiVersions: ["*"] resources: ["*"] scope: "Namespaced" </code></pre></div> 有关标签选择器的更多示例，请参见 <a href="/zh-cn/docs/concepts/overview/working-with-objects/labels">标签</a>。  <h3 id="matching-requests-matchpolicy">匹配请求：matchPolicy</h3>  API 服务器可以通过多个 API 组或版本来提供对象。  例如，如果一个 Webhook 仅为某些 API 组/版本指定了规则（例如 <code>apiGroups:["apps"], apiVersions:["v1","v1beta1"]</code>），而修改资源的请求是通过另一个 API 组/版本（例如 <code>extensions/v1beta1</code>）发出的，该请求将不会被发送到 Webhook。  <code>matchPolicy</code> 允许 Webhook 定义如何使用其 <code>rules</code> 匹配传入的请求。允许的值为 <code>Exact</code> 或 <code>Equivalent</code>。  <ul> <li><code>Exact</code> 表示仅当请求与指定规则完全匹配时才应拦截该请求。</li> <li><code>Equivalent</code> 表示如果某个请求意在修改 <code>rules</code> 中列出的资源，即使该请求是通过其他 API 组或版本发起，也应拦截该请求。</li> </ul> 在上面给出的示例中，仅为 <code>apps/v1</code> 注册的 Webhook 可以使用 <code>matchPolicy</code>： <ul> <li><code>matchPolicy: Exact</code> 表示不会将 <code>extensions/v1beta1</code> 请求发送到 Webhook</li> <li><code>matchPolicy:Equivalent</code> 表示将 <code>extensions/v1beta1</code> 请求发送到 Webhook （将对象转换为 Webhook 指定的版本：<code>apps/v1</code>）</li> </ul>  建议指定 <code>Equivalent</code>，确保升级后启用 API 服务器中资源的新版本时， Webhook 继续拦截他们期望的资源。  当 API 服务器停止提供某资源时，该资源不再被视为等同于该资源的其他仍在提供服务的版本。例如，<code>extensions/v1beta1</code> 中的 Deployment 已被废弃，计划在 v1.16 中移除。 移除后，带有 <code>apiGroups:["extensions"], apiVersions:["v1beta1"], resources: ["deployments"]</code> 规则的 Webhook 将不再拦截通过 <code>apps/v1</code> API 来创建的 Deployment。因此，Webhook 应该优先注册稳定版本的资源。  此示例显示了一个验证性质的 Webhook，该 Webhook 拦截对 Deployment 的修改（无论 API 组或版本是什么），始终会发送一个 <code>apps/v1</code> 版本的 Deployment 对象： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com matchPolicy: Equivalent rules: - operations: ["CREATE","UPDATE","DELETE"] apiGroups: ["apps"] apiVersions: ["v1"] resources: ["deployments"] scope: "Namespaced" </code></pre></div> 准入 Webhook 所用的 <code>matchPolicy</code> 默认为 <code>Equivalent</code>。  <h3 id="matching-requests-matchConditions">匹配请求：<code>matchConditions</code> </h3> <div style="margin-top: 10px; margin-bottom: 10px;"> 特性状态： <code>Kubernetes v1.28 [beta]</code> </div>  如果你需要细粒度地过滤请求，你可以为 Webhook 定义匹配条件。如果你发现匹配规则、<code>objectSelectors</code> 和 <code>namespaceSelectors</code> 仍然不能提供你想要的何时进行 HTTP 调用的过滤条件，那么添加这些条件会很有用。匹配条件是 <a href="/zh-cn/docs/reference/using-api/cel/">CEL 表达式</a>。所有匹配条件都必须为 true 才能调用 Webhook。  以下是一个例子，说明了匹配条件的几种不同用法：  <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com matchPolicy: Equivalent rules: - operations: ['CREATE','UPDATE'] apiGroups: ['*'] apiVersions: ['*'] resources: ['*'] failurePolicy: 'Ignore' # 失败时继续处理请求但跳过 Webhook (可选值) sideEffects: None clientConfig: service: namespace: my-namespace name: my-webhook caBundle: '<omitted>' # 你可以为每个 Webhook 配置最多 64 个 matchConditions matchConditions: - name: 'exclude-leases' # 每个匹配条件必须有唯一的名称 expression: '!(request.resource.group == "coordination.k8s.io" && request.resource.resource == "leases")' # 匹配非租约资源 - name: 'exclude-kubelet-requests' expression: '!("system:nodes" in request.userInfo.groups)' # 匹配非节点用户发出的请求 - name: 'rbac' # 跳过 RBAC 请求，该请求将由第二个 Webhook 处理 expression: 'request.resource.group != "rbac.authorization.k8s.io"' # 这个示例演示了如何使用 “authorizer”。 # 授权检查比简单的表达式更复杂，因此在这个示例中，使用第二个 Webhook 来针对 RBAC 请求进行处理。 # 两个 Webhook 都可以由同一个端点提供服务。 - name: rbac.my-webhook.example.com matchPolicy: Equivalent rules: - operations: ['CREATE','UPDATE'] apiGroups: ['rbac.authorization.k8s.io'] apiVersions: ['*'] resources: ['*'] failurePolicy: 'Fail' # 失败时拒绝请求 (默认值) sideEffects: None clientConfig: service: namespace: my-namespace name: my-webhook caBundle: '<omitted>' # 你可以为每个 Webhook 配置最多 64 个 matchConditions matchConditions: - name: 'breakglass' # 跳过由授权给 “breakglass” 的用户在这个 Webhook 上发起的请求。 # “breakglass” API 不需要在这个检查之外存在。 expression: '!authorizer.group("admissionregistration.k8s.io").resource("validatingwebhookconfigurations").name("my-webhook.example.com").check("breakglass").allowed()' </code></pre></div><div class="alert alert-info note callout" role="alert"> 说明：  你可以为每个 Webhook 在 <code>matchConditions</code> 字段中定义最多 64 个匹配条件。 </div>  匹配条件可以访问以下 CEL 变量：  <ul> <li><code>object</code> - 来自传入请求的对象。对于 DELETE 请求，该值为 null。该对象版本可能根据 <a href="#matching-requests-matchpolicy">matchPolicy</a> 进行转换。</li> </ul>  <ul> <li><code>oldObject</code> - 现有对象。对于 CREATE 请求，该值为 null。</li> </ul>  <ul> <li><code>request</code> - <a href="#request">AdmissionReview</a> 的请求部分，不包括 object 和 oldObject。</li> </ul>  <ul> <li><code>authorizer</code> - 一个 CEL 鉴权组件。可用于对请求的主体（经过身份认证的用户）执行鉴权检查。更多详细信息，请参阅 Kubernetes CEL 库文档中的 <a href="https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz">Authz</a>。</li> </ul>  <ul> <li><code>authorizer.requestResource</code> - 对配置的请求资源（组、资源、（子资源）、名字空间、名称）进行授权检查的快捷方式。</li> </ul>  了解有关 CEL 表达式的更多信息，请参阅 <a href="/zh-cn/docs/reference/using-api/cel/">Kubernetes 参考文档中的通用表达式语言</a>。  如果在对匹配条件求值时出现错误，则不会调用 Webhook。根据以下方式确定是否拒绝请求：  <ol> <li>如果任何一个匹配条件求值结果为 <code>false</code>（不管其他错误），API 服务器将跳过 Webhook。</li> </ol>  <ol> <li>否则： <ul> <li>对于 <a href="#failure-policy"><code>failurePolicy: Fail</code></a>，拒绝请求（不调用 Webhook）。</li> <li>对于 <a href="#failure-policy"><code>failurePolicy: Ignore</code></a>，继续处理请求但跳过 Webhook。</li> </ul> </li> </ol>  <h3 id="contacting-the-webhook">调用 Webhook</h3>  API 服务器确定请求应发送到 Webhook 后，它需要知道如何调用 webhook。此信息在 Webhook 配置的 <code>clientConfig</code> 节中指定。 Webhook 可以通过 URL 或服务引用来调用，并且可以选择包含自定义 CA 包，以用于验证 TLS 连接。  <h4 id="url">URL</h4>  <code>url</code> 以标准 URL 形式给出 Webhook 的位置（<code>scheme://host:port/path</code>）。  <code>host</code> 不应引用集群中运行的服务；通过指定 <code>service</code> 字段来使用服务引用。主机可以通过某些 API 服务器中的外部 DNS 进行解析。（例如，<code>kube-apiserver</code> 无法解析集群内 DNS，因为这将违反分层规则）。<code>host</code> 也可以是 IP 地址。  请注意，将 <code>localhost</code> 或 <code>127.0.0.1</code> 用作 <code>host</code> 是有风险的，除非你非常小心地在所有运行 apiserver 的、可能需要对此 Webhook 进行调用的主机上运行。这样的安装方式可能不具有可移植性，即很难在新集群中启用。  scheme 必须为 "https"；URL 必须以 "https://" 开头。  使用用户或基本身份验证（例如："user:password@"）是不允许的。使用片段（"#..."）和查询参数（"?..."）也是不允许的。  这是配置为调用 URL 的变更性质的 Webhook 的示例（并且期望使用系统信任根证书来验证 TLS 证书，因此不指定 caBundle）： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com clientConfig: url: "https://my-webhook.example.com:9443/my-webhook-path" </code></pre></div> <h4 id="service-reference">服务引用 </h4>  <code>clientConfig</code> 内部的 Service 是对该 Webhook 服务的引用。如果 Webhook 在集群中运行，则应使用 <code>service</code> 而不是 <code>url</code>。服务的 <code>namespace</code> 和 <code>name</code> 是必需的。 <code>port</code> 是可选的，默认值为 443。<code>path</code> 是可选的，默认为 "/"。  这是一个 mutating Webhook 的示例，该 mutating Webhook 配置为在子路径 "/my-path" 端口 "1234" 上调用服务，并使用自定义 CA 包针对 ServerName <code>my-service-name.my-service-namespace.svc</code> 验证 TLS 连接： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com clientConfig: caBundle: <CA_BUNDLE> service: namespace: my-service-namespace name: my-service-name path: /my-path port: 1234 </code></pre></div><div class="alert alert-info note callout" role="alert"> 说明：  你必须在以上示例中将 <code><CA_BUNDLE></code> 替换为一个有效的 VA 证书包，这是一个用 PEM 编码的 CA 证书包，用于校验 Webhook 的服务器证书。 </div>  <h3 id="side-effects">副作用</h3>  Webhook 通常仅对发送给他们的 <code>AdmissionReview</code> 内容进行操作。但是，某些 Webhook 在处理 admission 请求时会进行带外更改。  进行带外更改的（产生“副作用”的） Webhook 必须具有协调机制（如控制器），该机制定期确定事物的实际状态，并调整由准入 Webhook 修改的带外数据以反映现实情况。这是因为对准入 Webhook 的调用不能保证所准入的对象将原样保留，或根本不保留。以后，Webhook 可以修改对象的内容，在写入存储时可能会发生冲突，或者服务器可以在持久保存对象之前关闭电源。  此外，处理 <code>dryRun: true</code> admission 请求时，具有副作用的 Webhook 必须避免产生副作用。一个 Webhook 必须明确指出在使用 <code>dryRun</code> 运行时不会有副作用，否则 <code>dry-run</code> 请求将不会发送到该 Webhook，而 API 请求将会失败。  Webhook 使用 Webhook 配置中的 <code>sideEffects</code> 字段显示它们是否有副作用： <ul> <li><code>None</code>：调用 Webhook 没有副作用。</li> <li><code>NoneOnDryRun</code>：调用 Webhook 可能会有副作用，但是如果将带有 <code>dryRun: true</code> 属性的请求发送到 webhook，则 Webhook 将抑制副作用（该 Webhook 可识别 <code>dryRun</code>）。</li> </ul>  这是一个 validating Webhook 的示例，表明它对 <code>dryRun: true</code> 请求没有副作用： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com sideEffects: NoneOnDryRun </code></pre></div> <h3 id="timeouts">超时</h3>  由于 Webhook 会增加 API 请求的延迟，因此应尽快完成自身的操作。 <code>timeoutSeconds</code> 用来配置在将调用视为失败之前，允许 API 服务器等待 Webhook 响应的时间长度。  如果超时在 Webhook 响应之前被触发，则基于<a href="#failure-policy">失败策略</a>，将忽略 Webhook 调用或拒绝 API 调用。 超时值必须设置在 1 到 30 秒之间。 这是一个自定义超时设置为 2 秒的 validating Webhook 的示例： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration webhooks: - name: my-webhook.example.com timeoutSeconds: 2 </code></pre></div> 准入 Webhook 所用的超时时间默认为 10 秒。  <h3 id="reinvocation-policy">再调用策略 </h3>  变更性质的准入插件（包括 Webhook）的任何一种排序方式都不会适用于所有情况。 (参见 <a href="https://issue.k8s.io/64333">https://issue.k8s.io/64333</a> 示例)。变更性质的 Webhook 可以向对象中添加新的子结构（例如向 <code>pod</code> 中添加 <code>container</code>），已经运行的其他修改插件可能会对这些新结构有影响（就像在所有容器上设置 <code>imagePullPolicy</code> 一样）。  要允许变更性质的准入插件感应到其他插件所做的更改，如果变更性质的 Webhook 修改了一个对象，则会重新运行内置的变更性质的准入插件，并且变更性质的 Webhook 可以指定 <code>reinvocationPolicy</code> 来控制是否也重新调用它们。  可以将 <code>reinvocationPolicy</code> 设置为 <code>Never</code> 或 <code>IfNeeded</code>。默认为 <code>Never</code>。  <ul> <li><code>Never</code>: 在一次准入测试中，不得多次调用 Webhook。</li> <li><code>IfNeeded</code>: 如果在最初的 Webhook 调用之后被其他对象的插件修改了被接纳的对象，则可以作为准入测试的一部分再次调用该 webhook。</li> </ul>  要注意的重要因素有：  <ul> <li>不能保证附加调用的次数恰好是一。</li> <li>如果其他调用导致对该对象的进一步修改，则不能保证再次调用 Webhook。</li> <li>使用此选项的 Webhook 可能会重新排序，以最大程度地减少额外调用的次数。</li> <li>要在确保所有修改都完成后验证对象，请改用验证性质的 Webhook （推荐用于有副作用的 Webhook）。</li> </ul>  这是一个变更性质的 Webhook 的示例，该 Webhook 在以后的准入插件修改对象时被重新调用： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com reinvocationPolicy: IfNeeded </code></pre></div> 变更性质的 Webhook 必须具有<a href="#idempotence">幂等</a>性，并且能够成功处理已被接纳并可能被修改的对象的变更性质的 Webhook。对于所有变更性质的准入 Webhook 都是如此，因为它们可以在对象中进行的任何更改可能已经存在于用户提供的对象中，但是对于选择重新调用的 Webhook 来说是必不可少的。  <h3 id="failure-policy">失败策略</h3>  <code>failurePolicy</code> 定义了如何处理准入 Webhook 中无法识别的错误和超时错误。允许的值为 <code>Ignore</code> 或 <code>Fail</code>。 <ul> <li><code>Ignore</code> 表示调用 Webhook 的错误将被忽略并且允许 API 请求继续。</li> <li><code>Fail</code> 表示调用 Webhook 的错误导致准入失败并且 API 请求被拒绝。</li> </ul> 这是一个变更性质的 webhook，配置为在调用准入 Webhook 遇到错误时拒绝 API 请求： <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml">apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration webhooks: - name: my-webhook.example.com failurePolicy: Fail </code></pre></div> 准入 Webhook 所用的默认 <code>failurePolicy</code> 是 <code>Fail</code>。  <h2 id="monitoring-admission-webhooks">监控 Admission Webhook </h2>  API 服务器提供了监视准入 Webhook 行为的方法。这些监视机制可帮助集群管理员回答以下问题： <ol> <li>哪个变更性质的 Webhook 改变了 API 请求中的对象？</li> <li>变更性质的 Webhook 对对象做了哪些更改？</li> <li>哪些 Webhook 经常拒绝 API 请求？是什么原因拒绝？</li> </ol>  <h3 id="mutating-webhook-auditing-annotations">Mutating Webhook 审计注解</h3>  有时，了解 API 请求中的哪个变更性质的 Webhook 使对象改变以及该 Webhook 应用了哪些更改很有用。  Kubernetes API 服务器针对每个变更性质的 Webhook 调用执行<a href="/zh-cn/docs/tasks/debug/debug-cluster/audit/">审计</a>操作。每个调用都会生成一个审计注解，记述请求对象是否发生改变，可选地还可以根据 Webhook 的准入响应生成一个注解，记述所应用的修补。针对给定请求的给定执行阶段，注解被添加到审计事件中，然后根据特定策略进行预处理并写入后端。  事件的审计级别决定了要记录哪些注解：  <ul> <li> 在 <code>Metadata</code> 或更高审计级别上，将使用 JSON 负载记录带有键名 <code>mutation.webhook.admission.k8s.io/round_{round idx}_index_{order idx}</code> 的注解，该注解表示针对给定请求调用了 Webhook，以及该 Webhook 是否更改了对象。  例如，对于正在被重新调用的某 Webhook，所记录的注解如下。 Webhook 在 mutating Webhook 链中排在第三个位置，并且在调用期间未改变请求对象。 <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 审计事件相关记录 { "kind": "Event", "apiVersion": "audit.k8s.io/v1", "annotations": { "mutation.webhook.admission.k8s.io/round_1_index_2": "{\"configuration\":\"my-mutating-webhook-configuration.example.com\",\"webhook\":\"my-webhook.example.com\",\"mutated\": false}" # 其他注解 ... } # 其他字段 ... } </code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 反序列化的注解值 { "configuration": "my-mutating-webhook-configuration.example.com", "webhook": "my-webhook.example.com", "mutated": false } </code></pre></div> 对于在第一轮中调用的 Webhook，所记录的注解如下。 Webhook 在 mutating Webhook 链中排在第一位，并在调用期间改变了请求对象。 <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 审计事件相关记录 { "kind": "Event", "apiVersion": "audit.k8s.io/v1", "annotations": { "mutation.webhook.admission.k8s.io/round_0_index_0": "{\"configuration\":\"my-mutating-webhook-configuration.example.com\",\"webhook\":\"my-webhook-always-mutate.example.com\",\"mutated\": true}" # 其他注解 ... } # 其他字段 ... } </code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 反序列化的注解值 { "configuration": "my-mutating-webhook-configuration.example.com", "webhook": "my-webhook-always-mutate.example.com", "mutated": true } </code></pre></div></li> </ul>  <ul> <li> 在 <code>Request</code> 或更高审计级别上，将使用 JSON 负载记录带有键名为 <code>patch.webhook.admission.k8s.io/round_{round idx}_index_{order idx}</code> 的注解，该注解表明针对给定请求调用了 Webhook 以及应用于请求对象之上的修改。  例如，以下是针对正在被重新调用的某 Webhook 所记录的注解。 Webhook 在变更性质的 Webhook 链中排在第四，并在其响应中包含一个 JSON 补丁，该补丁已被应用于请求对象。 <div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 审计事件相关记录 { "kind": "Event", "apiVersion": "audit.k8s.io/v1", "annotations": { "patch.webhook.admission.k8s.io/round_1_index_3": "{\"configuration\":\"my-other-mutating-webhook-configuration.example.com\",\"webhook\":\"my-webhook-always-mutate.example.com\",\"patch\":[{\"op\":\"add\",\"path\":\"/data/mutation-stage\",\"value\":\"yes\"}],\"patchType\":\"JSONPatch\"}" # 其他注解 ... } # 其他字段 ... } </code></pre></div><div class="highlight"><pre tabindex="0" style="background-color:#f8f8f8;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"># 反序列化的注解值 { "configuration": "my-other-mutating-webhook-configuration.example.com", "webhook": "my-webhook-always-mutate.example.com", "patchType": "JSONPatch", "patch": [ { "op": "add", "path": "/data/mutation-stage", "value": "yes" } ] } </code></pre></div></li> </ul>  <h3 id="admission-webhook-metrics">准入 Webhook 度量值</h3>  API 服务器从 <code>/metrics</code> 端点公开 Prometheus 指标，这些指标可用于监控和诊断 API 服务器状态。以下指标记录了与准入 Webhook 相关的状态。  <h4 id="api-server-admission-webhook-rejection-count">apiserver 准入 Webhook 拒绝次数</h4>  有时，了解哪些准入 Webhook 经常拒绝 API 请求以及拒绝的原因是很有用的。 在 v1.16+ 中，kube-apiserver 提供了 Prometheus 计数器度量值，记录准入 Webhook 的拒绝次数。度量值的标签给出了 Webhook 拒绝该请求的原因：  <ul> <li><code>name</code>：拒绝请求 Webhook 的名称。</li> <li><code>operation</code>：请求的操作类型可以是 <code>CREATE</code>、<code>UPDATE</code>、<code>DELETE</code> 和 <code>CONNECT</code> 其中之一。</li> <li><code>type</code>：Admission Webhook 类型，可以是 <code>admit</code> 和 <code>validating</code> 其中之一。</li> <li><code>error_type</code>：标识在 Webhook 调用期间是否发生了错误并且导致了拒绝。其值可以是以下之一： <ul> <li><code>calling_webhook_error</code>：发生了来自准入 Webhook 的无法识别的错误或超时错误，并且 Webhook 的 <a href="#failure-policy">失败策略</a> 设置为 <code>Fail</code>。</li> <li><code>no_error</code>：未发生错误。Webhook 在准入响应中以 <code>allowed: false</code> 值拒绝了请求。度量标签 <code>rejection_code</code> 记录了在准入响应中设置的 <code>.status.code</code>。</li> <li><code>apiserver_internal_error</code>：apiserver 发生内部错误。</li> </ul> </li> <li><code>rejection_code</code>：当 Webhook 拒绝请求时，在准入响应中设置的 HTTP 状态码。</li> </ul>  拒绝计数指标示例： <pre tabindex="0"><code># HELP apiserver_admission_webhook_rejection_count [ALPHA] Admission webhook rejection count, identified by name and broken out for each admission type (validating or admit) and operation. Additional labels specify an error type (calling_webhook_error or apiserver_internal_error if an error occurred; no_error otherwise) and optionally a non-zero rejection code if the webhook rejects the request with an HTTP status code (honored by the apiserver when the code is greater or equal to 400). Codes greater than 600 are truncated to 600, to keep the metrics cardinality bounded. # TYPE apiserver_admission_webhook_rejection_count counter apiserver_admission_webhook_rejection_count{error_type="calling_webhook_error",name="always-timeout-webhook.example.com",operation="CREATE",rejection_code="0",type="validating"} 1 apiserver_admission_webhook_rejection_count{error_type="calling_webhook_error",name="invalid-admission-response-webhook.example.com",operation="CREATE",rejection_code="0",type="validating"} 1 apiserver_admission_webhook_rejection_count{error_type="no_error",name="deny-unwanted-configmap-data.example.com",operation="CREATE",rejection_code="400",type="validating"} 13 </code></pre> <h2 id="best-practices-and-warnings">最佳实践和警告</h2> <h3 id="idempotence">幂等性 </h3>  幂等的变更性质的准入 Webhook 能够成功处理已经被它接纳甚或修改的对象。即使多次执行该准入测试，也不会产生与初次执行结果相异的结果。  <h4 id="example-of-idempotent-mutating-admission-webhooks">幂等 mutating admission Webhook 的示例：</h4> <ol> <li>对于 <code>CREATE</code> Pod 请求，将 Pod 的字段 <code>.spec.securityContext.runAsNonRoot</code> 设置为 true，以实施安全最佳实践。</li> <li>对于 <code>CREATE</code> Pod 请求，如果未设置容器的字段 <code>.spec.containers[].resources.limits</code>，设置默认资源限制值。</li> <li>对于 <code>CREATE</code> pod 请求，如果 Pod 中不存在名为 <code>foo-sidecar</code> 的边车容器，向 Pod 注入一个 <code>foo-sidecar</code> 容器。</li> </ol> 在上述情况下，可以安全地重新调用 Webhook，或接受已经设置了字段的对象。  <h4 id="example-of-non-idempotent-mutating-admission-webhooks">非幂等 mutating admission Webhook 的示例：</h4>  <ol> <li>对于 <code>CREATE</code> pod 请求，注入名称为 <code>foo-sidecar</code> 并带有当前时间戳的边车容器（例如 <code>foo-sidecar-19700101-000000</code>）。</li> <li>对于 <code>CREATE/UPDATE</code> pod 请求，如果容器已设置标签 <code>"env"</code> 则拒绝，否则将 <code>"env": "prod"</code> 标签添加到容器。</li> <li>对于 <code>CREATE</code> pod 请求，盲目地添加一个名为 <code>foo-sidecar</code> 的边车容器，而未查看 Pod 中是否已经有 <code>foo-sidecar</code> 容器。</li> </ol>  在上述第一种情况下，重新调用该 Webhook 可能导致同一个 Sidecar 容器多次注入到 Pod 中，而且每次使用不同的容器名称。类似地，如果 Sidecar 已存在于用户提供的 Pod 中，则 Webhook 可能注入重复的容器。 在上述第二种情况下，重新调用 Webhook 将导致 Webhook 自身输出失败。 在上述第三种情况下，重新调用 Webhook 将导致 Pod 规范中的容器重复，从而使请求无效并被 API 服务器拒绝。  <h3 id="intercepting-all-versions-of-an-object">拦截对象的所有版本</h3> 建议通过将 <code>.webhooks[].matchPolicy</code> 设置为 <code>Equivalent</code>，以确保准入 Webhooks 始终拦截对象的所有版本。建议准入 Webhooks 应该更偏向注册资源的稳定版本。如果无法拦截对象的所有版本，可能会导致准入策略未再某些版本的请求上执行。有关示例，请参见<a href="#matching-requests-matchpolicy">匹配请求：matchPolicy</a>。  <h3 id="availability">可用性 </h3> 建议准入 Webhook 尽快完成执行（时长通常是毫秒级），因为它们会增加 API 请求的延迟。建议对 Webhook 使用较小的超时值。有关更多详细信息，请参见<a href="#timeouts">超时</a>。 建议 Admission Webhook 应该采用某种形式的负载均衡机制，以提供高可用性和高性能。如果集群中正在运行 Webhook，则可以在服务后面运行多个 Webhook 后端，以利用该服务支持的负载均衡。  <h3 id="guaranteeing-the-final-state-of-the-object-is-seen">确保看到对象的最终状态</h3> 如果某准入 Webhook 需要保证自己能够看到对象的最终状态以实施策略，则应该使用一个验证性质的 webhook，因为可以通过 mutating Webhook 看到对象后对其进行修改。 例如，一个变更性质的准入 Webhook 被配置为在每个 <code>CREATE</code> Pod 请求中注入一个名称为 "foo-sidecar" 的 sidecar 容器。 如果必须存在边车容器，则还应配置一个验证性质的准入 Webhook 以拦截 <code>CREATE</code> Pod 请求，并验证要创建的对象中是否存在具有预期配置的名称为 "foo-sidecar" 的容器。  <h3 id="avoiding-deadlocks-in-self-hosted-webhooks">避免自托管的 Webhooks 中出现死锁</h3> 如果集群内的 Webhook 配置能够拦截启动其自己的 Pod 所需的资源，则该 Webhook 可能导致其自身部署时发生死锁。 例如，某变更性质的准入 Webhook 配置为仅当 Pod 中设置了某个标签（例如 <code>"env": "prod"</code>）时，才接受 <code>CREATE</code> Pod 请求。 Webhook 服务器在未设置 <code>"env"</code> 标签的 Deployment 中运行。当运行 Webhook 服务器的容器的节点运行不正常时，Webhook 部署尝试将容器重新调度到另一个节点。但是，由于未设置 <code>"env"</code> 标签，因此请求将被现有的 Webhook 服务器拒绝，并且调度迁移不会发生。 建议使用 <a href="#matching-requests-namespaceselector">namespaceSelector</a> 排除 Webhook 所在的名字空间。  <h3 id="side-effects">副作用 </h3> 建议准入 Webhook 应尽可能避免副作用，这意味着该准入 Webhook 仅对发送给他们的 <code>AdmissionReview</code> 的内容起作用，并且不要进行额外更改。如果 Webhook 没有任何副作用，则 <code>.webhooks[].sideEffects</code> 字段应设置为 <code>None</code>。 如果在准入执行期间存在副作用，则应在处理 <code>dryRun</code> 为 <code>true</code> 的 <code>AdmissionReview</code> 对象时避免产生副作用，并且其 <code>.webhooks[].sideEffects</code> 字段应设置为 <code>NoneOnDryRun</code>。更多详细信息，请参见<a href="#side-effects">副作用</a>。  <h3 id="avoiding-operating-on-the-kube-system-namespace">避免对 kube-system 名字空间进行操作</h3>  <code>kube-system</code> 名字空间包含由 Kubernetes 系统创建的对象，例如用于控制平面组件的服务账号，诸如 <code>kube-dns</code> 之类的 Pod 等。意外更改或拒绝 <code>kube-system</code> 名字空间中的请求可能会导致控制平面组件停止运行或者导致未知行为发生。如果你的准入 Webhook 不想修改 Kubernetes 控制平面的行为，请使用 <a href="#matching-requests-namespaceselector"><code>namespaceSelector</code></a> 避免拦截 <code>kube-system</code> 名字空间。 </div> <div id="pre-footer"> <h2>反馈</h2> 此页是否对你有帮助？ <button class="btn btn-primary mb-4 feedback--yes">是</button> <button class="btn btn-primary mb-4 feedback--no">否</button> 感谢反馈。如果你有一个关于如何使用 Kubernetes 的具体问题需要答案，可以访问 <a target="_blank" rel="noopener" href="https://stackoverflow.com/questions/tagged/kubernetes"> Stack Overflow</a>. 在 GitHub 仓库上登记新的问题 <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Issue%20with%20k8s.io"> 报告问题</a> 或者 <a class="feedback--link" target="_blank" rel="noopener" href="https://github.com/kubernetes/website/issues/new?title=Improvement%20for%20k8s.io"> 提出改进建议</a>. </div> <script> const yes = document.querySelector('.feedback--yes'); const no = document.querySelector('.feedback--no'); document.querySelectorAll('.feedback--link').forEach(link => { link.href = link.href + window.location.pathname; }); const sendFeedback = (value) => { if (!gtag) { console.log('!gtag'); } gtag('event', 'click', { 'event_category': 'Helpful', 'event_label': window.location.pathname, value }); }; const disableButtons = () => { yes.disabled = true; yes.classList.add('feedback--button__disabled'); no.disabled = true; no.classList.add('feedback--button__disabled'); }; yes.addEventListener('click', () => { sendFeedback(1); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); no.addEventListener('click', () => { sendFeedback(0); disableButtons(); document.querySelector('.feedback--response').classList.remove('feedback--response__hidden'); }); </script> <div class="text-muted mt-5 pt-3 border-top"> 最后修改 October 05, 2023 at 10:58 AM PST: <a href="https://github.com/kubernetes/website/commit/3ecbb41a7e8a0f85e871e29dbd674a22a0202149">[zh] Fix some links in the zh-cn localization site (3ecbb41a7e)</a> </div> </main> <div class="d-none d-xl-block td-toc d-print-none col-xl-4"> <div class="td-page-meta ml-2 pb-1 pt-2 mb-0"> <a href="https://github.com/kubernetes/website/edit/main/content/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers.md" target="_blank"> 编辑此页</a> <a href="https://github.com/kubernetes/website/new/main/content/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers.md?filename=change-me.md&value=---%0Atitle%3A+%22Long+Page+Title%22%0AlinkTitle%3A+%22Short+Nav+Title%22%0Aweight%3A+100%0Adescription%3A+%3E-%0A+++++Page+description+for+heading+and+indexes.%0A---%0A%0A%23%23+Heading%0A%0AEdit+this+template+to+create+your+new+page.%0A%0A%2A+Give+it+a+good+name%2C+ending+in+%60.md%60+-+e.g.+%60getting-started.md%60%0A%2A+Edit+the+%22front+matter%22+section+at+the+top+of+the+page+%28weight+controls+how+its+ordered+amongst+other+pages+in+the+same+directory%3B+lowest+number+first%29.%0A%2A+Add+a+good+commit+message+at+the+bottom+of+the+page+%28%3C80+characters%3B+use+the+extended+description+field+for+more+detail%29.%0A%2A+Create+a+new+branch+so+you+can+preview+your+new+file+and+request+a+review+via+Pull+Request.%0A" target="_blank"> 添加子页面</a> <a href="https://github.com/kubernetes/website/issues/new?title=%e5%8a%a8%e6%80%81%e5%87%86%e5%85%a5%e6%8e%a7%e5%88%b6" target="_blank"> 登记一个问题</a> <a id="print" href="https://kubernetes.io/zh-cn/docs/reference/access-authn-authz/_print/"> 整节打印</a> </div> <nav id="TableOfContents"> <ul> <li><a href="#what-are-admission-webhooks">什么是准入 Webhook？</a></li> <li><a href="#experimenting-with-admission-webhooks">尝试准入 Webhook</a> <ul> <li><a href="#prerequisites">先决条件</a></li> <li><a href="#write-an-admission-webhook-server">编写一个准入 Webhook 服务器</a></li> <li><a href="#deploy-the-admission-webhook-service">部署准入 Webhook 服务</a></li> <li><a href="#configure-admission-webhooks-on-the-fly">即时配置准入 Webhook</a></li> <li><a href="#authenticate-apiservers">对 API 服务器进行身份认证</a></li> </ul> </li> <li><a href="#webhook-request-and-response">Webhook 请求与响应</a> <ul> <li><a href="#request">请求</a></li> <li><a href="#response">响应</a></li> </ul> </li> <li><a href="#webhook-configuration">Webhook 配置</a> <ul> <li><a href="#matching-requests-rules">匹配请求-规则</a></li> <li><a href="#matching-requests-objectselector">匹配请求：objectSelector</a></li> <li><a href="#matching-requests-namespaceselector">匹配请求：namespaceSelector</a></li> <li><a href="#matching-requests-matchpolicy">匹配请求：matchPolicy</a></li> <li><a href="#matching-requests-matchConditions">匹配请求：<code>matchConditions</code> </a></li> <li><a href="#contacting-the-webhook">调用 Webhook</a></li> <li><a href="#side-effects">副作用</a></li> <li><a href="#timeouts">超时</a></li> <li><a href="#reinvocation-policy">再调用策略 </a></li> <li><a href="#failure-policy">失败策略</a></li> </ul> </li> <li><a href="#monitoring-admission-webhooks">监控 Admission Webhook </a> <ul> <li><a href="#mutating-webhook-auditing-annotations">Mutating Webhook 审计注解</a></li> <li><a href="#admission-webhook-metrics">准入 Webhook 度量值</a></li> </ul> </li> <li><a href="#best-practices-and-warnings">最佳实践和警告</a> <ul> <li><a href="#idempotence">幂等性 </a></li> <li><a href="#intercepting-all-versions-of-an-object">拦截对象的所有版本</a></li> <li><a href="#availability">可用性 </a></li> <li><a href="#guaranteeing-the-final-state-of-the-object-is-seen">确保看到对象的最终状态</a></li> <li><a href="#avoiding-deadlocks-in-self-hosted-webhooks">避免自托管的 Webhooks 中出现死锁</a></li> <li><a href="#side-effects">副作用 </a></li> <li><a href="#avoiding-operating-on-the-kube-system-namespace">避免对 kube-system 名字空间进行操作</a></li> </ul> </li> </ul> </nav> </div> </div> </div> </div> </div> <footer class="d-print-none"> <div class="footer__links"> <nav> <a class="text-white" href="/zh-cn/docs/home/">文档</a> <a class="text-white" href="/zh-cn/blog/">博客</a> <a class="text-white" href="/zh-cn/training/">培训</a> <a class="text-white" href="/zh-cn/partners/">合作伙伴</a> <a class="text-white" href="/zh-cn/community/">社区</a> <a class="text-white" href="/zh-cn/case-studies/">案例分析</a> </nav> </div> <div class="container-fluid"> <div class="row"> <div class="col-6 col-sm-2 text-xs-center order-sm-2"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="User mailing list" aria-label="User mailing list"> <a class="text-white" target="_blank" href="https://discuss.kubernetes.io"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Twitter" aria-label="Twitter"> <a class="text-white" target="_blank" href="https://twitter.com/kubernetesio"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Calendar" aria-label="Calendar"> <a class="text-white" target="_blank" href="https://calendar.google.com/calendar/embed?src=calendar%40kubernetes.io"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Youtube" aria-label="Youtube"> <a class="text-white" target="_blank" href="https://youtube.com/kubernetescommunity"> </a> </li> </ul> </div> <div class="col-6 col-sm-2 text-right text-xs-center order-sm-3"> <ul class="list-inline mb-0"> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="GitHub" aria-label="GitHub"> <a class="text-white" target="_blank" href="https://github.com/kubernetes/kubernetes"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Slack" aria-label="Slack"> <a class="text-white" target="_blank" href="https://slack.k8s.io"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Contribute" aria-label="Contribute"> <a class="text-white" target="_blank" href="https://git.k8s.io/community/contributors/guide"> </a> </li> <li class="list-inline-item mx-2 h3" data-toggle="tooltip" data-placement="top" title="Stack Overflow" aria-label="Stack Overflow"> <a class="text-white" target="_blank" href="https://stackoverflow.com/questions/tagged/kubernetes"> </a> </li> </ul> </div> <div class="col-12 col-sm-8 text-center order-sm-2"> © 2024 The Kubernetes 作者 | 文档发布基于 <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a> 授权许可 Copyright © 2024 Linux 基金会®。保留所有权利。Linux 基金会已注册并使用商标。如需了解 Linux 基金会的商标列表，请访问<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">商标使用页面</a> ICP license: 京ICP备17074266号-3 </div> </div> </div> </footer> <script src="/js/jquery-3.6.0.min.js" integrity="sha384-vtXRMe3mGCbOeY7l30aIg8H9p3GdeSe4IFlP6G8JMa7o7lXvnz3GFKzPxzJdPfGK" crossorigin="anonymous"></script> <script src="/js/popper-1.16.1.min.js" intregrity="sha384-9/reFTGAW83EW2RDu2S0VKaIzap3H66lZH81PoYlFhbGU+6BZp6G7niu735Sk7lN" crossorigin="anonymous"></script> <script src="/js/bootstrap-4.6.1.min.js" integrity="sha384-VHvPCCyXqtD5DqJeNxl2dtTyhF78xXNXdkwX1CZeRusQfRKp+tA7hAShOK/B/fQ2" crossorigin="anonymous"></script> <script src="/js/script.js"></script> <script async src="/js/mermaid-8.13.4.min.js" integrity="sha384-5hHNvPeMrNH14oM3IcQofDoBhiclNK3g2+hnEinKzQ07C4AliMeVpnvxuiwEGpaO" crossorigin="anonymous"></script> <script src="/js/main.min.5c0bf7f21dc4f66485f74efbbeeff28a7e4f8cddaac1bae47043159c922ff3a3.js" integrity="sha256-XAv38h3E9mSF9077vu/yin5PjN2qwbrkcEMVnJIv86M=" crossorigin="anonymous"></script> <script> let splitInstance = null; function enableSplitter(mediaQuery) { if (mediaQuery.matches) { if (!splitInstance) { splitInstance = Split(["#sidebarnav", "#maindoc"], { sizes: [20, 80], minSize: 100, }); } } else { if (splitInstance) { splitInstance.destroy(); splitInstance = null; } } } const screenWidthMediaQuery = window.matchMedia("(min-width: 768px)"); const eleNav = document.getElementById("sidebarnav"); if (eleNav !== null) { enableSplitter(screenWidthMediaQuery); screenWidthMediaQuery.addListener(enableSplitter); } </script> </body> </html>