From c1562e566ed8ce7948229f62477fffd7b5933ff2 Mon Sep 17 00:00:00 2001 From: windsonsea Date: Mon, 20 Mar 2023 10:08:40 +0800 Subject: [PATCH] [zh] sync /command-line-tools-reference/kube-apiserver.md --- .../kube-apiserver.md | 227 ++++++++++-------- 1 file changed, 129 insertions(+), 98 deletions(-) diff --git a/content/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver.md b/content/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver.md index 03e73de4ac877..e3ac50b7ccf2a 100644 --- a/content/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver.md +++ b/content/zh-cn/docs/reference/command-line-tools-reference/kube-apiserver.md @@ -75,6 +75,20 @@ the host's default interface will be used. + +--aggregator-reject-forwarding-redirect     默认值：true + + + + + + +

聚合器拒绝将重定向响应转发回客户端。

+ + + --allow-metric-labels stringToString     默认值：[] @@ -833,15 +847,21 @@ Number of workers spawned for DeleteCollection call. These are used to speed up --disable-admission-plugins strings - - + + + + -

尽管位于默认启用的插件列表中（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionWebhook、ResourceQuota）仍须被禁用的插件。 -
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionWebhook。 -
该标志中插件的顺序无关紧要。

+

+尽管位于默认启用的插件列表中，仍须被禁用的准入插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）。 +取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。 +该标志中插件的顺序无关紧要。 +

@@ -874,14 +894,18 @@ File with apiserver egress selector configuration. --enable-admission-plugins strings + - + + + -

除了默认启用的插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionWebhook、ResourceQuota）之外要启用的插件 -
取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionWebhook

-
该标志中插件的顺序无关紧要。 +

+除了默认启用的插件（NamespaceLifecycle、LimitRanger、ServiceAccount、TaintNodesByCondition、PodSecurity、Priority、DefaultTolerationSeconds、DefaultStorageClass、StorageObjectInUseProtection、PersistentVolumeClaimResize、RuntimeClass、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、MutatingAdmissionWebhook、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook、ResourceQuota）之外要启用的准入插件。 +取值为逗号分隔的准入插件列表：AlwaysAdmit、AlwaysDeny、AlwaysPullImages、CertificateApproval、CertificateSigning、CertificateSubjectRestriction、DefaultIngressClass、DefaultStorageClass、DefaultTolerationSeconds、DenyServiceExternalIPs、EventRateLimit、ExtendedResourceToleration、ImagePolicyWebhook、LimitPodHardAntiAffinityTopology、LimitRanger、MutatingAdmissionWebhook、NamespaceAutoProvision、NamespaceExists、NamespaceLifecycle、NodeRestriction、OwnerReferencesPermissionEnforcement、PersistentVolumeClaimResize、PersistentVolumeLabel、PodNodeSelector、PodSecurity、PodTolerationRestriction、Priority、ResourceQuota、RuntimeClass、SecurityContextDeny、ServiceAccount、StorageObjectInUseProtection、TaintNodesByCondition、ValidatingAdmissionPolicy、ValidatingAdmissionWebhook。该标志中插件的顺序无关紧要。 +

@@ -951,6 +975,23 @@ The file containing configuration for encryption providers to be used for storin + +--encryption-provider-config-automatic-reload + + + + + + +

+确定由 --encryption-provider-config 设置的文件是否应在磁盘内容更改时自动重新加载。 +将此标志设置为 true 将禁用通过 API 服务器 healthz 端点来唯一地标识不同 KMS 插件的能力。 +

+ + + --endpoint-reconciler-type string     默认值："lease" @@ -1140,44 +1181,47 @@ comma-separated 'key=True|False' pairs --> 逗号分隔的 'key=True|False' 键值对> + - + + + -

一组 key=value 对，用来描述测试性/试验性功能的特性门控。可选项有：
+

+一组 key=value 对，用来描述测试性/试验性功能的特性门控。可选项有：
APIListChunking=true|false (BETA - 默认值=true)
APIPriorityAndFairness=true|false (BETA - 默认值=true)
APIResponseCompression=true|false (BETA - 默认值=true)
-APIServerIdentity=true|false (ALPHA - 默认值=false)
+APISelfSubjectReview=true|false (ALPHA - 默认值=false)
+APIServerIdentity=true|false (BETA - 默认值=true)
APIServerTracing=true|false (ALPHA - 默认值=false)
+AggregatedDiscoveryEndpoint=true|false (ALPHA - 默认值=false)
AllAlpha=true|false (ALPHA - 默认值=false)
AllBeta=true|false (BETA - 默认值=false)
AnyVolumeDataSource=true|false (BETA - 默认值=true)
AppArmor=true|false (BETA - 默认值=true)
-CPUManager=true|false (BETA - 默认值=true)
CPUManagerPolicyAlphaOptions=true|false (ALPHA - 默认值=false)
CPUManagerPolicyBetaOptions=true|false (BETA - 默认值=true)
CPUManagerPolicyOptions=true|false (BETA - 默认值=true)
-CSIMigrationAzureFile=true|false (BETA - 默认值=true)
CSIMigrationPortworx=true|false (BETA - 默认值=false)
CSIMigrationRBD=true|false (ALPHA - 默认值=false)
-CSIMigrationvSphere=true|false (BETA - 默认值=true)
CSINodeExpandSecret=true|false (ALPHA - 默认值=false)
CSIVolumeHealth=true|false (ALPHA - 默认值=false)
+ComponentSLIs=true|false (ALPHA - 默认值=false)
ContainerCheckpoint=true|false (ALPHA - 默认值=false)
ContextualLogging=true|false (ALPHA - 默认值=false)
CronJobTimeZone=true|false (BETA - 默认值=true)
+CrossNamespaceVolumeDataSource=true|false (ALPHA - 默认值=false)
CustomCPUCFSQuotaPeriod=true|false (ALPHA - 默认值=false)
CustomResourceValidationExpressions=true|false (BETA - 默认值=true)
-DelegateFSGroupToCSIDriver=true|false (BETA - 默认值=true)
-DevicePlugins=true|false (BETA - 默认值=true)
DisableCloudProviders=true|false (ALPHA - 默认值=false)
DisableKubeletCloudCredentialProviders=true|false (ALPHA - 默认值=false)
DownwardAPIHugePages=true|false (BETA - 默认值=true)
-EndpointSliceTerminatingCondition=true|false (BETA - 默认值=true)
-ExpandedDNSConfig=true|false (ALPHA - 默认值=false)
-ExperimentalHostUserNamespace默认值ing=true|false (BETA - 默认值=false)
+DynamicResourceAllocation=true|false (ALPHA - 默认值=false)
+EventedPLEG=true|false (ALPHA - 默认值=false)
+ExpandedDNSConfig=true|false (BETA - 默认值=true)
+ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 默认值=false)
GRPCContainerProbe=true|false (BETA - 默认值=true)
-GracefulNodeShutdown=true|false (BETA - 默认值=true)
+GracefulNodeShutdown=true|false (BETA - 默认值=true) GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - 默认值=true)
HPAContainerMetrics=true|false (ALPHA - 默认值=false)
HPAScaleToZero=true|false (ALPHA - 默认值=false)
@@ -1298,17 +1346,15 @@ InTreePluginPortworxUnregister=true|false (ALPHA - 默认值=false)
InTreePluginRBDUnregister=true|false (ALPHA - 默认值=false)
InTreePluginvSphereUnregister=true|false (ALPHA - 默认值=false)
JobMutableNodeSchedulingDirectives=true|false (BETA - 默认值=true)
-JobPodFailurePolicy=true|false (ALPHA - 默认值=false)
+JobPodFailurePolicy=true|false (BETA - 默认值=true)
JobReadyPods=true|false (BETA - 默认值=true)
-JobTrackingWithFinalizers=true|false (BETA - 默认值=true)
KMSv2=true|false (ALPHA - 默认值=false)
-KubeletCredentialProviders=true|false (BETA - 默认值=true)
KubeletInUserNamespace=true|false (ALPHA - 默认值=false)
KubeletPodResources=true|false (BETA - 默认值=true)
KubeletPodResourcesGetAllocatable=true|false (BETA - 默认值=true)
KubeletTracing=true|false (ALPHA - 默认值=false)
-LegacyServiceAccountTokenNoAutoGeneration=true|false (BETA - 默认值=true)
-LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (BETA - 默认值=true)
+LegacyServiceAccountTokenTracking=true|false (ALPHA - 默认值=false)
+LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 默认值=false)
LogarithmicScaleDown=true|false (BETA - 默认值=true)
LoggingAlphaOptions=true|false (ALPHA - 默认值=false)
LoggingBetaOptions=true|false (BETA - 默认值=true)
@@ -1317,43 +1363,49 @@ MaxUnavailableStatefulSet=true|false (ALPHA - 默认值=false)
MemoryManager=true|false (BETA - 默认值=true)
MemoryQoS=true|false (ALPHA - 默认值=false)
MinDomainsInPodTopologySpread=true|false (BETA - 默认值=false)
-MixedProtocolLBService=true|false (BETA - 默认值=true)
+MinimizeIPTablesRestore=true|false (ALPHA - 默认值=false)
MultiCIDRRangeAllocator=true|false (ALPHA - 默认值=false)
NetworkPolicyStatus=true|false (ALPHA - 默认值=false)
-NodeInclusionPolicyInPodTopologySpread=true|false (ALPHA - 默认值=false)
-NodeOutOfServiceVolumeDetach=true|false (ALPHA - 默认值=false)
+NodeInclusionPolicyInPodTopologySpread=true|false (BETA - 默认值=true)
+NodeOutOfServiceVolumeDetach=true|false (BETA - 默认值=true)
NodeSwap=true|false (ALPHA - 默认值=false)
OpenAPIEnums=true|false (BETA - 默认值=true)
OpenAPIV3=true|false (BETA - 默认值=true)
+PDBUnhealthyPodEvictionPolicy=true|false (ALPHA - 默认值=false)
PodAndContainerStatsFromCRI=true|false (ALPHA - 默认值=false)
PodDeletionCost=true|false (BETA - 默认值=true)
-PodDisruptionConditions=true|false (ALPHA - 默认值=false)
+PodDisruptionConditions=true|false (BETA - 默认值=true)
PodHasNetworkCondition=true|false (ALPHA - 默认值=false)
+PodSchedulingReadiness=true|false (ALPHA - 默认值=false)
ProbeTerminationGracePeriod=true|false (BETA - 默认值=true)
ProcMountType=true|false (ALPHA - 默认值=false)
-ProxyTerminatingEndpoints=true|false (ALPHA - 默认值=false)
+ProxyTerminatingEndpoints=true|false (BETA - 默认值=true)
QOSReserved=true|false (ALPHA - 默认值=false)
ReadWriteOncePod=true|false (ALPHA - 默认值=false)
RecoverVolumeExpansionFailure=true|false (ALPHA - 默认值=false)
RemainingItemCount=true|false (BETA - 默认值=true)
-Retroactive默认值StorageClass=true|false (ALPHA - 默认值=false)
+RetroactiveDefaultStorageClass=true|false (BETA - 默认值=true)
RotateKubeletServerCertificate=true|false (BETA - 默认值=true)
SELinuxMountReadWriteOncePod=true|false (ALPHA - 默认值=false)
-Seccomp默认值=true|false (BETA - 默认值=true)
+SeccompDefault=true|false (BETA - 默认值=true)
ServerSideFieldValidation=true|false (BETA - 默认值=true)
-ServiceIPStaticSubrange=true|false (BETA - 默认值=true)
-ServiceInternalTrafficPolicy=true|false (BETA - 默认值=true)
SizeMemoryBackedVolumes=true|false (BETA - 默认值=true)
StatefulSetAutoDeletePVC=true|false (ALPHA - 默认值=false)
+StatefulSetStartOrdinal=true|false (ALPHA - 默认值=false)
StorageVersionAPI=true|false (ALPHA - 默认值=false)
StorageVersionHash=true|false (BETA - 默认值=true)
TopologyAwareHints=true|false (BETA - 默认值=true)
TopologyManager=true|false (BETA - 默认值=true)
+TopologyManagerPolicyAlphaOptions=true|false (ALPHA - 默认值=false)
+TopologyManagerPolicyBetaOptions=true|false (BETA - 默认值=false)
+TopologyManagerPolicyOptions=true|false (ALPHA - 默认值=false)
UserNamespacesStatelessPodsSupport=true|false (ALPHA - 默认值=false)
+ValidatingAdmissionPolicy=true|false (ALPHA - 默认值=false)
VolumeCapacityPriority=true|false (ALPHA - 默认值=false)
WinDSR=true|false (ALPHA - 默认值=false)
WinOverlay=true|false (BETA - 默认值=true)
-WindowsHostProcessContainers=true|false (BETA - 默认值=true)

+WindowsHostNetwork=true|false (ALPHA - 默认值=true) +

@@ -1407,32 +1459,6 @@ of streams in an HTTP/2 connection. Zero means to use golang's default. - ---identity-lease-duration-seconds int     默认值：3600 - - - - -kube-apiserver 租约时长（按秒计），必须是正数。 -（当 APIServerIdentity 特性门控被启用时使用此标志值） - - - - ---identity-lease-renew-interval-seconds int     默认值：10 - - - - -kube-apiserver 对其租约进行续期的时间间隔（按秒计），必须是正数。 -（当 APIServerIdentity 特性门控被启用时使用此标志值） - - - --kubelet-certificate-authority string @@ -1556,13 +1582,15 @@ Maximum number of seconds between log flushes --logging-format string     默认值："text" - + + + -设置日志格式。允许的格式："text"。
-非默认格式不支持以下标志：--add-dir-header、--alsologtostderr、--log-backtrace-at、--log-dir、--log-file、--log-file-max-size、--logtostderr、--one-output、-skip-headers、-skip-log-headers、--stderrthreshold、-vmodule。
-当前非默认选择为 alpha，会随时更改而不会发出警告。 +

+设置日志格式。允许的格式："text"。 +

@@ -2202,13 +2230,16 @@ The storage backend for persistence. Options: 'etcd3' (default). --storage-media-type string     默认值："application/vnd.kubernetes.protobuf" - + + + -用于在存储中存储对象的媒体类型。 -某些资源或存储后端可能仅支持特定的媒体类型，并且将忽略此设置。 +

+用于在存储中存储对象的媒体类型。某些资源或存储后端可能仅支持特定的媒体类型，并且将忽略此设置。 +支持的媒体类型：[application/json, application/yaml, application/vnd.kubernetes.protobuf] +