GETTING STARTED create clusterrole clusterrolebinding configmap cronjob deployment ingress job namespace poddisruptio...

This page shows how to assign a Kubernetes Pod to a particular node using Node Affinity in a Kubernetes cluster. Before you begin You need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:

This page shows how to safely drain a node, optionally respecting the PodDisruptionBudget you have defined. Before you begin This task assumes that you have met the following prerequisites: You do not require your applications to be highly available during the node drain, or You have read about the PodDisruptionBudget concept, and have configured PodDisruptionBudgets for applications that need them. (Optional) Configure a disruption budget To ensure that your workloads remain available during maintenance, you can configure a PodDisruptionBudget.

When using the kubelet's --config-dir flag to specify a drop-in directory for configuration, there is some specific behavior on how different types are merged. Here are some examples of how different data types behave during configuration merging: Structure Fields There are two types of structure fields in a YAML structure: singular (or a scalar type) and embedded (structures that contain scalar types). The configuration merging process handles the overriding of singular and embedded struct fields to create a resulting kubelet configuration.

FEATURE STATE: Kubernetes v1.27 [beta] This is a community maintained list of official CVEs announced by the Kubernetes Security Response Committee. See Kubernetes Security and Disclosure Information for more details. The Kubernetes project publishes a programmatically accessible feed of published security issues in JSON feed and RSS feed formats. You can access it by executing the following commands: JSON feed RSS feed Link to JSON format curl -Lv https://k8s.io/docs/reference/issues-security/official-cve-feed/index.json Link to RSS format

FEATURE STATE: Kubernetes v1.25 [alpha] Checkpointing a container is the functionality to create a stateful copy of a running container. Once you have a stateful copy of a container, you could move it to a different computer for debugging or similar purposes. If you move the checkpointed container data to a computer that's able to restore it, that restored container continues to run at exactly the same point it was checkpointed.

FEATURE STATE: Kubernetes v1.29 [stable] By default, Kubernetes 1.30 publishes Service Level Indicator (SLI) metrics for each Kubernetes component binary. This metric endpoint is exposed on the serving HTTPS port of each component, at the path /metrics/slis. The ComponentSLIs feature gate defaults to enabled for each Kubernetes component as of v1.27. SLI Metrics With SLI metrics enabled, each Kubernetes component exposes two metrics, labeled per healthcheck: a gauge (which represents the current state of the healthcheck) a counter (which records the cumulative counts observed for each healthcheck state) You can use the metric information to calculate per-component availability statistics.

This page describes Kubernetes security and disclosure information. Security Announcements Join the kubernetes-security-announce group for emails about security and major API announcements. Report a Vulnerability We're extremely grateful for security researchers and users that report vulnerabilities to the Kubernetes Open Source Community. All reports are thoroughly investigated by a set of community volunteers. To make a report, submit your vulnerability to the Kubernetes bug bounty program. This allows triage and handling of the vulnerability with standardized response times.

Kubernetes Issues and Security Kubernetes Issue Tracker Kubernetes Security and Disclosure Information Official CVE F...

This section contains the following reference topics about nodes: the kubelet's checkpoint API a list of Articles on dockershim Removal and on Using CRI-compatible Runtimes Kubelet Device Manager API Versions Node Labels Populated By The Kubelet Node .status information You can also read node reference details from elsewhere in the Kubernetes documentation, including: Node Metrics Data. CRI Pod & Container Metrics.