From 9d5ab09a6f487a43b5363773b6a493285777102d Mon Sep 17 00:00:00 2001 From: Chirag0002 Date: Thu, 23 Mar 2023 00:39:56 +0530 Subject: [PATCH 001/446] removed duplicated examples --- .../pods-and-endpoint-termination-flow.md | 50 ++----------------- .../explore-graceful-termination-nginx.yaml | 11 ++++ 2 files changed, 16 insertions(+), 45 deletions(-) create mode 100644 content/en/examples/service/explore-graceful-termination-nginx.yaml diff --git a/content/en/docs/tutorials/services/pods-and-endpoint-termination-flow.md b/content/en/docs/tutorials/services/pods-and-endpoint-termination-flow.md index 2d812f9ddc..469a34a7ee 100644 --- a/content/en/docs/tutorials/services/pods-and-endpoint-termination-flow.md +++ b/content/en/docs/tutorials/services/pods-and-endpoint-termination-flow.md @@ -38,53 +38,13 @@ Let's say you have a Deployment containing of a single `nginx` replica {{< codenew file="service/pod-with-graceful-termination.yaml" >}} -```yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - name: nginx-deployment - labels: - app: nginx -spec: - replicas: 1 - selector: - matchLabels: - app: nginx - template: - metadata: - labels: - app: nginx - spec: - terminationGracePeriodSeconds: 120 # extra long grace period - containers: - - name: nginx - image: nginx:latest - ports: - - containerPort: 80 - lifecycle: - preStop: - exec: - # Real life termination may take any time up to terminationGracePeriodSeconds. - # In this example - just hang around for at least the duration of terminationGracePeriodSeconds, - # at 120 seconds container will be forcibly terminated. - # Note, all this time nginx will keep processing requests. - command: [ - "/bin/sh", "-c", "sleep 180" - ] +{{< codenew file="service/explore-graceful-termination-nginx.yaml" >}} ---- +Now create the Deployment Pod and Service using the above files: -apiVersion: v1 -kind: Service -metadata: - name: nginx-service -spec: - selector: - app: nginx - ports: - - protocol: TCP - port: 80 - targetPort: 80 +```shell +kubectl apply -f pod-with-graceful-termination.yaml +kubectl apply -f explore-graceful-termination-nginx.yaml ``` Once the Pod and Service are running, you can get the name of any associated EndpointSlices: diff --git a/content/en/examples/service/explore-graceful-termination-nginx.yaml b/content/en/examples/service/explore-graceful-termination-nginx.yaml new file mode 100644 index 0000000000..6d1f97a64d --- /dev/null +++ b/content/en/examples/service/explore-graceful-termination-nginx.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: Service +metadata: + name: nginx-service +spec: + selector: + app: nginx + ports: + - protocol: TCP + port: 80 + targetPort: 80 \ No newline at end of file From 2691061e9ea948ac1f9c671f21d8953a69f141bb Mon Sep 17 00:00:00 2001 From: Amol Mote Date: Mon, 28 Nov 2022 20:48:21 +0530 Subject: [PATCH 002/446] [hi] Localize content/hi/docs/reference/glossary/job.md Signed-off-by: Amol Mote --- content/hi/docs/reference/glossary/job.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 content/hi/docs/reference/glossary/job.md diff --git a/content/hi/docs/reference/glossary/job.md b/content/hi/docs/reference/glossary/job.md new file mode 100644 index 0000000000..a52140092d --- /dev/null +++ b/content/hi/docs/reference/glossary/job.md @@ -0,0 +1,19 @@ +--- +title: जॉब (Job) +id: job +date: 2018-04-12 +full_link: /docs/concepts/workloads/controllers/job/ +short_description: > + एक परिमित या बैच कार्य जो पूरा होने तक चलता है। + +aka: +tags: +- fundamental +- core-object +- workload +--- + एक परिमित या बैच कार्य जो पूरा होने तक चलता है। + + + +जॉब एक या अधिक {{}} ऑब्जेक्ट बनाता है और सुनिश्चित करता है कि उनमें से एक निर्दिष्ट संख्या सफलतापूर्वक समाप्त हो जाए। जैसे ही पॉड्स सफलतापूर्वक पूर्ण होते हैं, जॉब उस सफल समापन को ट्रैक करता है। \ No newline at end of file From ef075496bf15002334dcf41b6e21fa216f6aa3fe Mon Sep 17 00:00:00 2001 From: NitishKumar06 Date: Sun, 25 Dec 2022 18:38:01 +0530 Subject: [PATCH 003/446] Modified hi.toml to adopt new localization string for release page --- data/i18n/hi/hi.toml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/data/i18n/hi/hi.toml b/data/i18n/hi/hi.toml index c63259c557..a8ec25549d 100644 --- a/data/i18n/hi/hi.toml +++ b/data/i18n/hi/hi.toml @@ -1,6 +1,13 @@ # i18n strings for Hindi version of the site. # NOTE: Please keep the entries in alphabetical order when editing +# Avoid using conjunction_1. +# Must match the context in layouts/shortcodes/release-data.html +# Appears on https://kubernetes.io/releases/ +# For example the "and" in "Complete 1.25 Schedule and Changelog" +[conjunction_1] +other = "और" + [caution] other = "सावधानी:" @@ -240,6 +247,21 @@ other = "(रिलीज़ड: " [release_date_format] other = "2006-01-02" +# Deprecated. Planned for removal in a future release. +# Use [release_full_details_initial_text] instead. +[release_complete] +other = "पूर्ण" + +# Replace [release_complete] with [release_full_details_initial_text] +[release_full_details_initial_text] +other = "पूर्ण" + +[release_schedule] +other = "अनुसूची" + +[release_changelog] +other = "दलाव के अभिलेख" + [seealso_heading] other = "यह भी देखें" From 81ab20986ed93eb45a8ee735361d74af6d60ae4e Mon Sep 17 00:00:00 2001 From: NitishKumar06 Date: Wed, 5 Apr 2023 14:21:42 +0530 Subject: [PATCH 004/446] changes applied --- data/i18n/hi/hi.toml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/data/i18n/hi/hi.toml b/data/i18n/hi/hi.toml index a8ec25549d..48397cc34a 100644 --- a/data/i18n/hi/hi.toml +++ b/data/i18n/hi/hi.toml @@ -9,7 +9,7 @@ other = "और" [caution] -other = "सावधानी:" +other = "सावधान:" [cleanup_heading] other = "सफाई करना" @@ -249,8 +249,6 @@ other = "2006-01-02" # Deprecated. Planned for removal in a future release. # Use [release_full_details_initial_text] instead. -[release_complete] -other = "पूर्ण" # Replace [release_complete] with [release_full_details_initial_text] [release_full_details_initial_text] @@ -260,7 +258,7 @@ other = "पूर्ण" other = "अनुसूची" [release_changelog] -other = "दलाव के अभिलेख" +other = "बदलाव के अभिलेख" [seealso_heading] other = "यह भी देखें" From 0501cfa489fc666802fb2c5e052363b524773cc4 Mon Sep 17 00:00:00 2001 From: Brandon High Date: Tue, 18 Apr 2023 15:27:49 -0700 Subject: [PATCH 005/446] docs: Update kustomize examples to use non-deprecated resources key (id lang) --- .../docs/tasks/manage-kubernetes-objects/kustomization.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/content/id/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/id/docs/tasks/manage-kubernetes-objects/kustomization.md index 7cca240991..31a60ba26a 100644 --- a/content/id/docs/tasks/manage-kubernetes-objects/kustomization.md +++ b/content/id/docs/tasks/manage-kubernetes-objects/kustomization.md @@ -118,7 +118,7 @@ metadata: #### secretGenerator Kamu dapat membangkitkan Secret dari berkas atau pasangan _key-value_ literal. Untuk membangkitkan dari berkas, tambahkan entri pada daftar `files` di `secretGenerator`. -Contoh di bawah ini membangkitkan Secret dengan data dari berkas: +Contoh di bawah ini membangkitkan Secret dengan data dari berkas: ```shell # Membuat berkas password.txt @@ -719,14 +719,14 @@ _field_ lainnya yang bersinggungan di dalam **overlay** berbeda. Di bawah ini me ```shell mkdir dev cat < dev/kustomization.yaml -bases: +resources: - ../base namePrefix: dev- EOF mkdir prod cat < prod/kustomization.yaml -bases: +resources: - ../base namePrefix: prod- EOF @@ -837,5 +837,3 @@ deployment.apps "dev-my-nginx" deleted * [Buku Kubectl](https://kubectl.docs.kubernetes.io) * [Rujukan Perintah Kubectl](/docs/reference/generated/kubectl/kubectl-commands/) * [Rujukan API Kubernetes](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/) - - From d2d1242815ab093a756bdb87cffbdc2998d78d48 Mon Sep 17 00:00:00 2001 From: "m.nabokikh" Date: Thu, 4 May 2023 11:15:45 +0200 Subject: [PATCH 006/446] KEP-3325: Promote SelfSubjectReview to GA Signed-off-by: m.nabokikh --- .../access-authn-authz/authentication.md | 16 ++++++++-------- .../feature-gates.md | 5 +++-- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md index ed0c8ef5cf..2ee21013c3 100644 --- a/content/en/docs/reference/access-authn-authz/authentication.md +++ b/content/en/docs/reference/access-authn-authz/authentication.md @@ -1221,7 +1221,7 @@ The following `ExecCredential` manifest describes a cluster information sample. ## API access to authentication information for a client {#self-subject-review} -{{< feature-state for_k8s_version="v1.27" state="beta" >}} +{{< feature-state for_k8s_version="v1.28" state="stable" >}} If your cluster has the API enabled, you can use the `SelfSubjectReview` API to find out how your Kubernetes cluster maps your authentication information to identify you as a client. This works whether you are authenticating as a user (typically representing @@ -1231,11 +1231,11 @@ a real person) or as a ServiceAccount. Request example (the body would be a `SelfSubjectReview`): ``` -POST /apis/authentication.k8s.io/v1beta1/selfsubjectreviews +POST /apis/authentication.k8s.io/v1/selfsubjectreviews ``` ```json { - "apiVersion": "authentication.k8s.io/v1beta1", + "apiVersion": "authentication.k8s.io/v1", "kind": "SelfSubjectReview" } ``` @@ -1243,7 +1243,7 @@ Response example: ```json { - "apiVersion": "authentication.k8s.io/v1beta1", + "apiVersion": "authentication.k8s.io/v1", "kind": "SelfSubjectReview", "status": { "userInfo": { @@ -1286,7 +1286,7 @@ By providing the output flag, it is also possible to print the JSON or YAML repr {{% tab name="JSON" %}} ```json { - "apiVersion": "authentication.k8s.io/v1alpha1", + "apiVersion": "authentication.k8s.io/v1", "kind": "SelfSubjectReview", "status": { "userInfo": { @@ -1315,7 +1315,7 @@ By providing the output flag, it is also possible to print the JSON or YAML repr {{% tab name="YAML" %}} ```yaml -apiVersion: authentication.k8s.io/v1alpha1 +apiVersion: authentication.k8s.io/v1 kind: SelfSubjectReview status: userInfo: @@ -1352,8 +1352,8 @@ By default, all authenticated users can create `SelfSubjectReview` objects when You can only make `SelfSubjectReview` requests if: * the `APISelfSubjectReview` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) - is enabled for your cluster (enabled by default after reaching Beta) -* the API server for your cluster has the `authentication.k8s.io/v1alpha1` or `authentication.k8s.io/v1beta1` + is enabled for your cluster (enabled by default after reaching Beta and will be removed in Kubernetes v1.30) +* the API server for your cluster has the `authentication.k8s.io/v1alpha1`, `authentication.k8s.io/v1beta1`, or `authentication.k8s.io/v1` {{< glossary_tooltip term_id="api-group" text="API group" >}} enabled. {{< /note >}} diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md index 8441f0bc18..02a873d0ad 100644 --- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md +++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md @@ -63,8 +63,6 @@ For a reference to old feature gates that are removed, please refer to | `APIPriorityAndFairness` | `true` | Beta | 1.20 | | | `APIResponseCompression` | `false` | Alpha | 1.7 | 1.15 | | `APIResponseCompression` | `true` | Beta | 1.16 | | -| `APISelfSubjectReview` | `false` | Alpha | 1.26 | 1.26 | -| `APISelfSubjectReview` | `true` | Beta | 1.27 | | | `APIServerIdentity` | `false` | Alpha | 1.20 | 1.25 | | `APIServerIdentity` | `true` | Beta | 1.26 | | | `APIServerTracing` | `false` | Alpha | 1.22 | 1.26 | @@ -228,6 +226,9 @@ For a reference to old feature gates that are removed, please refer to | `AdvancedAuditing` | `false` | Alpha | 1.7 | 1.7 | | `AdvancedAuditing` | `true` | Beta | 1.8 | 1.11 | | `AdvancedAuditing` | `true` | GA | 1.12 | - | +| `APISelfSubjectReview` | `false` | Alpha | 1.26 | 1.26 | +| `APISelfSubjectReview` | `true` | Beta | 1.27 | 1.27 | +| `APISelfSubjectReview` | `true` | GA | 1.28 | - | | `CPUManager` | `false` | Alpha | 1.8 | 1.9 | | `CPUManager` | `true` | Beta | 1.10 | 1.25 | | `CPUManager` | `true` | GA | 1.26 | - | From 30841950a6e4204d4fb18809a1b4177dcf198fe9 Mon Sep 17 00:00:00 2001 From: Maksim Nabokikh Date: Thu, 4 May 2023 22:25:45 +0200 Subject: [PATCH 007/446] Apply suggestions from code review Co-authored-by: Tim Bannister --- .../en/docs/reference/access-authn-authz/authentication.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md index 2ee21013c3..c3bbed6f88 100644 --- a/content/en/docs/reference/access-authn-authz/authentication.md +++ b/content/en/docs/reference/access-authn-authz/authentication.md @@ -1352,8 +1352,10 @@ By default, all authenticated users can create `SelfSubjectReview` objects when You can only make `SelfSubjectReview` requests if: * the `APISelfSubjectReview` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) - is enabled for your cluster (enabled by default after reaching Beta and will be removed in Kubernetes v1.30) -* the API server for your cluster has the `authentication.k8s.io/v1alpha1`, `authentication.k8s.io/v1beta1`, or `authentication.k8s.io/v1` + is enabled for your cluster (not needed for Kubernetes {{< skew currentVersion >}}, but older + Kubernetes versions might not offer this feature gate, or might default it to be off) +* (if you are running a version of Kubernetes older than v1.28) the API server for your + cluster has the `authentication.k8s.io/v1alpha1` or `authentication.k8s.io/v1beta1` {{< glossary_tooltip term_id="api-group" text="API group" >}} enabled. {{< /note >}} From c75d30872ae489cbb353593e9fd44b9c6bf5858e Mon Sep 17 00:00:00 2001 From: carlory Date: Mon, 8 May 2023 17:39:23 +0800 Subject: [PATCH 008/446] move DelegateFSGroupToCSIDriver featuregate --- .../command-line-tools-reference/feature-gates-removed.md | 7 +++++++ .../command-line-tools-reference/feature-gates.md | 6 ------ 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md b/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md index 50d1dd29bf..734acc74db 100644 --- a/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md +++ b/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md @@ -117,6 +117,9 @@ In the following table: | `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | 1.19 | | `DefaultPodTopologySpread` | `true` | Beta | 1.20 | 1.23 | | `DefaultPodTopologySpread` | `true` | GA | 1.24 | 1.25 | +| `DelegateFSGroupToCSIDriver` | `false` | Alpha | 1.22 | 1.22 | +| `DelegateFSGroupToCSIDriver` | `true` | Beta | 1.23 | 1.25 | +| `DelegateFSGroupToCSIDriver` | `true` | GA | 1.26 | 1.27 | | `DynamicAuditing` | `false` | Alpha | 1.13 | 1.18 | | `DynamicAuditing` | - | Deprecated | 1.19 | 1.19 | | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 | @@ -511,6 +514,10 @@ In the following table: - `DefaultPodTopologySpread`: Enables the use of `PodTopologySpread` scheduling plugin to do [default spreading](/docs/concepts/scheduling-eviction/topology-spread-constraints/#internal-default-constraints). +- `DelegateFSGroupToCSIDriver`: If supported by the CSI driver, delegates the + role of applying `fsGroup` from a Pod's `securityContext` to the driver by + passing `fsGroup` through the NodeStageVolume and NodePublishVolume CSI calls. + - `DynamicAuditing`: Used to enable dynamic auditing before v1.19. - `DynamicKubeletConfig`: Enable the dynamic configuration of kubelet. The diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md index 02a873d0ad..388bb46b41 100644 --- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md +++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md @@ -268,9 +268,6 @@ For a reference to old feature gates that are removed, please refer to | `DaemonSetUpdateSurge` | `false` | Alpha | 1.21 | 1.21 | | `DaemonSetUpdateSurge` | `true` | Beta | 1.22 | 1.24 | | `DaemonSetUpdateSurge` | `true` | GA | 1.25 | - | -| `DelegateFSGroupToCSIDriver` | `false` | Alpha | 1.22 | 1.22 | -| `DelegateFSGroupToCSIDriver` | `true` | Beta | 1.23 | 1.25 | -| `DelegateFSGroupToCSIDriver` | `true` | GA | 1.26 |-| | `DevicePlugins` | `false` | Alpha | 1.8 | 1.9 | | `DevicePlugins` | `true` | Beta | 1.10 | 1.25 | | `DevicePlugins` | `true` | GA | 1.26 | - | @@ -509,9 +506,6 @@ Each feature gate is designed for enabling/disabling a specific feature: - `DaemonSetUpdateSurge`: Enables the DaemonSet workloads to maintain availability during update per node. See [Perform a Rolling Update on a DaemonSet](/docs/tasks/manage-daemon/update-daemon-set/). -- `DelegateFSGroupToCSIDriver`: If supported by the CSI driver, delegates the - role of applying `fsGroup` from a Pod's `securityContext` to the driver by - passing `fsGroup` through the NodeStageVolume and NodePublishVolume CSI calls. - `DevicePlugins`: Enable the [device-plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/) based resource provisioning on nodes. - `DisableAcceleratorUsageMetrics`: From b3c81f249c72a47327cf691d2fe93c3a6a5bfc21 Mon Sep 17 00:00:00 2001 From: able8 Date: Tue, 9 May 2023 22:19:16 +0800 Subject: [PATCH 009/446] Add go-template to kubectl output format --- content/en/docs/reference/kubectl/cheatsheet.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md index 4f315c5e58..45699f2ce3 100644 --- a/content/en/docs/reference/kubectl/cheatsheet.md +++ b/content/en/docs/reference/kubectl/cheatsheet.md @@ -430,6 +430,8 @@ Output format | Description --------------| ----------- `-o=custom-columns=` | Print a table using a comma separated list of custom columns `-o=custom-columns-file=` | Print a table using the custom columns template in the `` file +`-o=go-template=